Privacy policy

Mundipin keeps your places on your iPhone. This page says exactly what stays there, what leaves it and why. Last updated: 28 October 2026.

What never leaves your iPhone

• Your places, days and trips.
• Your photos. Only their date and place are read, on the device.
• The country is worked out on the iPhone with built-in maps, without internet.
• Your journal, profile, wishlist and residences.

The app never sends your places: no country you visited, city, coordinate or trip date. If you turn on iCloud, your data is stored in your own private iCloud account, which we cannot read. Writing features that use Apple Intelligence run on the device.

What leaves it

• Amplitude (EU data centre): which screens are used and counts (for example, roughly how many countries were found, in ranges, never which ones), with an anonymous id. Amplitude also estimates an approximate city and country from your connection's IP address. Session replay records how the app is used, with all text and places hidden.
• RevenueCat: your purchase and an anonymous id, to unlock Mundipin Pro and restore it. RevenueCat also tells Amplitude and Meta that a purchase happened, to measure our ads.
• Meta: that the app was installed from an ad. The advertising identifier (IDFA) only if you allow tracking when the app asks; you can change it any time in Settings › Privacy & Security › Tracking.
• Apple Maps: the 3D globe loads satellite imagery from Apple, like any map. It does not receive your visited countries.

We use this data to fix problems, understand which features help, and know which ads bring people to the app. We do not sell it, and no account, name or email is ever asked for.

Your choices and rights

You can use Mundipin without allowing photos (tick countries by hand), without location and without tracking. Deleting the app deletes everything stored on the device; turn off iCloud for Mundipin to stop syncing. If you are in the EU, UK or Brazil you can ask to access or delete the analytics tied to your anonymous id: write to us and we will find and delete it with you.

This website

On mundipin.com we count visits with Umami, running on our own server. Umami sets no cookies and does not record your name, email or an advertising identifier: only the page viewed, the page you came from, the browser, the device type and an approximate country. The Schengen calculator and the map on the home page run in your browser and keep what you enter only there.

Contact

Savyo Brenner, independent developer, Madrid, Spain. contact.ntpco@gmail.com. Mundipin is not meant for children under 13. If this policy changes, the date above changes with it.