This Privacy Policy ("Policy") explains how Next Visit ("Next Visit", "we", "us", or "our") collects, uses, discloses, and protects personal information in connection with the Next Visit application at next-visit.app and the trip planner at go.next-visit.app (together, the "Service"). Next Visit is operated from Queensland, Australia. By accessing or using the Service, you acknowledge that you have read and understood this Policy.

1. Scope of this Policy

1. This Policy applies to the personal information we process about users of the Service.
2. The Service is intended for individuals aged 18 years or older. It is not directed to children, and we do not knowingly collect personal information from children (see clause 11).
3. This Policy does not apply to third-party products, websites, or services that we do not own or control, including the travel providers you reach through links in the planner. Your use of those services is governed by their own terms and privacy policies.

2. Information we collect

1. Information you provide. Depending on how you use the Service, you may provide:
   1. your first name, which you enter when you begin using the app;
   2. an optional date of birth, if you choose to add it to your profile;
   3. an optional email address, only if you choose to link one for account recovery (we use a one-time sign-in link or a six-digit code; there are no passwords);
   4. details of the shared spaces you join. Next Visit has two kinds: a couple space for you and one partner, and a crew for a group of any size. For a couple space this includes the names you each choose, a private pairing code that links your two devices, and details you add such as your anniversary date. For a crew it includes the crew's name, the display name you use in that crew, and a private invite code or link that lets others join it. One account can hold one couple space and any number of crews;
   5. an optional home city, if you choose to set one (used by paid couple features to show each partner's sunset time, local time, and the distance between you); the app also records your device's time zone for the same features - we never ask for or read your device's GPS location;
   6. a flight number and date, if you choose to share a flight so the other people in that space can follow it; and
   7. content you create, including the trips you save (destinations, dates, and place names), photos and videos you add together with their captions, shared lists (such as a bucket list, dream destinations and a trip's booking list), notes, and your guesses in the daily postcard game. In a couple space this also includes your chosen song, quiz answers, and the one-tap check-ins you send your partner (such as "thinking of you" or a mood).
2. Information collected automatically. When you use the Service, our hosting and infrastructure providers automatically record limited technical information, such as your Internet Protocol (IP) address, device and browser characteristics, operating system, and date and time stamps. This information is used to operate and secure the Service, to troubleshoot, and to prevent abuse (for example, rate-limiting requests). If you choose to enable notifications, we also store a push notification token so that we can send the alerts you have enabled.
3. Photos and videos. When you add media to a memory you can pick an existing file or capture a new photo or video with your camera; recording a video also uses the microphone, and only while you are recording. We access the camera and microphone only at the moment you choose to capture - never in the background. Media is stored as you provide it, including any information embedded in the file (such as the date taken or location recorded by your camera).
4. Subscription information. If you purchase Next Visit Plus (the single paid tier), we receive your subscription status and purchase history (what was bought and when, and an anonymous app-user identifier) from Apple and RevenueCat, so we can unlock the paid features. We never receive your card number.
5. Health data from Apple Health (optional, paid features only). The paid tier (Next Visit Plus) includes features that let the two of you share how you are doing - daily steps, last night's sleep, and wake-up times. These work only if you choose to connect Apple Health, which requires your explicit permission through iOS:
   1. with your permission, we read your daily step count and your sleep analysis (time asleep, sleep stages, and wake time) from Apple Health; we never write anything to Apple Health;
   2. the readings you sync are stored in your private couple space and shown to that one partner - that is the entire purpose of the feature;
   3. health data is never shown in a crew. Health sharing exists only in a couple space, between the two paired members. Members of any crew you belong to cannot see your steps, sleep, or wake times;
   4. health data is never used for advertising or marketing, is never sold, and is never shared with any third party except the hosting provider that stores your space on our behalf (clause 5(c));
   5. you can revoke access at any time in the iOS Settings app under Privacy & Security → Health, and you can instead log steps or sleep by hand without connecting Apple Health at all; and
   6. if you never connect Apple Health, no health data is collected.
6. Information we do not collect. For clarity, the Service does not:
   1. use any third-party analytics, advertising, or tracking technologies, and does not use advertising identifiers;
   2. request or collect precise location from your device's operating system (the app does not ask for location permission - place features work from the city and place names you type);
   3. access your contacts, or scan or monitor your photo library in the background - you choose exactly what to add, and the camera and microphone are used only while you actively take a photo or record a video; or
   4. collect or store your payment-card or financial details - the paid subscription (Next Visit Plus) is sold as an in-app purchase processed by the Apple App Store, which handles your payment information under its own terms.

3. How we use your information

We process personal information for the following purposes:

1. to create and operate your account and your private shared spaces, and to keep them in working order;
2. to link the devices of the people in a space - your partner in a couple space, or the members of a crew - and synchronise shared content between you in real time;
3. to send a sign-in link or code when you request to recover access, and to send notifications you have enabled;
4. to provide the artificial-intelligence suggestions you request (see clause 7);
5. to show the other members of a space the information you have chosen to share there, such as the trips and memories you add, and - in a couple space only - synced health readings, your home city's local time and sunset, and the check-ins you send;
6. to respond to your enquiries and provide customer support;
7. to maintain the security and integrity of the Service, troubleshoot problems, and prevent fraud or abuse; and
8. to comply with applicable legal obligations and to establish, exercise, or defend legal claims.

4. Legal bases for processing (EEA and UK users)

If you are located in the European Economic Area or the United Kingdom, we rely on the following legal bases:

1. performance of a contract, to provide the Service you have requested;
2. your consent, which you may withdraw at any time, for processing such as sending you notifications;
3. our legitimate interests in operating, securing, and improving the Service, where those interests are not overridden by your rights; and
4. compliance with a legal obligation to which we are subject.

5. How and with whom we share information

1. We do not sell your personal information, and we do not share it for cross-context behavioural or targeted advertising.
2. The other members of your space. Content is shared with the space you put it in, and nowhere else. There are no public areas of the Service.
   1. In a couple space, content you add - memories, photos, lists, and profile details such as your name and date of birth - is visible to, and editable by, the one partner you have invited, and only to them.
   2. In a crew, the same content is visible to, and editable by, every current member of that crew. A crew has no size limit and its membership can change over time, so please treat anything you add to a crew as visible to that whole group.
   3. Crews are joined by invite link or code. Anyone who has a crew's invite link or code can join that crew and will then see the content already in it, including memories and photos added before they joined. Share a crew link only with people you want in the space, and treat it like a key to that space.
   4. Spaces are separate from each other. Members of one space cannot see the content of another space you belong to. Your crews cannot see your couple space, and vice versa - the only thing that crosses between your own spaces is content you personally choose to enter once, such as your guess in the daily postcard game.
   If you share a trip link generated by the planner, the trip details encoded in that link are visible to anyone you send it to.
3. Service providers. We share personal information with a limited number of providers who process it on our behalf, under contract, and only as needed to operate the Service:
   1. Google (Firebase Authentication, Cloud Firestore, Cloud Storage, and Firebase Cloud Messaging) - to host your account, database, and media, and to deliver notifications;
   2. Anthropic - to power the AI features described in clause 7, processing the inputs you submit to those features;
   3. Resend - to send account-recovery email;
   4. Vercel - to host the website and our server functions, including standard server logs;
   5. Spotify - to search for songs when you set a song; we send only the search text and do not connect to or read your Spotify account;
   6. Apple - to process the in-app purchase and provide your subscription status when you buy Next Visit Plus; Apple handles your payment under its own terms;
   7. RevenueCat - to manage subscription status and entitlements; it receives your purchase history and an anonymous app-user identifier, never your card details;
   8. Pexels and Wikimedia - to retrieve stock destination imagery by place name; we do not send them your personal information; and
   9. Google Maps Platform (including the Maps and Places APIs) - to convert the city and place names you type into coordinates and to display maps of your trips; we do not access your device's GPS location;
   10. Open-Meteo and OpenStreetMap (Nominatim) - to suggest city names as you type in city fields; we send only the text you type; and
   11. AeroDataBox (via RapidAPI) - to look up a flight's route and times when you choose to share a flight; we send only the flight number and date you enter.
4. Travel partners (planner). The planner links out to third-party travel services, including Skyscanner, Booking.com, Stay22, Viator, GetYourGuide, Klook, 12Go, Trainline, Rome2Rio, Airalo, SafetyWing, and Flytographer. Some links are affiliate links, meaning we may earn a commission at no extra cost to you. When you open one of these links, your interaction is with that third party under its own terms and privacy policy.
5. Legal and safety. We may disclose information where we believe in good faith that it is required by law, or necessary to protect the rights, property, safety, or security of our users, the public, or Next Visit.
6. Business transfers. We may disclose or transfer information in connection with, or during negotiations of, a merger, financing, acquisition, or sale of all or part of our business. We will require the recipient to honour this Policy.

6. Cookies and similar technologies

1. We do not use advertising cookies, tracking pixels, or third-party analytics.
2. We store a small number of items on your device using browser storage - such as your light or dark appearance preference and your sign-in state - because they are essential to making the Service work. They are not used to track you across other websites.
3. If you add the iOS home-screen widgets, the app keeps a small copy of the information the widgets display - your names, home cities, time zones, your next trip's name and date, and a sign-in token that lets a widget tap send a check-in - in a protected storage area on your device that only the Next Visit app and its widgets can read. This information stays on your device and is removed if you sign out or the paid tier ends.
4. Certain third-party booking panels in the planner (for example, Stay22 and GetYourGuide) may set their own cookies when you interact with them, for instance to attribute a booking. Those cookies are set and governed by each partner's own privacy policy, not ours.

7. Artificial-intelligence features

1. Certain features - such as date ideas, quiz insights, and trip suggestions - are generated using a third-party AI provider, Anthropic.
2. When you use one of these features, the inputs needed to produce a response (for example, your prompt and relevant details you provide) are sent to the provider to generate the result.
3. Your inputs and outputs are not used to train AI models.
4. AI output is generated automatically, may be inaccurate or incomplete, and is provided for inspiration only. It is not professional, legal, financial, medical, or travel advice.

8. International transfers

We are based in Australia, and the providers described in clause 5 may store and process your information in other countries, including the United States. Where information is transferred across borders, we rely on providers that are expected to apply appropriate safeguards for that transfer. By using the Service, you understand that your information may be processed in these locations.

9. How long we keep your information

1. We retain your information for as long as your spaces are active, or as needed to provide the Service to you and the other members of those spaces.
2. When you delete your account, we delete your account record from our authentication system and remove you from every space you belong to. Content you created in a shared space may remain available to the people still in it - your partner, or the rest of the crew - as described in clause 5(b). Where you were the only remaining member of a space, that space and its content are deleted with your account.
3. Leaving a single space works the same way: you can leave a crew (or a couple space) without deleting your account, and the content you added stays with the space for the members who remain. Deleting a space you are the last member of deletes its content.
4. Backups and standard server logs are retained for a limited period and then deleted or overwritten in the ordinary course of operations.

10. How we keep your information safe

We use reasonable technical and organisational measures designed to protect personal information, including server-enforced access controls that limit each space to its current members - the two paired partners of a couple space, or the current members of a crew - and that keep your separate spaces walled off from one another. Because the Service is anonymous-first, we hold very little information capable of identifying you. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

11. Children's privacy

The Service is intended for people aged 18 years or older and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@next-visit.app and we will take reasonable steps to delete it.

12. Your privacy rights

1. You may edit or delete content directly in the app at any time.
2. You may leave or delete an individual space from You → Your Spaces, and you may delete your account from You → delete account, which removes your account from our authentication system (so a linked email may be reused) and removes you from every space you belong to.
3. You may turn notifications on or off in You → Notifications, and you may decline to link an email address if you would prefer that we hold none.
4. Subject to applicable law, you may have the right to request access to, correction of, deletion of, or a copy of your personal information, and to object to or request restriction of certain processing. To make a request, contact us using the details in clause 17. We will respond as required by applicable law and may need to verify your identity.

13. United States state privacy rights

1. Residents of certain US states may have rights to know, access, correct, delete, and obtain a copy of their personal information, and to opt out of the "sale" or "sharing" of personal information and of targeted advertising.
2. We do not sell or share personal information as those terms are defined under applicable US state privacy laws, and we do not use personal information for targeted advertising.
3. To exercise any applicable right, contact us using the details in clause 17. We will not discriminate against you for exercising your rights.

14. Australia and other regions

We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth). If you have a privacy concern, you may contact us using the details in clause 17. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner. Users in other regions may have additional rights under their local laws, which we will honour as applicable.

15. Account deletion

You can delete your account at any time from You → delete account within the app. Deletion permanently removes your account from our authentication system and removes you from every space you belong to - your couple space and any crews. As noted in clause 5(b), content created jointly within a shared space may remain visible to the members who remain (your partner, or the rest of the crew) unless they also delete it; a space where you were the last member is deleted outright. You can also leave or delete an individual space, without deleting your account, from You → Your Spaces. If you need help deleting your account or data, contact us at support@next-visit.app.

16. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will revise the "last updated" date above and, where appropriate, notify you within the app. If we introduce features that process additional categories of information (for example, optional paid features), we will update this Policy before those features are made available to you. Your continued use of the Service after a change takes effect constitutes acceptance of the updated Policy.

17. How to contact us

If you have questions about this Policy or our handling of your information, contact us at support@next-visit.app, or by post at: Next Visit, 7 Copeland Street, Milton, Brisbane, Queensland 4064, Australia.

18. How to access, update, or delete your information

You have the right to request access to the personal information we hold about you, to ask that we correct or delete it, and to withdraw any consent you have given. Many of these actions can be performed directly in the app (see clauses 12 and 15). For anything else, contact us at support@next-visit.app and we will respond in accordance with applicable law. You may also review our Terms of Service and visit Support.