Privacy in Landfall

Summary

Landfall stores your travel data on your device and, when iCloud is available, syncs it through your private iCloud account. We do not run a server that holds a copy of your travel history. We do not sell your data, show ads, or track you across other companies' apps or websites.

Landfall uses anonymous analytics and crash diagnostics to keep the app reliable. These are described below.

Data You Create In The App

Landfall lets you save:

• Countries and regions you mark as visited.
• Future places you add to plans, with optional dates or status.
• Awards you have earned through your visited progress.
• Preferences such as map display, units, and language settings.

This data is stored on your device. Landfall does not have an account system, and we do not receive a copy of your travel history or plans on our servers.

iCloud Sync

When you are signed in to iCloud, Landfall uses Apple's CloudKit to sync your visited places, plans, awards, and preferences between your own devices, such as iPhone and iPad. This sync goes through your private iCloud account.

The Landfall developer cannot read, browse, or download data in your private iCloud database. iCloud is operated by Apple under Apple's privacy practices and your iCloud settings.

If you sign out of iCloud, sync stops and Landfall continues to work with the data on your device.

Device Location

Landfall can ask for permission to use your device location while you have the app open, so it can center the map on where you are. Location is optional. If you do not grant permission, the app continues to work as normal without it.

When you grant permission, your location is used in real time on your device. It is not stored as a history, not added to your visited records, and not sent to the developer, to the app's analytics or diagnostics providers, or to anyone else. You can change or remove this permission at any time in iOS Settings under Landfall.

Analytics

Landfall uses TelemetryDeck for anonymous, aggregate analytics. These analytics help us understand whether the app launches successfully, which areas are used, and whether core actions are working.

Analytics events may include:

• App opened and session events.
• App version and build number.
• The selected app tab or screen.
• Actions such as visited toggles, by place type and place code (no other context).

TelemetryDeck does not receive your IP address and does not link events to a personal identity. Events are tied to a salted, hashed installation identifier that cannot be reversed back to you. Analytics data is used to improve the app and is not used for advertising or cross-app tracking.

Crash And Performance Diagnostics

Landfall uses Sentry to collect crash reports and performance diagnostics. This helps fix bugs and slow paths.

Diagnostic data may include:

• Crash stack traces.
• Device model, operating system version, and app version.
• A small log of recent in-app events leading up to a crash.
• Performance traces for selected operations.

IP addresses are not sent to Sentry. Diagnostic data is not linked to your identity and is not used for advertising or cross-app tracking.

Subscriptions And Payments

Landfall offers an optional subscription called Passport, which unlocks unlimited country tracking and additional features. Subscription purchases, renewals, and cancellations are handled entirely by Apple through the App Store.

Landfall does not see or store your payment information. The app receives an anonymous entitlement signal from Apple indicating whether your subscription is active. Apple processes purchases under Apple's own privacy practices.

Maps And Search

Landfall uses Apple Maps for map display and place search. When you use Apple map services, Apple may process map and search requests under Apple's own privacy practices. Landfall does not use map activity for advertising or cross-app tracking.

What We Do Not Collect

Landfall does not ask for or collect:

• Your name, email address, phone number, or contacts.
• Photos, journal entries, or social posts.
• Payment card details.
• A history of your locations or movements.

Data Sharing

We do not sell your personal data. We use a small number of service providers to operate the app: Apple (App Store, iCloud, Apple Maps), TelemetryDeck (anonymous analytics), and Sentry (crash and performance diagnostics). Each is listed above with what it receives. They are expected to handle data only for those purposes.

Deleting Your Data

You can remove visited places and plans inside the app at any time. To remove all Landfall data:

• Delete the app from your device to remove its local data.
• To also remove iCloud-synced Landfall data, open Settings on your device, go to your Apple Account, then iCloud, then Manage Account Storage, and remove Landfall data from there. iOS backups may retain a copy according to your backup settings.

Children

Landfall is not directed to children and is not intended to collect personal information from children.

Changes

If Landfall's data practices change, this policy and the App Store privacy information will be updated before those changes ship.

Contact

Questions about this policy can be sent to support@landfall.earth.