Privacy Policy
Last updated: July 31, 2026
Galavant is built to be private by design. Your dreams, journal and photos live on your device — not on our servers — unless you choose to turn on cloud backup. We don't run ads, we don't use tracking SDKs, and we never sell your data.
This policy explains what Galavant ("the app", "we", "us") — published by Wayne Christian Santiago — collects, why, and your choices. It applies to Galavant on both iOS and Android. If anything here is unclear, email us at support@merchase.app.
The short version
- Local-first. Your bucket list, journal entries, notes and photos are stored on your device. We can't see them.
- Cloud sync is optional. Only if you subscribe to Galavant+ and create an account do your travel data and photos sync to secure cloud storage, so you can back up and use multiple devices.
- No location tracking. Galavant does not request or collect your device's GPS location.
- No tracking, no ads. No advertising SDKs, no cross-app tracking, no data brokers.
- No selling. We never sell or rent your personal information.
Information we handle
Stored only on your device (we don't collect it)
Your dreams and bucket list, journal entries, notes, "how it felt" reflections, most-loved place, your chosen home region, and any photos you add — these are stored locally on your phone. If you never enable cloud sync, this information never leaves your device through Galavant.
Account information (only with Galavant+ cloud)
If you enable cloud backup, we collect the email address you use to create your account so we can authenticate you and sync your data. Authentication and storage are provided by Supabase; your rows are protected by row-level security so only your account can access them.
Your travel content (only with cloud sync on)
When cloud sync is enabled, your journal photos, notes and dream lists are uploaded to secure cloud storage so they're backed up and available across your devices. With cloud off, none of this is uploaded.
Shared lists
Galavant lets you share a bucket list with someone you travel with. To join a shared list you need an account, and you connect using a one-time invite code. Any places or trip details you add to a shared list are stored in the cloud and are visible to the other members of that list — that's the point of the feature. Members only ever see the shared list itself, never the rest of your private dreams, journal or account. You can leave a shared list at any time from within the app.
Purchases
Purchases and subscriptions are processed by Apple (App Store) or Google (Google Play), depending on where you downloaded the app. We use RevenueCat to manage entitlements and tell the app what you've unlocked. This involves your purchase history and an app-specific user identifier. We never see or store your card details.
Photos & camera
When you add a photo, you can pick one from your library or take a new one with the camera. The chosen image is copied into the app's private storage. We access your library/camera only when you initiate adding a photo.
AI features (Galavant+ / Wanderer)
Galavant includes optional AI conveniences — auto-filling a place's details (such as its country and a short description) and writing a short trip recap from your journal. To provide these, the text you give (for example a place name, or your journal notes for a recap) is sent to Anthropic's API through our own secure server function, which returns the generated result. This data is used only to fulfill your request and is not used to train AI models. AI is used only when you tap one of these actions. See Anthropic's Privacy Policy.
Reminders & notifications
If you allow notifications, Galavant can send gentle reminders and a little travel inspiration (for example a daily quote, an occasional place suggestion, or a note that a partner added to a shared list). These are scheduled on your device — Galavant does not run an advertising or profiling server for them. You can turn them off any time in your device settings or in the app.
Service providers we use
- Apple — app distribution and in-app purchases on iOS.
- Google — app distribution and in-app purchases on Android (Google Play).
- RevenueCat — subscription and purchase management (policy).
- Supabase — optional account authentication and encrypted cloud storage (policy).
- Anthropic — AI features (policy).
- Wikimedia Commons / Unsplash — freely-licensed place photography shown in the app.
We share information with these providers only as needed to run the app. We do not sell your data or use it for advertising.
How long we keep data
Device data stays until you delete it in the app or uninstall Galavant. If you use cloud sync, your cloud backup is kept while your Galavant+ subscription is active. If your subscription ends, we keep your cloud backup for 30 days so you can resubscribe without losing anything — after that, your cloud data (rows and photos) is automatically deleted from our servers. This never affects the copy on your device, which always stays with you. Wanderer (lifetime) access does not expire, so a lifetime cloud backup is retained while your account exists. You can permanently delete your account and all cloud data at any time from within the app (Settings → Account & Sync → Delete account); see how to delete your account.
Your choices & rights
- Don't want cloud? Simply don't enable Galavant+ cloud sync — everything stays on your device.
- Delete your account. Delete your account and all cloud data directly in the app via Settings → Account & Sync → Delete account. To remove data from your device too, use Settings → Erase device data or uninstall the app. Full steps: Delete your account.
- Access. Email us to request a copy of the personal data associated with your account.
- Depending on where you live (e.g., EEA/UK/California), you may have additional rights to access, correct, or delete your data. Contact us to exercise them.
Security
Data is encrypted in transit. Cloud data is protected by row-level security so it's only accessible by your account. No method of storage or transmission is 100% secure, but we work to protect your information.
Children
Galavant is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected here with a new "Last updated" date.
Contact
Questions about privacy? Email support@merchase.app.