Bavlo icon Bavlo
← Back to home

Privacy Policy

Last updated: July 6, 2026

This Privacy Policy explains how the Bavlo app (the “App”) handles information. The App is operated by an independent individual developer (“we,” “us,” or “our”), not by a company. We designed the App so that your travel data belongs to you: your trips, packing lists, travel documents and photos are stored on your device, and our servers only ever process the minimum needed to generate your packing list and city artwork.

By using the App, you agree to the practices described here. If you do not agree, please do not use the App.

1. The short version

  • We do not require an account, and we do not ask for your name, email, or phone number to use the App.
  • Your trips, packing lists, budget, reminders, journal entries, and document photos are stored only on your device.
  • To build your packing list, we send your route, dates, and packing preferences (never your identity) to an AI provider.
  • Passport and visa details you type into the document wallet never leave your phone.
  • We do not sell your data and we show no ads.

2. Information we process

(a) Trip details you enter

To plan a trip you enter your home city, destination cities, travel dates, and nights per stop. This is stored on your device and, when you create a trip, transmitted to our backend to generate your packing list and city artwork as described in Section 3.

(b) Packing preferences

During onboarding you can tell the App how you travel (for example: your travel style, activities, how far ahead you pack). These answers are stored on your device and included with packing-list requests so the list fits you. They contain no identifying information.

(c) Travel documents and photos

You can store passport and visa details, attach booking documents, and keep travel journal photos in the App. All of this is saved locally on your device only. It is never uploaded to our servers.

(d) A device identifier and anonymous authentication

The App uses an anonymous authentication token to securely call our backend. This does not identify you personally and is not linked to a name, email, or social account.

(e) Location-related data

The App uses the coordinates of the cities you pick to fetch weather forecasts and show maps. The App does not track your real-time location and does not request access to your device's GPS location for trip planning.

(f) Subscription information

If you purchase a subscription, the transaction is handled by the Apple App Store. We (through our subscription provider) receive your subscription status and a non-identifying purchase identifier so we can unlock premium features. We do not receive or store your payment-card details.

(g) Support communications

If you email us, we receive your email address and the contents of your message so we can respond.

(h) Limited technical data

Our infrastructure providers may process limited technical information (such as device type, app version, and timestamps) as a normal part of operating and securing the Service.

We do not knowingly collect more personal information than is necessary to provide the App.

3. What our servers actually see

Bavlo's cloud side is deliberately small:

  • Packing list generation: when you create a trip, your destination cities, dates, and packing preferences are sent to our backend, which asks an AI provider to compose a packing list. The result is returned to your device and stored there. The request contains no name, email, or account identity.
  • City artwork: to illustrate your destinations, the App requests an image for a city name (for example “Rome”). Generated images are kept in a shared cache keyed by the city and weather — they contain no personal data and are reused across all users.
  • Weather: forecasts are fetched from Apple WeatherKit using the coordinates of your chosen cities.
  • Exchange rates: the currency converter fetches public exchange rates; no personal data is sent.

We do not store your trips, packing lists, or results on our servers.

4. How we use information

  • To generate your packing list and destination artwork;
  • To show weather forecasts and destination information for your trips;
  • To operate, secure, and troubleshoot the App;
  • To manage subscriptions and unlock premium features;
  • To respond to your support requests; and
  • To comply with legal obligations and prevent abuse or misuse.

We do not use your data for advertising, and we do not use it to train our own models.

5. Legal bases (where applicable, e.g. EEA/UK)

Where data-protection law requires a legal basis, we rely on: performance of a contract (to provide the features you request, including packing-list generation and subscriptions); your consent (which you give by choosing to create a trip); and our legitimate interests (to secure and improve the App and prevent abuse). You can withdraw consent at any time by not creating further trips.

6. Service providers and sub-processors

We use a small number of trusted third parties to operate the App. They process information only as needed to provide their service to us:

  • Apple: processes purchases through the App Store, provides the platform the App runs on, and provides weather forecasts through WeatherKit.
  • Google Firebase (Google Cloud): anonymous authentication, the backend functions that orchestrate packing-list generation, and the shared cache for city artwork.
  • OpenAI: composes the packing list from the route, dates, and preferences we transmit.
  • fal.ai: generates the illustrated city scenes from city names.
  • RevenueCat: manages and verifies your subscription entitlement.

Each provider operates under its own terms and privacy commitments. We encourage you to review their policies.

7. Data retention

Your trips, packing lists, documents, and photos are stored on your device for as long as you keep them, and are removed when you delete them or uninstall the App. Packing-list requests are processed transiently and are not retained as your personal records on our servers. City artwork in the shared cache contains no personal data. Our service providers may retain limited technical or transaction records for the period required to operate their services, ensure security, and meet legal obligations.

8. Security

We use reasonable technical and organizational measures to protect information, including encrypted transport and access-controlled backend services scoped to your anonymous session. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please remember that documents you store in the App are protected by your device's own passcode and security settings.

9. International data transfers

Our providers may process information on servers located in the United States and other countries. By using the App, you understand that information may be processed outside your country of residence, where data-protection laws may differ.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, or restrict the processing of your personal information, to object to processing, and to data portability. Because your trips, documents, and results live on your device and we do not hold account-identifying data, the most direct way to delete your data is to delete it within the App or uninstall the App. For any other request, contact us at bavlo.app@outlook.com, and we will respond as required by applicable law.

11. Notifications

If you enable packing reminders, the App schedules local notifications on your device (for example, “charge your power bank” the night before departure). These are created and delivered by your phone — we do not run a push-notification server and cannot see them.

12. Children’s privacy

The App is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps.

13. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice in the App. Your continued use of the App after changes take effect constitutes acceptance of the updated Policy.

14. Contact us

If you have questions or requests about this Privacy Policy or your information, contact the developer at bavlo.app@outlook.com.