Privacy policy
Last updated 14 September 2026. This policy covers the Vidare iPhone app (including its widget and share extension) and this website.
The short version: Vidare stores the trips you plan so your group can share them and so they work offline. We do not track you, show ads, or sell data. Diagnostics can be switched off in the app, and you can delete your account — and everything with it — from Settings at any time.
Who is responsible
Organize Tech Labs AB, Sweden, is the data controller for Vidare. For anything in this policy, write to bjorn@organize.se.
What we collect and why
| Data | Why we need it |
|---|---|
| Account. When you sign in with Apple, Google or an email link we receive a user identifier and your email address (Sign in with Apple may give us a private relay address instead). Your display name and avatar, if you set them, plus your language and AI engine preference. | To create your account, show who added what to a trip, and keep your settings across devices. |
| Trip content. Trips, plan items, travel and accommodation options, ideas and saved links, comments, budgets, packing lists, to-dos, reminders and your conversations with the AI assistant. | This is the product. Trip content is shared with the members of that trip according to their role. AI conversations are private to you. |
| Documents. Tickets, PDFs, photos and Wallet passes you attach to a trip (up to 25 MB each). | So the group can find them and so they are available offline. Stored in private storage that only members of that trip can access, through short-lived links. |
| Push token. A device token from Apple, only if you allow notifications. | To send collaboration notifications such as “Anna joined the trip”. You can turn these off per trip. |
| Purchases. The transaction identifier Apple gives us when you unlock a trip. | To record that the trip is unlocked for everyone in it and to handle refunds. Apple processes the payment; we never see your card or bank details. |
| Diagnostics. Crash reports, performance data and handled errors, and — only when you choose to send one — a problem report with the app’s own log lines from the last 24 hours. | To find and fix bugs. Linked to your account identifier only, never to your name or email. On by default; switch it off under Settings → Diagnostics. |
| Included AI usage. For each request to the built-in assistant we record the type of operation and the number of tokens used. | To apply each trip’s AI allowance. We do not keep the content of the request for this purpose. |
What we do not collect
- No tracking, ads or analytics. The app contains no advertising or analytics SDKs and does not track you across other apps or websites.
- No location history. If you allow location access, it is used only on your phone to show your position on the trip map. Your location is never sent to us.
- No contacts. Invites are share links; we never read your address book.
- No camera or photo library uploads without your action. Access is requested only to scan or attach a document you chose.
The AI assistant
Vidare can use three kinds of AI engine. The app shows which one produced every answer, and nothing the assistant proposes changes your trip until you accept it.
Included AI (default)
Your message and a compact snapshot of the trip — destination and dates, booked travel and accommodation, the plan so far, idea titles, short summaries of saved links, and your language and currency — are sent to our server and forwarded to OpenAI under Vidare’s account. OpenAI processes it under its API terms, which do not allow the data to be used to train its models, and we disable OpenAI’s conversation storage for every request. If you paste an image, your phone extracts the text first; the Included AI also receives a reduced copy of the image so it can read maps and layouts.
Apple Intelligence
On supported iPhones the assistant can run entirely on your device using Apple’s on-device models. Nothing leaves your phone.
Your own key
If you add an Anthropic or OpenAI API key in Settings, the app talks to that provider directly from your phone, under your account and their terms. The key is stored in your iPhone’s keychain and is never sent to us. The app shows a notice the first time you use this option.
What the assistant never sees
- The contents of attached documents — tickets and PDFs are not sent to any AI.
- Other members’ email addresses.
Your AI conversations are synced to our servers so they survive a reinstall; only you can read them. Turn on “AI chats on this device only” in Settings to stop syncing them.
Links, videos and photos
- Pasted links. When you save a link, our server fetches that page to read its title, photo, address and price. The site you linked sees a request from our server, not from your phone.
- Video search. When you ask the assistant for videos, the search terms it generates are sent to the YouTube Data API through our server.
- Landmark photos. To illustrate places, the app queries Wikimedia Commons and Wikipedia directly from your phone. Those services receive the place name and your IP address, as with any website.
Who can see your data
Trip members. Everyone in a trip sees that trip’s content and documents (members and viewers do not see the budget); owners and admins can also manage members. If you publish a trip as a shared link, anyone with the link can view a read-only copy until it expires or you revoke it.
Service providers that process data on our behalf, under data processing agreements:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage and server functions | EU (Stockholm) |
| Sentry | Crash reports and diagnostics | EU (Germany) |
| OpenAI | Included AI responses | United States, under EU standard contractual clauses |
| Apple | Sign in with Apple, in-app purchases, push notifications | Per Apple’s terms |
| Sign in with Google (if you use it), YouTube search | Per Google’s terms |
We do not sell personal data and do not share it with advertisers. We disclose data to authorities only when the law requires it.
How long we keep it
- Account and trip data: for as long as your account exists.
- Deleted trips and items: marked as deleted immediately and permanently purged after 90 days.
- Diagnostics: up to 90 days in Sentry.
- Shared-trip links: until the expiry you chose, or until you revoke them.
- Offline copies on your phone: until you sign out, delete the app, or remove the trip.
Deleting your account
Open Settings → Delete account in the app. This is immediate and cannot be undone:
- Trips where you are the only member are deleted, together with their documents.
- Trips you share with others are kept for them: ownership passes to the longest-standing other member, and items you added stay in the trip without your name on them.
- Your profile, memberships, AI conversations, reminders, push tokens and notification settings are deleted.
If you no longer have the app, email bjorn@organize.se from the address you signed up with and we will do it for you.
Your rights
Under the GDPR you can ask us to access, correct, export, restrict or delete your personal data, and you can object to processing based on legitimate interest. Most of this you can do yourself in the app; for anything else, email bjorn@organize.se and we will answer within 30 days. You also have the right to complain to the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.
Legal bases. We process account and trip data to provide the service you asked for (contract); diagnostics, link previews and AI usage accounting under our legitimate interest in running a reliable product, with diagnostics switchable off; and push notifications and location with your consent, which you can withdraw in iOS Settings.
Security
All traffic is encrypted in transit. Trip data is protected by row-level access rules so only members of a trip can read it. Documents live in private storage and are served through links that expire after one hour. API keys you add stay in your iPhone’s keychain. Server-side entitlements mean a purchase cannot be forged from a device.
Children
Vidare is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.
This website
This site sets no cookies and runs no analytics. Our hosting provider keeps ordinary server logs (IP address, browser type, requested page) to serve and secure the site. Fonts are loaded from Google Fonts, so Google receives your IP address when the page loads.
Changes
When this policy changes we update the date at the top; for significant changes we will also tell you in the app. Questions? See Support or email bjorn@organize.se.