Privacy

Journolio is a travel blog and photography portfolio. It collects the information it needs to run the app and its features, and no more. Nothing is sold, nothing is shared with advertisers, and there are no third-party analytics, advertising trackers, or behavioural profiling anywhere on this site or in the app.

Journolio is operated by Will DeGasparis, who is responsible for the personal information described here and can be reached at will.degasparis@gmail.com.

Your account

Signing in uses your Google account. Journolio requests only your basic profile and email address — it does not ask for access to your Gmail, Drive, contacts, or anything else, and it never sees your Google password. Your email address identifies your account; your name and profile picture are shown where you are credited. This is needed to give you an account at all.

Photographs and video you upload

The files, and the information already embedded in them: the date and time the photograph was taken, the camera make and model, a star rating if your editing software wrote one, and GPS coordinates if your camera or phone recorded them. The coordinates are what place a photograph on the map, which is the purpose of the app; the timestamp is what matches it to the right stop.

Where you have been, if you turn it on

The mobile app can record your position in the background while you travel, so a day out becomes a line on a map. It is off until you switch it on, it records only while a trip is being tracked, and you can stop it at any time in the app or by withdrawing the permission in your phone’s settings. These points are private to your account and are never shown to visitors.

Voice notes

If you record a voice note, the audio is stored on your account and sent to OpenAI’s API to be turned into text you can edit. Voice recordings and their transcripts are always private and are never published.

What you write and publish

Trips, stops, posts and captions. You choose what each one is visible to: private, shared with people you have approved, or public.

Ordinary server records

Like any website, the services Journolio runs on keep operational logs — things such as IP addresses, timestamps and error records — which exist to keep the site working and secure. They are not used to build a profile of you.

The only cookies the website sets are the ones that keep you signed in and remember whether you are previewing your own blog as the public sees it. On the phone, your session is stored in the app’s own database on the device. There are no advertising or analytics cookies.

Journolio runs on services that store or process data on its behalf. Each is used only for its own part of the app, and each may process data outside your country — including in the United States.

Supabase

Accounts and sign-in, and the main database.

Cloudflare R2 and Cloudflare Stream

Photographs, video and audio files.

Vercel and Render

Hosting for the website and the API.

OpenAI

Voice notes only, and only to transcribe them. OpenAI processes them under its API terms, which govern how long it keeps them.

Komoot Photon, built on OpenStreetMap

Place names. When you search for a place, your search text is sent; when you drag a marker on the map, that point’s coordinates are sent to find the place name there. Both go through Journolio’s own server rather than from your browser, so the provider does not receive your IP address or anything about your account.

OpenFreeMap, and Esri for satellite imagery

The map background. Unlike everything above, these are loaded by your browser directly, so those providers receive your IP address and which map tiles you asked for whenever a map is on screen — on any page with a map, whether or not you are signed in. This is how essentially every map on the web works, and it is worth stating plainly rather than leaving implied.

Every stop is private, shared, or public, and you set that yourself. Private content is visible only to you. Shared content is visible only to people you have individually approved. Public content is on the open internet and can be seen by anyone, including search engines.

Your location history and your voice recordings are never public, whatever a stop is set to.

Your content is kept until you delete it or delete your account — this is a portfolio, so the point is that it lasts. Server logs are kept only as long as the hosting services above retain them, which is a matter of weeks rather than years. Backups are held on a rolling basis and expire on their own schedule.

You can delete your account at any time, from Account in the mobile app or from your dashboard on this site. Deletion from Journolio’s live systems starts immediately and cannot be undone: your blog, trips, posts, photographs and videos, voice recordings and location history are removed from the database and from file storage, and your sign-in is removed from Supabase.

Two honest qualifications. If an individual file fails to delete at that moment, a cleanup job removes it afterwards rather than leaving it indefinitely. And copies may persist for a short time in the routine backups held by the services above, expiring with them.

Depending on where you live, privacy law may give you the right to access a copy of your personal information, to correct it, to delete it, to receive it in a portable form, and to restrict or object to certain uses. You can withdraw consent for optional features — background location recording, above all — at any time without affecting anything else.

Email will.degasparis@gmail.com for any of these, and you will get a real answer. If you are in the UK or the EU and you are not satisfied with how a request was handled, you also have the right to complain to your national data protection authority.

Journolio is not intended for children under 13 and does not knowingly collect information from them. Higher age thresholds may apply where you live.

If this policy changes in a way that affects what is collected or who it goes to, the date at the top changes with it. Questions about any of it: will.degasparis@gmail.com.