Privacy policy for Trevilo

Updated: 30 September 2026. This policy describes Trevilo 1.1.0.

Controller and contact

Controller: Andreas Addi Rudel-Frank, Länsvägen 23b, 123 52 Farsta, Sweden. Contact: andreas.rudel.frank@icloud.com.

Processing on your device

Trevilo processes your travel entries (countries, places, dates, notes and, where applicable, US states), configured counting rules, document expiry dates, checklists, saved planning scenarios and selected receipt files locally. Your optional name personalises the interface and travel reports. There is no user account, app-operated server, advertising or analytics service.

The iOS and Android app stores the collection in its private app file area. The web version uses local browser storage (IndexedDB). Device-feature and language preferences are stored locally. App lock uses operating system authentication; Trevilo does not receive your biometric data or device passcode. The lock's enabled status is stored in secure device storage and may survive uninstallation on iOS.

Optional permissions

Location: After you explicitly enable it, the app can check your current location or collect background suggestions. Coordinates are compared against the included country map. Country suggestions and calendar dates are saved; missing days are not filled from individual measurements. Operating system services may use their own network services to determine location. You can stop tracking in the app and system settings.

Calendar: With permission, the app reads events from calendars you select and suggests detected stays for review. It does not create, delete or modify calendar events. The operating system interface may request combined read and write access. You can revoke calendar access in system settings.

Photos and files: The app processes only photos or files you select. Photo imports use existing capture and location metadata. Selected image receipts can be read locally using Apple Vision on iOS or the bundled Google ML Kit model on Android. Images are not sent to an OCR server for this purpose. Recognised text, suggested countries and dates may contain errors and must be reviewed before saving. PDF receipts are stored as original files.

Notifications: The operating system schedules reminders locally. No remote push tokens are retrieved. Lock-screen text does not include document names or precise places of stay. You can disable reminders in the app or revoke operating system permission.

Widget: On iOS, the app shares a limited, dated counter snapshot with its own widget extension through an App Group. Display requires explicit opt-in in the app. Personal counters remain hidden when app lock or sample mode is active. Widgets are visible on the Home Screen and can be seen by anyone looking at your device.

Retention, deletion and backups

Your data remains local until you remove entries or delete the entire collection under Profile > Delete all local data. This removes your trips, sample data, receipts, plans, checklists, saved report selections and location suggestions, and stops reminders and background tracking. The app-lock setting can be disabled separately. Exported files and operating system backups are not deleted by this action.

Uninstallation, device loss or clearing browser data may remove the local collection. Use export and restore when needed. System backups may include app files according to your device settings. Trevilo does not offer automatic cross-device synchronisation.

PDF, CSV and JSON exports are not additionally encrypted by the app. App lock encrypts neither exports nor the entire local collection. Use a device lock and keep backups in a protected place. If you share files with other apps or people through the system dialog, you choose the recipient and service; their privacy policies also apply.

App Store purchases

Trevilo Pro is an optional upgrade offered through the App Store as an in-app purchase: a one-time purchase or an auto-renewable subscription (monthly or yearly; the yearly plan includes a free introductory trial). Apple handles the purchase, billing, renewals, restoring and refunds; Apple's privacy policy applies. Trevilo receives neither payment data nor your name, Apple Account details or invoice information. No purchase data is transmitted to the developer; there is still no developer-operated server. Subscriptions are managed and cancelled in iOS Settings > Apple Account > Subscriptions.

To load prices and check the entitlement, the app connects to the App Store through the StoreKit system interface; the technical data required for this is processed by the operating system and Apple. On the device, Trevilo stores only a local unlock status (storage key “trevilo:pro:v1”): the product type, whether the unlock is active, any expiry date, the time of the last check, whether a purchase is awaiting approval and whether the sandbox environment is in use. This status contains no payment data or transaction identifiers and is not part of the JSON backup. “Delete all local data” leaves it untouched; uninstalling the app removes it. “Restore purchases” asks the App Store for the purchases of the Apple Account signed in on the device. A stored one-time purchase remains valid permanently, even without a connection to the App Store; a stored subscription status is refreshed through StoreKit and remains usable offline for up to 14 days after the last successful check.

External links and website

Opening an official source or support page connects your browser to that website, whose privacy policy then applies. This information and support website is hosted on GitHub Pages. GitHub processes technical access data, including your IP address, to provide and secure the website. See GitHub's privacy statement. This website uses no analytics tools, advertising or additional cookies. The travel app itself does not run on this website.

Your rights

Where the publisher processes personal data, you have the rights provided by applicable data protection law, including access, rectification, erasure, restriction and, where applicable, portability and objection. You may contact the controller above or the competent data protection authority. Travel information stored solely on your own device is not accessible to the publisher.

Support requests

If you contact us by email, we process your email address and the information you provide to answer your request. Send only the information needed for that purpose. The basis is handling your request or our legitimate interest in reliable support (Article 6(1)(b) or (f) GDPR, where applicable). Requests are deleted once no longer needed, subject to statutory retention duties.