Leave the Resort — Privacy Policy

Leave the Resort ("the app") helps travelers find and share real local experiences. This policy explains what the app does — and doesn't — do with your information.

What we collect

• Account data. A handle you choose, an optional display name, and a password (stored only as a salted cryptographic hash — we cannot read it). If you use Sign in with Apple or Google, we receive only the identifier and the name/email that provider shares; you can hide your email with Apple.
• Your email address. Used only to send you a password-reset link when you ask for one. It is never shown to other travelers, never used for marketing, and never shared.
• Your private profile. Your trip wallet (expenses and the names of your crew), passport (stamps, points, story), saved places, plans, dishes you marked as tried, and people you blocked are saved to your account on our server so they follow you to any device. Only your signed-in account can read it — no other user can see it, and it is never shown publicly.
• Content you publish. Spots (including the map pin, which is the place where you stood when you added it), photos, tips, reviews, and stamp check-ins are stored on our server and shown to other users with your handle.
• Live reports. Prices you post, exchange rates, lounge updates and scam alerts are stored with your account and the place where you posted them, so travelers nearby can see them. Other travelers never see who posted them. They leave the live view after a few hours (scam alerts after 24 hours), are kept for up to 30 days (lounge updates 60 days) to work out typical prices, and are deleted with your account.
• Photos and screenshots you scan. When you use Rip-off check, Receipt check or Message check, the photo or screenshot and your approximate location are sent to our server, which asks Anthropic's Claude AI to read it (see Third-party services). A message screenshot can contain names and booking details; it is used only to return the result. We don't store the photo or screenshot, and Message check results are not shared with anyone. Prices printed on a menu or price board may be added to Live prices for travelers nearby, without your name. The app asks for your permission before the first scan; you can turn AI photo reading off in Settings.
• Reports and feedback you send are stored so our team can act on them.
• Location. Used only when you act: to verify a check-in near a spot, to pin a new spot where you stand, to place a price, rate, lounge update or scam alert where you posted it, to compare a scan with prices nearby, or to center the map. We never track you in the background and never store your location history. A check-in records that you verified a visit to a public place, not your coordinates.

What we don't do

• No advertising, no trackers, no analytics SDKs.
• No sale of personal data, and no sharing with third parties except the service providers listed below, only to run the features you use.
• No background location tracking.
• No camera or photo access without an explicit action by you.

Third-party services

• Map data and city search load from OpenFreeMap (openfreemap.org) and OpenStreetMap (openstreetmap.org); standard web requests (your IP address) reach their servers under the OSMF privacy policy.
• Hosting is provided by Render (render.com), which stores our database.
• AI photo reading is provided by Anthropic (anthropic.com). Only when you run a Rip-off check, Receipt check or Message check and have allowed it, our server sends Anthropic the photo or screenshot, your approximate area and nearby price reports so its Claude model can read it. Your handle, email and password are never sent. Under Anthropic's commercial terms the photo is processed to return the result and is not used to train its models.
• Exchange rates come from open.er-api.com. Our server fetches them; no personal data is sent.
• Sign in with Apple, if you choose it, is provided by Apple under Apple's privacy policy.

Your choices

• Delete your account at any time in the app: Passport → Settings → Delete account. This immediately and permanently removes your account, your private profile, and everything you published (spots, photos, tips, reviews, stamps).
• Signing out removes your profile from the device's screen; it stays in your account until you delete it.
• You can also request deletion by contacting us.

Contact

Questions or deletion requests: vincefellegara@gmail.com