Last updated: July 12, 2026
Galavant is built to be private by design. Your dreams, journal and photos live on your device — not on our servers — unless you choose to turn on cloud backup. We don't run ads, we don't use tracking SDKs, and we never sell your data.
This policy explains what Galavant ("the app", "we", "us") — published by Wayne Christian Santiago — collects, why, and your choices. If anything here is unclear, email us at support@merchase.app.
Your dreams and bucket list, journal entries, notes, "how it felt" reflections, most-loved place, and any photos you add — these are stored locally on your phone. If you never enable cloud sync, this information never leaves your device through Galavant.
If you enable cloud backup, we collect the email address you use to create your account so we can authenticate you and sync your data. Authentication and storage are provided by Supabase; your rows are protected by row-level security so only your account can access them.
When cloud sync is enabled, your journal photos, notes and dream lists are uploaded to secure cloud storage so they're backed up and available across your devices. With cloud off, none of this is uploaded.
Purchases and subscriptions are processed by Apple. We use RevenueCat to manage entitlements and tell the app what you've unlocked. This involves your purchase history and an app-specific user identifier. We never see or store your card details.
If you tap "Suggest places near me", the app requests your device location and sends the coordinates to our AI service to generate nearby suggestions for that request. Your location is not stored and isn't used for tracking. If you don't use that feature, we never access your location.
When you add a photo, you can pick one from your library or take a new one with the camera. The chosen image is copied into the app's private storage. We access your library/camera only when you initiate adding a photo.
Galavant+ includes AI features such as auto-filling a place's details, suggesting places near you, and writing trip recaps. To provide these, the text you give (for example a place name, or your journal notes for a recap) is sent to Anthropic's API through our own secure server function, which returns the generated result. This data is used only to fulfill your request and is not used to train AI models. See Anthropic's Privacy Policy.
We share information with these providers only as needed to run the app. We do not sell your data or use it for advertising.
Device data stays until you delete it in the app or uninstall Galavant. If you use cloud sync, your cloud data is kept for as long as your account exists. You can request deletion of your account and cloud data at any time (see below); account deletion is also being added directly in the app.
Data is encrypted in transit. Cloud data is protected by row-level security so it's only accessible by your account. No method of storage or transmission is 100% secure, but we work to protect your information.
Galavant is rated 4+ but is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13.
We may update this policy from time to time. Material changes will be reflected here with a new "Last updated" date.
Questions about privacy? Email support@merchase.app.