Privacy policy
Effective date: 13 October 2026
In short
- Didventure is for adults who want to show the adventures they did and see what others are doing.
- Your exact location never leaves your phone. When you post, your location is shown no closer than about 1 km, or not at all if you choose Hidden.
- We remove the hidden location and camera data (EXIF and video metadata) from your photos and videos on your phone, before they are uploaded.
- New adventures are visible to Everyone unless you choose Followers or Only me. You can change the default in Settings → Privacy.
- We do not sell your data and we do not show you targeted ads.
- You can download your data and delete your account in the app: Settings → Account.
- Paying for Didventure Blaze never buys more privacy, and nobody can pay to see where you go.
1. Who we are
[YOUR FULL LEGAL NAME], an individual trading as Didventure, at [ADDRESS] ("Didventure", "we"), is the controller of the personal data described here. Company registration number: none yet (to be added when a company is formed).
Contact for privacy questions and requests: privacy@didventure.com. Postal address: [ADDRESS].
This policy covers the Didventure apps for Android and iOS and the
website didventure.com. It does not cover the websites of
booking partners and operators you open from Didventure; they have their
own policies.
2. Who can use Didventure
You can browse without an account. To create an account, post an adventure or add a spot you must be 18 or older. We ask you to confirm this when you sign up, and again before your first post. If we learn that an account belongs to someone under 18, we close it and delete its content.
3. What we collect and why
| What | Examples | Where it comes from | Why we use it | Legal basis |
|---|---|---|---|---|
| Account | Email address, password (kept by our sign-in provider, Google Firebase, never by us), account id | You | To create and secure your account and let you sign in | Contract (GDPR Art. 6(1)(b)) |
| Age confirmation | That you confirmed you are 18 or older, and when | You | To keep Didventure adults-only | Contract; our legitimate interest in user safety (Art. 6(1)(f)) |
| Profile | Display name, handle, bio, photo, home region (free text, never your address), interests (categories) | You | To show your public profile and Passport | Contract |
| Adventures (posts) | Photos and videos, your story, the date, the spot, the category and intensity, who can see it | You | To publish and show your adventures, stamp your Passport | Contract |
| Approximate location | The location stored in a photo or video you pick (read on your phone), or, if it has none, one approximate position when you tap "use my location" while logging | Your photos and videos; your phone (approximate location permission only) | To suggest spots near you and show roughly where an adventure happened. It is reduced to a 1 km grid on your phone; the exact position is never stored and never sent | Contract; your permission in the phone's settings |
| Spots you add | The pin you place for a new spot, its name and details | You | To add the place to Didventure. A spot is a public place, stored to about 100 m | Contract |
| Social activity | Who you follow, Stokes you give and get, saves, blocks, your activity list | You and other users | To run the Feed, profiles, Bucket list and notifications | Contract |
| Reviews and completions | Rating, review text, when you did it, evidence for a verified stamp (a QR code or booking reference, stored only as a scrambled digest) | You and operators | To show reviews and verified Passport stamps | Contract |
| Reports, blocks and moderation | What you reported and why, decisions, statements of reasons, appeals | You and other users | To keep Didventure safe and meet our legal duties for online platforms | Legal obligation (Art. 6(1)(c), EU Digital Services Act); legitimate interest in safety |
| Notifications | A push token for your device, which notifications you switched on | Your phone | To send the notifications you chose | Contract; your permission in the phone's settings |
| Purchases (when Didventure Blaze or packs are on sale) | Which product, store transaction ids, dates, whether it renews | Apple or Google, through RevenueCat | To give you what you bought on every device and handle refunds | Contract; legal obligation (accounting) |
| Booking clicks | Which offer you opened and when, with a session code that changes daily; no IP address | The app | To count referrals and settle them with partners | Legitimate interest (Art. 6(1)(f)) |
| Usage analytics | Not collected in version 1.0: the app has no analytics service. If we add one later, the app asks for your consent first and this policy changes before it starts | — | — | — |
| Crash reports | Error details, device model, operating system, app version. No IP address, no user id, no name or email, and no content (no text, photos or locations); ids and addresses in error messages are masked before a report leaves your phone or our servers | The app, through Sentry (EU) | To find and fix crashes | Legitimate interest in a working, secure app (Art. 6(1)(f)) |
| Support | Your messages and our replies | You | To answer you | Contract; legitimate interest |
| Server logs | Time, request type, result and your account id at our servers (no IP address); IP addresses only at our network provider, Cloudflare, which protects the service | Your device | To keep the service running and protect it against abuse and attacks | Legitimate interest |
We do not collect: your exact location, your location in the background, your contacts, your photo library (you pick each photo or video yourself with the system picker), your date of birth, phone number, or advertising ids. We do not track you across other companies' apps or websites.
4. How location works
- The app asks only for approximate location, and only when you use it while logging an adventure.
- If a photo or video you pick carries a location, the app reads it on your phone to suggest nearby spots.
- Your phone turns that position into a 1 km cell before anything is saved. The exact position never leaves your phone.
- When you post with Rounded location (the default), others see a position no closer than about 1 km. With Hidden, no location of yours is attached; only the spot is shown.
- The adventure globe shows spots, not people: each pin sits on the spot's public location, snapped to about 1 km. Followers-only, only-me and hidden-location adventures never appear on it.
- Places we mark as sensitive (private land, protected habitats) always hide location.
- Photos and videos lose their embedded GPS and camera data on your phone before upload.
- Version 1.0 sends no usage analytics at all. Crash reports never contain coordinates.
5. Who can see what
| Item | Who sees it |
|---|---|
| Your profile (name, handle, photo, bio, counts) | Everyone, including people without an account, in the app. Profiles are not published on the web in this version |
| An adventure set to Everyone (the default) | Everyone, after it passes review: the Feed, the spot's page, your profile and the globe in the app |
| An adventure set to Followers | People who follow you |
| An adventure set to Only me | Only you (it still counts in your Passport) |
| Who stoked an adventure, followers and following | Other users, except people who blocked each other |
| Your email address | Only you and us. Never shown to other users |
| People you blocked | Only you (Settings → Blocked people) |
| Reports you make | The moderation team. The person you reported is not told who reported them |
You choose who sees each adventure when you post it, and you can change your defaults at any time in Settings → Privacy. In this version an adventure cannot be edited or deleted in the app after posting: write to support@didventure.com and we remove it, or delete your account to remove everything.
6. Who we share data with
We do not sell personal data. We share it only with:
Service providers who work for us under contracts that bind them to our instructions (GDPR Art. 28):
| Provider | What they do | Where |
|---|---|---|
| Google (Firebase, Google Maps) | Sign-in, push notifications, maps in the Android app | Google's global infrastructure, including the US |
| Hetzner Online | Hosts our servers and database | Germany (Falkenstein) |
| Cloudflare | Protects and speeds up our website and servers; stores and delivers photos and videos (R2); forwards email to our addresses | Photos and videos stored in the EU; delivery and protection from servers near you |
| Apple (Apple Maps) | Maps and the globe in the iPhone app | Apple's global infrastructure, including the US |
| Sentry | Crash reports | EU (Germany) |
| RevenueCat | Checks store purchases (only once purchases are on sale) | US |
Independent companies, under their own privacy policies:
- Apple and Google process payments for anything you buy in the app.
- Booking partners and operators receive what you give them when you leave Didventure to book. We pass a partner click id so they can credit the referral, not your name or email.
- Authorities, when the law requires it, or when someone's life or safety is at risk (EU Digital Services Act Art. 18).
- A buyer or successor if Didventure is sold or merged; you would be told first.
7. International transfers
Our servers are in Germany and your photos and videos are stored in the EU. Some providers (Google, Apple, Cloudflare and, once purchases are on sale, RevenueCat) may process data in the United States. Those transfers rely on the EU-US Data Privacy Framework where the provider is certified, and on the European Commission's Standard Contractual Clauses. You can ask us for a copy of the safeguards at privacy@didventure.com.
8. How long we keep data
| Data | How long |
|---|---|
| Your account, profile and posts | Until you delete them or your account |
| After you delete your account | Your profile is anonymised at once and you cannot sign in; your rows, photos and videos are deleted within 30 days. Your completed adventures remain only as anonymous counts on spot statistics |
| Photos and videos that fail review or are removed | Never shown to anyone. Kept privately for 6 months after the decision, so it can be appealed and legal claims can be answered, then deleted automatically. Kept longer only while an appeal is open or when the law requires us to keep them (a legal hold, for example an authority's request); deleted earlier with your account. Original uploads are deleted as soon as they are processed, and within 7 days at the latest |
| Reports and moderation decisions | 3 years after the report is resolved (legal accountability for online platforms) |
| Record of moderation and curation actions (audit log) | 2 years. An appeal you wrote stays in this record after you delete your account, without your name, as evidence of the decision |
| Booking clicks | 13 months |
| Purchase records (only once purchases are on sale) | Store notifications 13 months; transactions and subscriptions 7 years for accounting, without your name once your account is deleted |
| Crash reports | Up to 90 days at Sentry (30 days on our current plan) |
| Server logs | Overwritten automatically: each service keeps at most 100 MB of logs, usually a few weeks |
| Support emails | 2 years after the last message |
| Backups | Up to 14 days |
9. Your rights
You have the right to access, correct, download (portability), delete, restrict or object to the use of your personal data, and to withdraw consent at any time without affecting earlier use.
| To | Do this |
|---|---|
| Download your data | Settings → Account → Export my data. Within 30 days we email you, at your account's address, a link to a file with everything you logged; the link works for 7 days |
| Delete your account | Settings → Account → Delete account, or
https://didventure.com/delete-account if you no longer have
the app |
| Change who sees your posts or your location | Settings → Privacy for new adventures; for one already posted, write to support@didventure.com |
| Stop notifications | Settings → Notifications, or your phone's settings |
| Anything else | Email privacy@didventure.com. We reply within one month |
If you have an active subscription, deleting your account does not cancel it: cancel it in your App Store or Google Play settings first. The app reminds you.
You can complain to a data protection authority. Ours is the Office of the Commissioner for Personal Data Protection, Cyprus (dataprotection.gov.cy); you may also complain where you live or work.
10. Automated decisions
We do not use automated moderation. Every new adventure and every report is reviewed by our team, by a person. We do not make decisions with legal or similarly significant effects about you by automated means. The Feed shows public adventures newest first; it is not personalised by a profiling algorithm.
11. Security
We use encrypted connections (TLS) everywhere, backups kept in the EU, access limited to the people who need it, database rules that enforce visibility and blocks, and signed links for media. No system is perfectly secure; if a breach puts you at high risk, we will tell you without undue delay.
12. Website
didventure.com sets no cookies of its own and has no
analytics or tracking. Its pages load nothing from other companies.
Cloudflare, which serves the site, may process your IP address to
deliver and protect it.
13. Changes
We will post any change here with a new effective date. If a change is significant, we will tell you in the app before it applies, and ask again where your consent is needed.