Privacy policy

Who we are

A Long Journey is made by nubuza (nubuza.com), which is responsible for this website. You can reach us through nubuza.com.

What stays on your device

Your trips, places, dates, notes, photos, homes and song are stored in your browser’s storage (IndexedDB), encrypted with AES-256-GCM under a key that is created on your device and can’t be exported. We have no server that receives them and no way to see them.

Photos are re-encoded from their pixels before they are stored, so their hidden data (camera model, GPS position) is not kept. The date and position are read once, on your device, to fill in the trip. The camera is used only when you take a selfie for someone’s portrait, with your permission; the picture never leaves your device.

Place search

When you search for a place, the text you type is sent to Photon (photon.komoot.io, run by komoot, with OpenStreetMap data) to find matching places. When a photo has a GPS position, that position is sent to Photon to find the place’s name. When you look for a free song, the words you type are sent to Openverse (api.openverse.org, run by the WordPress Foundation), and the song you listen to or pick is fetched from Jamendo (jamendo.com). Nothing else is sent, and requests carry no cookies or referrer.

Backups and Google Drive

Backup files are made on your device and encrypted with your passphrase; we never see them. If Google Drive sync is offered and you turn it on (a little cloud next to the gear then shows whether everything is up to date), an encrypted copy is kept in a hidden app folder of your own Google Drive (permission drive.appdata): the app can’t see your other files, and Google can’t read the copy.

What the app does with your Google data: it only creates, reads, updates and deletes its own files in that hidden folder, to keep your devices in step. It doesn’t see your name, email or other files, sends nothing to us or anyone else, and you can disconnect at any time in Settings, or remove its access and its data from your Google Account (Security → Third-party connections). A Long Journey’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Ads and cookies

The website shows ads from Google AdSense. Google and its partners may use cookies to show and measure ads; in the EU and UK you are asked for consent first, through Google’s consent message, and you can change your choice with "Privacy and cookies" at the bottom of the page. The Android app shows Google AdMob ads instead, with the same consent.

We count visits with Cloudflare Web Analytics, which uses no cookies and doesn’t track you across sites.

Your rights

Since your journal is only on your device, you control it: change or delete anything in the app, or delete everything in Settings → Start over. For anything about ads, see Google’s policies at policies.google.com. For questions, contact us through nubuza.com.