Privacy

Last updated 14 August 2026

Compa is built local-first. That is not a slogan, it is the architecture: your trips, plans, tickets, photos, diary and budget are stored in your phone's own storage and never leave it by default. There are no accounts, no login, no advertising, no tracking, and no analytics companies watching you plan a holiday.

What stays on your device

Everything, unless you take one of the three actions below. Deleting the app deletes your data, because your device is where the data lives.

The three things that send data anywhere

• Sharing a trip. When you create a share link, the trip plan (cities, days, plans, checklists) is uploaded to our server so your friend's link works. Shared trips expire and are deleted automatically within 30 days. No name, no email, no identity travels with them.
• Encrypted backup. If you turn backup on, your trip data is encrypted on your device (AES-GCM 256) before upload. We store a blob we cannot read. The key stays with you; losing it means nobody, including us, can open the backup.
• Assistant features. When you ask the assistant something, the thing you submitted (a question, a pasted booking, a photographed ticket, an itinerary PDF) is sent to our server, which passes it to an AI provider (Mistral, with DeepSeek as fallback) to produce the answer, then returns it to your phone. We do not store your documents or questions. Some general, non-personal answers (like country facts) are cached so the next traveller's identical question is answered without a new AI call.

Your location

If you tap "Look around", the app reads your position once, uses it on the device to sort your own saved places by distance, and throws it away. Your location is never stored and never transmitted. There is no background location.

Your camera

The camera opens only when you tap Scan, to photograph a ticket or document you choose to add. Barcodes are read entirely on the device.

Identifiers and usage

Assistant calls carry a random identifier your app made up locally, so free usage can be counted and a purchased pass can be honoured without accounts. It identifies an installation, not a person, and it resets if you clear the app's data. Our server keeps a count of which assistant features ran and whether they worked, never their content, so we can enforce fair-use limits and help you if a pass ever misbehaves.

Payments

The app is free. If you buy a trip pass, the payment is handled by the payment provider or the app store; they handle your payment details and, where applicable, your email for the receipt. We never see card numbers and do not keep an account for you.

What we never do

• No selling of data, to anyone, ever.
• No advertising and no ad identifiers.
• No third-party analytics or tracking SDKs.
• No reading of contacts, calendars, messages or anything else the app does not plainly need.

Your choices

• Every network feature above is opt-in by a clear action; skip the action and nothing is sent.
• Delete the app to delete your local data.
• Shared links expire on their own; backups can be overwritten from your device.

Contact

Questions about any of this: [email protected].

This page describes the app as shipped. If a future version changes what leaves your device, this page changes first.