Privacy Policy

Passage is a family travel journal and photo book app, available at mypassage.co and as an app for iPhone and Android. Passage is owned and operated by W - M Consulting & Technology Inc. ("we", "us"), a company based in Canada.

This policy explains what information Passage collects, why, who it's shared with, and the choices you have. Questions or requests: privacy@mypassage.co.

• Account details — your name, email address and, if you set one, a password (stored only in encrypted, hashed form). If you sign in with Google, we receive your name, email and profile picture from Google.
• Your journal — trips, dates, journal entries, captions, moods, highlights, itineraries, places you log (restaurants, hotels, sights), reflections and anything else you write.
• Photos and videos — the photos and videos you add, trip cover photos and your profile picture.
• Voice — when you speak an entry, your words become text (see section 4). Voice memos in a child's journal are saved as audio recordings so they can be played back.
• People — the names of family members you add (including children's journals) and the email addresses of people you invite.
• Books — the layout, text, fonts (including handwriting fonts you upload) and photos you choose for a photo book.
• Messages to us — anything you send when you contact us.

• Photo details — when you add photos, the app reads the date and time each photo was taken and, if your camera recorded it, where it was taken (GPS location). We use these to sort photos into the right days, suggest places you visited and show your trip on a map. The photos we store are resized copies; they don't keep the original file's hidden metadata.
• Places from your photos — if you use this feature, Passage groups your photo locations into stops and suggests what's there (for example a restaurant). Nothing is added to your trip unless you tap to add it.
• Device and usage data — like most online services, our hosting keeps basic technical logs (such as IP address, browser or device type, and pages requested) to keep Passage secure and working. We also record which features get used (for example that a trip was created or photos were added, and how many) so we can see what helps and what doesn't. This never includes what you write, your captions, your photos or the places you visit, and it's done without cookies. When something breaks, an error report (what went wrong, on which page, and your browser or device type) is sent so we can fix it. We don't use advertising trackers.
• Phone permissions — the app asks before using your photo library, camera or microphone, and only uses them when you choose to add photos or record. You can change these any time in your phone's settings.

We use your information only to provide and improve Passage:

• to store and show your journal, photos, maps, Story slideshows and books
• to let the people you invite view or add to your trips, and to tell them when something new is added
• to turn your speech into text, and, when you ask, to tidy up your writing or turn photo captions into a journal entry (see AI features below)
• to suggest places and organise your photos by day and location
• to send emails you need, such as sign-in codes and invitations
• to keep Passage secure, prevent abuse and fix problems
• to meet our legal obligations

We don't sell your personal information, we don't use it for advertising, and we don't build profiles of you for anyone else.

Speech to text. Voice entries are transcribed by the speech recognition built into your phone or browser (for example Apple or Google), under their own privacy terms. Passage receives the resulting text, not the audio.

AI features. When you use "Polish" or "Write from photos", the text you've written (or your photo captions) is sent to Anthropic, our AI provider, to produce a suggestion. Your photos themselves are not sent. Anthropic does not use this data to train its models. These features only run when you tap them.

• Just you, by default.
• Co-writers you invite can see and add to the trip (or the dates you allow).
• Viewers you invite, or anyone you send a share link to, can see the parts of the trip you chose to share (for example photos only). Anyone with a share link can open it, so share links with care. You can turn sharing off at any time.
• Private entries are only ever visible to you.

We use a small number of service providers to run Passage. They process data only on our instructions and only to provide their service:

• Supabase — our database, file storage and sign-in (servers in the United States).
• Vercel — hosts the website and app.
• Resend — sends our emails (sign-in codes, invitations).
• Google — Sign in with Google; maps; place search and suggestions (this includes the location of photos when we suggest places from them); and, only if you choose to connect them, importing photos from Google Photos or saved places from Google Maps. We request only the access each feature needs, and you can remove it any time in your Google Account.
• Anthropic — the AI features described in section 4.
• PostHog — counts which features are used (described in section 3), without cookies and without your content.
• Sentry — error reports, so we can find and fix problems. Reports don't include what you write or your photos.
• Mapbox — draws the map images in photo books, using the coordinates of the places on those pages.
• Apple and Google — the App Store and Google Play, and the speech recognition on your device.

Google user data. When you choose photos from Google Photos, Passage receives only the photos you pick in Google's own picker, and copies them into your trip. When you connect Google Maps, Passage reads only your saved places, to suggest past trips. We don't use Google data for advertising, don't sell it, don't use it to train AI models, and don't let people read it except with your permission, for security, or where the law requires. Passage's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

When printed books become available, we'll share the book file and your shipping details with our printing and shipping partner to make and deliver your order, and payments will be handled by a payment provider — we won't see or store your full card number.

We may also disclose information if the law requires it, to protect people's safety, or as part of a merger or sale of our business (in which case this policy would continue to apply to your information).

Passage accounts are for adults 18 and over. Children and teens can take part only through a parent or guardian, who can keep a journal on a child's behalf or set one up for them, and in doing so confirms they have the authority to do so. We don't knowingly collect personal information directly from children under 13 (or the age of digital consent where you live) without a parent's permission. A parent can ask us to see or delete a child's information at any time — contact privacy@mypassage.co.

We keep your information for as long as you have an account. You can delete individual entries, photos and trips at any time, and delete your whole account in Settings. When you delete your account, we delete your personal information and content within 30 days, apart from limited copies in backups (removed on our backup schedule) or anything we must keep by law. Trips you co-wrote but don't own stay with their owner, without your account details.

Wherever you live, you can ask to:

• access the personal information we hold about you, or get a copy of your journal and photos
• correct anything inaccurate
• delete your account and content
• withdraw consent, for example to disconnect Google or stop using an optional feature
• complain — we'd like to hear from you first, but you can also contact your privacy regulator (in Canada, the Office of the Privacy Commissioner of Canada, or the Commission d'accès à l'information in Québec)

Email privacy@mypassage.co and we'll respond within 30 days. These rights are provided under Canada's PIPEDA and Québec's Law 25, and we extend equivalent rights to users elsewhere, including under the GDPR (EU and UK) and the CCPA (California). We don't sell or "share" personal information for cross-context advertising.

Passage is run from Canada and your information is stored with our providers in the United States and possibly other countries, where it may be accessible to authorities under local law. We use providers with strong security commitments and contracts that protect your information, including standard contractual clauses for transfers from the EU and UK.

We protect your information with encrypted connections, access rules that let each person see only their own content and the trips shared with them, and photo links that expire. No system is perfectly secure; if we learn of a breach that affects you, we'll tell you and the relevant authorities as the law requires. If you think your account has been compromised, contact privacy@mypassage.co right away.

We use only what Passage needs to work: cookies that keep you signed in and that let a private invite link be opened on the device it was sent to, and small settings saved on your device (such as which tips you've dismissed). We don't use advertising or tracking cookies.

If we make significant changes, we'll tell you by email or in the app before they take effect, and update the date at the top.

W - M Consulting & Technology Inc.
privacy@mypassage.co