WorldlyPrivacy policy
Last updated: 28 October 2026
This privacy policy explains what personal data the Worldly app and the website getworldly.app collect, why, and what your rights are.
Who we are
Worldly is developed and operated by Anthony Playmith Sanchez, an individual developer based in Costa Rica ("we", "us"). We are the controller (the person responsible for your personal data).
Contact for anything related to privacy: support@getworldly.app.
Summary
- You can use Worldly without an account. Your data then stays on your phone and we never receive it.
- If you create an account, we store your travel data so we can back it up and sync it across your devices.
- Worldly has no ads, no analytics and no tracking. We do not sell or share your personal data for advertising.
- You can delete your account and data at any time.
Data we collect
If you use Worldly without an account
Your map, trips, costs, quiz progress and settings are stored only on your phone. We do not receive them.
If you create an account
- Account data: your email address and a securely hashed password. If you sign in with Google or Apple, we receive the email address and an account identifier from them. Apple may give us a private relay address instead of your real email.
- Profile and settings: your display name (optional) and app settings such as language, theme, map theme and country counting mode.
- Travel data: the places you mark as visited or want to visit (countries, territories, regions, cities, airports and UNESCO sites) and visit dates.
- Flights: flight number, airline, departure and arrival airports, dates and times, seat, cabin class and your notes.
- Travel costs: your cost groups, including the names of group members you type in, expenses, amounts, currencies and budgets. Only enter other people's names if they are happy for you to do so.
- Quiz progress: your scores, streaks and which questions you have answered.
Content you send us
- Quiz reports: when you report a question, we receive the question, the reason you chose and any note you write.
- Question suggestions: when you suggest a quiz question, we receive your question, answer and explanation, linked to your account.
- Emails: when you email us, we receive your email address and your message.
Purchases
Premium is bought through Google Play. Google processes the payment; we never see your card or bank details. Our purchase provider, RevenueCat, receives the purchase receipt and an app user identifier (your account identifier if you are signed in) so that Premium can be unlocked and restored.
Technical data
When the app or website connects to a server, that server receives your IP address and basic technical information (such as the app version and device type) needed to answer the request. Our providers may keep this in security logs for a limited time.
Photos and videos
Photos you add to a route video are used only on your phone. Route videos are saved to your phone's gallery. We never upload your photos or videos.
What we do not collect
We do not collect your precise location, contacts, advertising identifier, browsing history or any analytics or crash data.
How and why we use your data
| Purpose | Legal basis |
|---|---|
| Create your account, store, back up and sync your data | Performance of our contract with you (the terms of use) |
| Unlock and restore Premium | Performance of our contract with you |
| Answer your emails, review quiz reports and suggestions, and improve the quiz | Our legitimate interest in supporting users and keeping the quiz accurate |
| Keep the service secure and prevent abuse | Our legitimate interest in protecting the service and its users |
| Keep purchase and accounting records | Legal obligations |
By creating an account, you also give your informed consent to this processing as required by Costa Rica's Law No. 8968 on the Protection of Persons with regard to the Processing of their Personal Data. You can withdraw your consent at any time by deleting your account.
We do not use your data for advertising or profiling, and we do not make automated decisions that have legal or similarly significant effects on you.
Service providers
We use the following providers to run Worldly. They process data only on our behalf or to provide the specific service described:
- Supabase: account sign-in and the database that stores synced data.
- Google: Google sign-in, Google Play purchases and our email inbox.
- Apple: Sign in with Apple, if you choose it.
- RevenueCat: management of Premium purchases.
- Wikimedia Foundation (Wikipedia and Wikidata): when you open the description of a place, the app requests the article directly from Wikipedia, which receives your IP address and the article requested.
- ExchangeRate-API: when you use travel costs, the app downloads current exchange rates; the provider receives your IP address.
- Cloudflare: hosting of this website and forwarding of emails sent to our address.
We may also disclose personal data if the law requires it, or to protect our rights or the safety of others. We do not sell your personal data and do not share it for cross-context behavioural advertising.
International transfers
Our providers may process your data in countries other than your own, including the United States and countries in the European Union. Where the law requires it, these transfers are protected by appropriate safeguards, such as the European Commission's standard contractual clauses used by our providers.
How long we keep your data
- Account and synced data: for as long as your account exists. When you delete your account, it is removed from our database straight away and from any backups within 30 days.
- Question suggestions: deleted together with your account.
- Quiz reports: kept to improve the quiz, but no longer linked to you after you delete your account.
- Purchase records: kept by Google and RevenueCat for as long as needed to provide Premium and to meet accounting and tax obligations.
- Emails: kept for as long as needed to handle your request, and at most 24 months after our last exchange.
Deleting your account
You can delete your Worldly account and all the data linked to it at any time, in either of these ways:
- In the app: open Profile, then Settings, then tap Delete account and confirm.
- By email, without the app: email support@getworldly.app from the email address of your account, with the subject "Delete my Worldly account". We may ask you to confirm the request, and we will delete your account within 30 days and tell you when it is done.
What is deleted: your account, email address, profile, settings, visited places, flights, travel costs, quiz progress and question suggestions.
What is kept: quiz reports without any link to you, and purchase records that Google and RevenueCat must keep for legal reasons. Data stored only on your phone is removed when you uninstall the app.
Deleting your account does not cancel Premium. Premium belongs to your Google Play account and can be restored after you reinstall the app.
Your rights
Depending on where you live, you have the right to:
- access your personal data and receive a copy of it;
- correct inaccurate data;
- delete your data;
- receive your data in a portable format;
- object to or restrict certain processing;
- withdraw your consent at any time.
To use these rights, email support@getworldly.app. We answer within the time required by law and in any case within 30 days. We will not treat you differently for using your rights.
You can also complain to a data protection authority. In Costa Rica, this is the Agencia de Protección de Datos de los Habitantes (PRODHAB). In the European Union and the United Kingdom, it is the authority in the country where you live or work.
California residents: you have the right to know, delete and correct your personal information and not to be discriminated against for using these rights. We do not sell or share personal information, and we do not use sensitive personal information to infer characteristics about you.
Children
Worldly is a general audience app and is not directed at children under 13. Children under 13 must not create an account. If you are under the age at which you can consent to data processing in your country (up to 16 in some European countries), you need a parent's or guardian's permission to create an account. If we learn that we hold data from a child without the required consent, we will delete it.
Security
Data is encrypted in transit (HTTPS) and access to it is restricted, so that each account can only read its own data. No system is completely secure, so we cannot guarantee absolute security. If a data breach affects you, we will inform you and the competent authorities as the law requires.
This website
This website does not use cookies, analytics or tracking. Our host, Cloudflare, processes your IP address to deliver the pages and protect the site from attacks.
Changes to this policy
We may update this policy, for example when we add features. The date at the top shows the latest version. If we make important changes, we will tell you in the app or by email before they apply.
Contact
Anthony Playmith Sanchez, Costa Rica
support@getworldly.app