Outfara is operated by Lewis Peck, trading as Outfara, based in the United Kingdom. For all data protection matters, Lewis Peck is the data controller.

Contact: travelroutewise@gmail.com

Account data

When you create an account (email/password or Google sign-in) we store your email address, a display name, and a hashed password (email sign-up only). Your Google account name and email are passed to us if you use Google sign-in; we do not receive your Google password or payment details.

Location data

The Here tab, the Explore map, and Walks all request your precise GPS location on your device. These coordinates are sent to third-party APIs (listed in Section 5) to find nearby places, fetch live weather, and display relevant local events. Location is only accessed while the app is open unless you grant "always on" permission, which we do not request. You can revoke location access at any time in your device settings.

Trip and itinerary data

Plans, saved trips, flights, and checklists you create in the app are stored in your account on Supabase servers located in the European Union.

Social features

If you enable the Meet tab (opt-in), your display name and the city you are currently in become visible to other users in that city. You can turn this off at any time in Settings → Social features.

Device and usage data

We collect basic crash reports and app-open events to diagnose issues. We do not use third-party analytics SDKs (e.g. Firebase Analytics, Amplitude). Push notification tokens are stored so we can send you arrival alerts — these are stored in Supabase and never shared with advertisers.

AI queries

If you use the AI Local Guide or AI Itinerary features, the text of your question and the current city name are sent to Anthropic's API to generate a response. These queries may be used by Anthropic to improve their models unless you opt out via Anthropic's privacy settings. We do not store your AI query history beyond the current session.

• Provide the service — show you nearby places, live weather, local events, and personalised travel feeds based on where you are.
• Account management — authenticate you, sync your trips across devices, and send password-reset emails.
• Safety notifications — send you a push notification when you arrive in a new city, including local emergency numbers.
• Service improvement — diagnose crashes and fix bugs using anonymised error data.
• Legal compliance — retain data as required by applicable law.

We do not use your data for advertising, sell it to data brokers, or profile you for commercial purposes.

Under UK GDPR and EU GDPR, our legal bases are:

• Contract — processing your account data and trips is necessary to provide the service you signed up for.
• Legitimate interests — crash reporting and app improvement, where your privacy rights do not override our interest in running a reliable service.
• Consent — location access, push notifications, and social visibility are opt-in and can be withdrawn at any time.

Outfara integrates the following third-party services. Where your data is sent to a service, it is subject to that service's own privacy policy in addition to ours.

• Account data — kept until you delete your account. You can delete it in Settings → Delete account, which removes your profile, trips, and social data from our servers within 30 days.
• Push tokens — deleted when you delete your account or revoke notification permissions.
• AI queries — not stored by us beyond the current session. Anthropic's own retention policy applies.
• Crash / error logs — retained for up to 90 days for debugging purposes.

Under UK GDPR / EU GDPR, you have the following rights. To exercise any of them, email travelroutewise@gmail.com.

Outfara is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

Some third-party services (Foursquare, Anthropic, Ticketmaster, Google) are based in the United States. Data sent to them is transferred under standard contractual clauses or equivalent safeguards as required by UK/EU law. Supabase stores your account data in the EU (Frankfurt).

We may update this policy when we add new features or third-party integrations. Material changes will be notified via a push notification or in-app banner. The effective date at the top of this page will always reflect the latest version.

We aim to respond to all data requests within 30 days.

Also see our Terms of Service.