Where in the World…
Privacy Policy
Effective 14 November 2026
- Your travellers, trips, passports and costs are yours. We use them only to run the app for you.
- We don't sell your information, show you adverts, or track you across other apps and websites.
- Booking files you choose to scan are sent to an AI service only after you agree, and only to read the bookings.
- Copies of your documents are encrypted on your device before they are uploaded. Nobody else, including us, can open them.
- You can delete your account and everything in it from inside the app at any time.
1. Who we are
Where in the World… (“the app”, including its website) is made by The Fall Guy Creative (Pty) Ltd, a company registered in South Africa (“we”, “us”). We are responsible for the personal information processed through the app.
Questions about privacy can be sent to our Information Officer at [CONTACT EMAIL].
2. What information we collect
Information you give us
| What | Examples |
|---|---|
| Your account | Your email address, or the details Apple shares when you use Sign in with Apple (which can be a private relay address), and your display name. |
| Travellers | Names, date of birth, ID number, tax number, residential address, contact number and email, home countries and the dates they applied, tax country. |
| Passports and visas | Issuing country, passport and visa numbers, issue, expiry and “full” dates, and which passport holds each visa. |
| Documents | Driving licences and permits, loyalty and frequent-flyer numbers, travel insurance, health and vaccination certificates, residence permits and similar travel documents, with their numbers, dates and any copies (photos or PDFs) you add. |
| Trips and plans | Dates, countries, legs, reasons for travel, bookings (flights, stays, car hire, outings), budgets, costs and who paid. |
| Files you choose | Booking confirmations, e-tickets, invoices, photos or screenshots you choose to scan; passport photos you choose to read; Excel files you import. |
| Sharing | The people you share a traveller or trip with, their access level, and their names as shown in the app. |
Information created as you use the app
- A count of how many scans and look-ups you make each day, so that use stays within fair limits.
- Basic technical records kept by our hosting provider, such as error logs, which we use only to keep the service working.
We do not collect your location, contacts, calendar, camera roll (beyond the photos you pick), or any advertising identifier.
3. How we use it
- To run the app: storing your travellers and trips, syncing them across your devices and the website, and showing them to the people you share them with.
- To work things out for you: days in and out of each country, tax-day limits, visa and passport warnings, budgets, exchange rates and reports.
- To read bookings and look up flights, when you ask it to (see section 4).
- To send you reminders on your device, such as completing a trip that has ended or a trip being merged with yours.
- To keep the service secure and prevent misuse.
We process your information because it is needed to provide the app you asked for, because you have agreed (for example, to booking scanning), or because we have a legitimate interest in keeping the service secure. We do not use your information for marketing, profiling or advertising.
4. Booking scanning and flight look-ups
When you scan a booking confirmation or look up a flight, the app first asks for your permission. If you agree, the files or text you chose are sent through our server to Anthropic, an AI provider, to find the booking details. The details found are shown to you to check before anything is added to a trip.
- Only the files you chose are sent, and only when you start a scan or look-up.
- Anthropic processes them for us as a service provider. Under its commercial terms it may not use them to train its models. It may keep them for a limited time for safety and misuse checks.
- You can say no, or change your mind later in the app, under Account › Privacy, and add bookings yourself instead.
Passport photos you choose to read are processed on your device. They are not sent to the AI service, and neither are document copies.
5. Documents and their copies
The Documents area gives the strongest protection in the app, because it can hold copies of identity documents.
- End-to-end encryption. Copies you add are encrypted on your device with a key that only exists on your own devices (kept in your device's keychain and synced through iCloud Keychain). Our servers store only the encrypted copy. We, Google and anyone else without your key cannot open it.
- Locked in the app. Documents open only with Face ID, Touch ID or your device passcode, lock again after a short time, and are hidden in the app switcher.
- Recovery key. You are given a recovery key when you start using Documents. If you lose all your devices and your iCloud Keychain, the recovery key is the only way to open your copies again. We cannot recover them for you.
- Offline copies. Documents you mark “Available offline” are kept on your device, still encrypted, so you can open them without a connection.
- Location removed. Location and camera details are removed from photos before they are encrypted.
- Not shared unless you choose. Documents are not shared with people who can see a traveller unless you switch sharing on for that document, in which case it is encrypted again so only they can open it. They are left out of reports, exports and booking scanning unless you include them.
- On the website. The website shows document details, but copies can only be opened there if you unlock them with a passkey.
6. Who we share it with
We don't sell or rent your personal information. We share it only:
- With people you choose. When you share a traveller or a trip, the people you share it with can see it, and edit it if you give them edit access. If you merge trips, the people on both trips can see the merged trip.
- With our service providers, who process it for us under contract:
- Google (Firebase): sign-in, database, server functions and website hosting.
- Apple: Sign in with Apple and app distribution.
- Anthropic: reading booking files and looking up flights, only when you agree (section 4).
- An exchange-rate service, which receives only currency codes, never your personal information.
- When the law requires it, for example in response to a valid legal request.
7. Where it is stored
Your information (with document copies only in encrypted form) is stored on Google Cloud servers, including in the United States, and booking files you agree to scan are processed by Anthropic in the United States. These providers protect personal information under contracts that require safeguards comparable to South African and other applicable data-protection law.
8. How we protect it
- Information is encrypted in transit and at rest by our providers.
- Security rules mean only you, and the people you share with, can read your records.
- ID and tax numbers, and the Documents area, stay hidden in the app until you unlock them with Face ID, Touch ID or your device passcode.
- Document copies are end-to-end encrypted (section 5).
- The website is for signed-in users only.
No system is completely secure, but we take reasonable steps to protect your information and will tell you and the relevant regulator if a breach affects you, as the law requires.
9. How long we keep it
We keep your information for as long as you have an account. When you delete a traveller, trip, passport or document, it is removed, including its copies. When you delete your account, your travellers, trips, documents and their copies, plans you organise, share codes and account are deleted. Trips you were part of that someone else organises stay with them. Backups held by our providers are overwritten in their normal cycle.
10. Your choices and rights
You can see, change and delete your information in the app at any time, and export it as reports or Excel files. You can delete your account in the app, in the Account tab. Depending on where you live, including under South Africa's Protection of Personal Information Act (POPIA), the UK GDPR and the EU GDPR, you also have the right to:
- ask for a copy of your information, or for it to be corrected or deleted;
- object to or restrict how it is used, and withdraw consent you have given;
- complain to a data-protection regulator. In South Africa this is the Information Regulator (inforegulator.org.za).
To use these rights, contact us at [CONTACT EMAIL]. We'll reply within 30 days.
11. Children
Accounts are for adults. A parent or guardian may add their children as travellers to record family trips; that information is managed by the account holder and protected in the same way.
12. Changes to this policy
If we change this policy, we'll update the date at the top and, for important changes, tell you in the app.