Privacy Policy

Last updated: 5 October 2026

Who is responsible

Meraki Softworks Ltd, company number 14223666, registered in England and Wales. Our registered office is Flat 518, 101 Blackwall Way, London, England, E14 9QX. Email: contact@merakisoftworks.com.

We are the controller for the To.Go information described below. For website browsing, enquiries and support, also read our website privacy notice. This notice is information about processing, not blanket consent to every feature.

Local storage and online features

To.Go stores personal entries on your device, but using the app is not necessarily an offline or anonymous activity. Sign-in, subscriptions, diagnostics, analytics, AI requests and shared features can communicate with online providers separately from cloud backup.

Cloud backup can turn on automatically when you sign in with an active Pro entitlement. It is not always a separate opt-in step. Where sync is enabled, records are uploaded to Supabase to provide backup and synchronisation. Turning sync off or signing out does not by itself delete records already uploaded. Use the available data controls or contact us for deletion.

Information collected, sources and uses

Places and trip content: place names, coordinates, addresses, photos, notes, memories, tags, links, visit status, collections and trip plans you create, import or share. These can be stored locally, uploaded through sync, or processed online by a feature you use.
Location, camera and photo information: device location or selected photos when you grant the relevant device permission and use a feature. A location-based search can send coordinates or an area to our services and map/search providers. Photo-based AI can send the selected image and relevant context to our server and Google Gemini. Where the online landmark-detection feature is enabled, a selected gallery photo can also be sent directly to Google Cloud Vision.
Imported links and AI requests: source URLs, content obtained from those sources, questions, travel preferences, selected places, images and relevant location/context used for enrichment, recommendations or trip planning. Link processing can retrieve metadata or media from the linked website or social platform; a private or identifying URL may itself disclose personal information.
Account and purchase information: identifiers, email and profile information returned by your sign-in provider; account/device registration information; subscription entitlement, transaction identifiers and an app-user identifier used by RevenueCat. We do not receive full store payment-card details.
Usage and diagnostics: Firebase Analytics events, account/app identifiers where set, device/OS and app version, approximate location derived by the provider, and Sentry error traces and technical context. Ordinary service requests expose an IP address to their recipient.
Shared collections and notifications: invitations, membership, contributions, share identifiers, push tokens, device identifiers, AI job status, feedback and feature-usage counters. Support messages and website requests are covered by our website privacy notice.

When you invite collaborators or publish/share a collection, the content selected for sharing can be seen by recipients, members or the public according to that feature's settings. Titles, notes and cover images can also appear in website and messaging previews. We receive shared content from the person who added it and information from linked public sources. Share only content you are authorised to disclose; avoid private addresses or photos in public material.

Recipients can copy or forward a link or content. Revoking a link or removing a collection may prevent later access but cannot recall an earlier screenshot, download or preview held by someone else. Contact us to report an unwanted disclosure or request removal of personal information in content you did not submit.

Providers and disclosure

Supabase: authentication, database/storage, server functions, sync, feature requests, usage controls and notification records.
Google Gemini: AI prompts, relevant context and files or images sent for the AI/import feature. Generated responses and job results can be stored in our service as well as on your device. Google can retain requests for service operation and abuse monitoring under the applicable service terms. Its use of content also depends on the API service and billing configuration. See the Gemini API terms.
Google Firebase: Analytics and Cloud Messaging for usage measurement, push delivery. Sentry supplies error reporting. These services can process technical identifiers and diagnostic context even if cloud backup is off.
RevenueCat, Apple and Google Play: subscription validation, app-user identifiers, entitlement and transaction information. Apple and Google process payment details and purchases under their own store policies.
Map, place and source services: Apple Maps, Google Maps/Places, device geocoding services and the websites or platforms from which you import content can process the requested location, search or URL and ordinary request data. Where configured, OpenCage provides fallback geocoding and receives the location search or coordinates. External services you open operate under their own privacy policies.
Google Cloud Vision: where landmark detection is enabled, selected photo content is uploaded directly to this service to identify a landmark and return its location. Its image-processing and request-metadata practices are described in the Cloud Vision data usage information.
Other recipients: relevant support/communications providers and, where legally necessary, professional advisers, authorities or a business successor subject to appropriate safeguards. We do not offer your private place records for sale.

Why we process information and legal bases

Contract and steps towards a contract: delivering the feature you request, account access, sync, subscription access, AI/import processing, place searches and sharing. Information needed for a chosen online feature must be processed to supply it; you can choose not to use that feature.
Legitimate interests: securing the service, preventing fraud, applying usage limits, responding to support and diagnosing technical faults, subject to balancing our interests with your rights.
Consent where required: device access, non-exempt analytics/tracking and any processing or disclosure for which the applicable law requires consent. Device permission or Apple's tracking prompt is not blanket consent to unrelated processing. You can withdraw consent for future processing.
Legal obligations: statutory records, legally binding disclosure requests and other applicable legal duties.

AI provides automated suggestions or extracted information for you to review. We do not use those outputs to decide whether you receive credit, insurance or employment. AI can produce inaccurate results; the relevant app terms explain the limits.

International processing

We operate in the United Kingdom. Our hosting, diagnostics, subscription and AI providers also operate internationally, including in the United States and the EEA. The location of processing can depend on the service, hosting region and provider support arrangements; data is not necessarily kept in your country.

For a transfer restricted by UK/EEA data-protection law, a recognised adequacy decision or appropriate safeguards are required. Provider data-processing terms may supply EU Standard Contractual Clauses and the UK Addendum or International Data Transfer Agreement where applicable. Other countries can require different safeguards or separate consent. Ask contact@merakisoftworks.com for the countries and transfer mechanism relevant to your information and a copy of the applicable safeguards, with confidential commercial information removed. This notice does not itself give consent to an international transfer.

Retention and deletion

Device records: remain until you delete or clear them. Uninstalling normally removes app-local storage, but device or operating-system backups and exported copies can remain.
Cloud account and feature records: remain while needed for your account, enabled service, saved results or an outstanding request. Disabling sync, signing out, uninstalling or cancelling a subscription does not automatically erase server records.
AI/import jobs and results: may include submitted content, extracted information, responses and processing status. We retain them to complete or resume a job, retrieve results, investigate failures and apply feature limits; saved results can remain with your account. Provider-held request data follows the relevant service's retention terms and configuration.
Diagnostics, analytics and abuse records: use provider-configured retention and the period needed to diagnose faults or investigate a particular incident. Purchase/support records may be retained for applicable accounting, tax, refund or legal-claim periods.
Deletion exceptions: relevant information may remain for a specific legal requirement, unresolved claim or limited backup recovery cycle. Where an exception applies to your request, we will explain the category and reason. Copies you exported, shared with others, or retained in your own backups are outside our control.

How to request full account deletion

The app's data controls can clear local and synced content and sign you out. To request deletion of the authentication account and associated remaining server records, email contact@merakisoftworks.com, identify To.Go and the address used for sign-in, and say that you want full account deletion. Do not assume that signing out or an in-app data wipe has deleted the authentication account. We may need to verify your request.

A full account-deletion request covers associated personal information, including relevant stored photos, AI jobs, feedback, invitation/member information and device records, subject to any lawful retention exception we explain. You do not need to list every data category. Deletion does not cancel an Apple/Google subscription; cancel it separately through the store. Copies retained by collaborators or external preview services may remain.

Device choices, analytics and diagnostics

You can manage camera, photo, location, notification and tracking permissions in device settings where applicable. Permissions affect the relevant feature; they do not necessarily disable authentication, subscription checks or every diagnostic SDK. To.Go links Firebase Analytics collection to the iOS tracking-permission status. On Android, the current implementation enables analytics without that iOS prompt; Sentry reporting is separate.

For an objection or a request to stop optional processing, contact contact@merakisoftworks.com. Declining an online feature avoids the information needed by that feature but does not itself stop other service requests. App SDKs are separate from website cookies, and we do not promise that browser Do Not Track or Global Privacy Control signals are carried into the mobile app. Where local law requires a consent or opt-out control, that requirement still applies.

Your privacy rights

Ask for access to your information, correction, deletion, or a portable copy, and information about its sources, purposes and recipients.
Where the law provides, restrict processing, object to processing based on legitimate interests, withdraw consent, or request review of a qualifying automated decision. Withdrawing consent does not affect earlier lawful processing.
Where applicable, opt out of sale, sharing for cross-context behavioural advertising, or targeted advertising; limit qualifying uses of sensitive information; use an authorised agent; or appeal a refused request. We will explain any applicable exception and appeal route. We will not discriminate against you for exercising your rights.

Email contact@merakisoftworks.com with the product name and your request, or write to our registered office above. You do not need to buy anything or create an account to contact us. We may ask for proportionate information to verify identity or an agent's authority before disclosing or deleting records. Do not send passwords or a full identity document unless we explain why it is needed and provide a suitable way to send it.

We respond within the time required by the law that applies to your request. UK/EEA requests normally have a one-month deadline; applicable California access and deletion requests normally have a 45-day deadline. We will explain any permitted extension or refusal. These rights depend on the applicable law and are not all absolute.

Complaints

For a privacy complaint, contact contact@merakisoftworks.com and describe the issue. We will investigate, explain our response, and tell you about any further review available. You can also complain to the UK Information Commissioner's Office (ICO) or the relevant authority in your country, including your EEA supervisory authority, Canada's privacy commissioner, Australia's OAIC, Brazil's ANPD, or the applicable US state authority. Contacting us first does not remove your right to go directly to an authority.

Security and children

We use authenticated services, access controls and HTTPS for online processing. Your device and any copies you export also need protection. We cannot guarantee absolute security or recover records that exist only on your device.

Our apps are intended for adults aged 18 and over, and are not directed to children. Do not use the cloud or AI services if you are under 18. If you believe a child has supplied personal information, contact contact@merakisoftworks.com so we can investigate and take the action required by law, including deletion where appropriate. An age statement does not replace any parental-consent or child-protection requirement that applies.

Changes

We update the date above when this notice changes. Where a change materially affects how existing information is used, we will provide the notice and obtain any fresh consent required by law before that new use. Continued use of a website or app is not consent to unrelated processing.