Privacy policy
Last updated 14 October 2026
Globetick is a travel map: you tick off the places you've visited. We built it so that your data stays yours. Use it without an account. Sign in only if you want your map backed up.
- Without an account, your places stay on your device. Nothing is sent to us.
- Optional sign-in keeps your map backed up and synced between your iPhone, iPad and Mac. To do that we store your email address (or Apple's private relay address), a user ID, the places you've ticked and the passport stamps you've earned, and nothing else.
- No ads, no tracking, no analytics, and we never sell or share your data. We don't use your email for marketing.
Using Globetick without an account
- Your ticked places, passport stamps and settings (such as light or dark appearance) are stored on your device only. We can't see them.
- The widgets read a small summary (your counts and a picture of your map) that the app saves in a shared area on your device.
- Nothing leaves your device unless you share your poster, which goes wherever you choose in the share sheet.
If you sign in (optional)
You can create a free account with Sign in with Apple or with your email address and a one-time code. There are no passwords.
What we collect, and why
| Data | Why |
|---|---|
| Your email address, or, with Sign in with Apple's "Hide My Email", Apple's private relay address | To sign you in and to send the one-time code |
| A user ID (a random identifier created at sign-up) | To know which map is yours |
| The places you've ticked, your passport stamps and the dates you earned them, your most recent tick and your map settings | To save your map and sync it between your devices |
That is the whole list. We don't collect your name, location, contacts, photos or device identifiers, and the app contains no analytics or advertising code.
Where it's stored, and for how long
- Your account and map are stored in the EU on Cloudflare: our hosting provider, Cloudflare, Inc., keeps our database in Western Europe and also sends the sign-in code emails. Cloudflare processes the data only on our instructions, under its Data Processing Addendum (part of Cloudflare's terms for customers).
- If you live outside the EU, your data is therefore transferred to and stored in the EU. By creating an account you agree to that ("Your map is stored securely in the EU" is shown at sign-in).
- Retention. We keep your data for as long as you have an account. When you delete your account, your account, email, places and stamps are deleted from our database immediately. A copy can stay in our provider's automatic database backups (used only to recover from faults) for up to 30 days (7 days on our provider's free plan), then it is gone. We don't keep anything after that. The one-time codes we email expire after 10 minutes; we keep only a scrambled (hashed) copy, deleted within about an hour. To stop abuse we count sign-in attempts per email address and per IP address; those counters are deleted within about a day. Our provider keeps standard server logs (IP address, time of request) for a short period for security; we don't use them to identify you.
Who can see it
Only you, through the app. Our hosting provider stores it on our behalf. We don't sell, rent or share your data, and we don't use it for advertising or profiling.
Sign in with Apple
Apple tells us only what you allow: a relay or real email address and a token that proves it's you. Apple's own privacy policy covers its side of the sign-in.
Your rights
Whether or not you live in the EU, you can at any time:
- See and export your data. Settings → Account → Download my data gives you a JSON file of everything we hold about you.
- Correct it. Your map is yours to change in the app.
- Delete it. Settings → Account → Delete account removes your account, your email, your places and your stamps from our servers, immediately and without emailing anyone. If you signed in with Apple, we also tell Apple to revoke the sign-in, so Globetick disappears from your Apple ID's "Sign in with Apple" list. You choose whether your places stay on the device, and you can keep using the app afterwards without an account. You can also ask us by email and we'll delete it within 30 days.
- Take it with you. The export is a plain JSON file you can keep or move elsewhere (data portability).
- Sign out and choose whether to keep a copy of your map on the device.
- Withdraw consent, object, or ask us anything by emailing support@globetick.app.
We'll answer requests about your data within 30 days. If you think we've handled your data badly, you can complain to the data-protection authority in the product owner's country, Kenya’s Office of the Data Protection Commissioner (odpc.go.ke). If you live in the EU or UK, you can also complain to your local data-protection authority.
If something goes wrong
If we ever learn of a security breach that affects your personal data, we'll report it to the data-protection authority in the product owner's country within the deadline the law sets (typically 72 hours) and, where the risk to you is high, tell you directly through the app or by email, with what happened and what we're doing about it.
Deleting your data without an account
Use Settings → Clear all places in the app, or delete the app. There is nothing on our servers to delete.
Children
Globetick is for general audiences and isn't aimed at children. We don't knowingly collect information from anyone under 13 (or the age your country sets); if you believe a child has created an account, email us and we'll delete it.
Security
Your data travels encrypted (HTTPS) and is stored on access-controlled servers where each account can only read and write its own row. Sign-in uses one-time codes and Apple's tokens; we never store a password. Account deletion runs on our server from your own signed-in session, so nobody else can delete your account.
Legal basis (for readers in the EU and UK)
We process your account data to provide the service you asked for (contract) and, for the transfer of your data to the EU when you live elsewhere, with your consent given at sign-in. You can withdraw that consent by deleting your account.
Changes
If this policy changes, we'll update this page and the date above. For a change that affects how we use your data, the app will tell you.
Contact
The data controller is XELQ LIMITED ("the product owner"), Nairobi, Kenya. Email: support@globetick.app.