Souvenir does not have servers, does not have accounts, and does not collect anything about you. Everything the app records — your trips, the people you travelled with, your name and picture, copies of your trip photographs, and the destinations you save for your next journey — is stored on your device and in your own private iCloud, inside an area only your Apple Account can open. We cannot read it, and neither can anyone else.
The destination data Souvenir searches — months, weather, visa requirements and nonstop flights — ships inside the app itself. Searching and filtering happen entirely on your device, and nothing about your search, your preferences or your passport nationality is sent anywhere.
Your photo library. With your permission, Souvenir reads the date and location recorded in your photographs so it can work out the journeys you took. This reading happens on your device. Your photographs are never sent to us or to any other company.
Your originals in Apple Photos are never modified, moved or deleted. Removing a photograph from a trip in Souvenir leaves the original untouched.
| What | Where it is kept |
|---|---|
| Trips, countries, places, dates, notes | Your device and your private iCloud |
| Destinations you save, and your search preferences | Your device and your private iCloud |
| The people you travelled with, and their pictures | Your device and your private iCloud |
| Your own name and picture | Your device and your private iCloud |
| Display-sized copies of your trip photographs | Your device and your private iCloud |
| Which places you have chosen to count as travel | Your device and your private iCloud |
"Your private iCloud" means the private database of this app's iCloud container, inside your Apple Account. Apple provides it; the developer has no ability to read, export or browse its contents. It counts against your own iCloud storage.
Videos are not copied. They are played from Apple Photos where they already are.
Souvenir talks to three places, and never to ours:
There is no analytics, no advertising, no tracking, no third-party SDK, and no account to create.
If you add travelling companions, you type their names and may choose pictures of them. This is information about other people, and it is treated exactly like everything else here: kept in your own iCloud, readable only by you, and never sent to us. Please only add people who would be comfortable with that.
Souvenir is not directed at children and does not knowingly collect information from anyone.
Because we hold nothing, there is nothing for us to delete on your behalf and no request you need to make of us.
If this policy changes, the date at the top changes with it. Material changes will be described in the app before they take effect.