VISUM INFORMATION
Privacy policy
How Visum handles information when you browse places or use an account.
Last updated 29 October 2026
Who is responsible
Visum is operated by Joshua Mason, an individual in the United Kingdom. For privacy requests or questions, email submission@visumapp.uk.
Information we use
•
If you create an account, we use your email address, an optional display name, login credentials, a record of terms acceptance, the places you save and any visits you record, including visit dates and optional private notes. Supabase handles the password and authentication.
•
When you see the planned visit-photo tile, open its information dialog or express interest, we keep the first time each stage happens and whether it was on the new-visit or edit-visit form. These records are linked to your account so repeat taps do not inflate the totals. They do not include visit locations, notes, photographs or device identifiers.
•
Our hosting and authentication providers process technical information needed to serve and protect the service, such as your IP address, device or browser details, request times and security logs.
•
Search terms, chosen areas and filter choices can appear in page URLs, browser history and links you share. We do not keep a separate search history. If you choose “Use my location”, your device position is used once to calculate nearby results on your device. It stays in app memory for up to 30 minutes, is cleared on account changes, and is not added to URLs, stored in our database or passed to map embeds. You can clear it or choose an area instead. There is no background location tracking. Visum does not currently use advertising or marketing trackers, sell personal information, or take payments.
Why we use it
•
We use account information, saved places and visit records to provide the features you request. Our lawful basis is performance of the agreement with you. Collection progress is calculated from those private visit records; there is no public participation history. Updating a collection or removing visits can change your progress.
•
Editors can see aggregate visit and repeat-recording totals to understand whether Visum is useful. The insights screen does not reveal individual accounts, visit dates or notes. It uses existing visit records without a separate tracking service.
•
We use aggregate interest in planned visit photos to prioritise development, based on our legitimate interest in improving Visum. Expressing interest does not enrol you in marketing emails or start a subscription or purchase.
•
We use service and security logs to maintain, troubleshoot and protect Visum. Our lawful basis is our legitimate interest in operating a reliable, secure service.
•
We may use or keep information where necessary to meet a legal obligation or handle a legal claim.
Who receives information
Supabase provides authentication, database and image storage. Cloudflare hosts the website. Opening a map loads Leaflet code from unpkg and map tiles from OpenStreetMap; opening an externally hosted photo contacts its host, often Wikimedia. Those services may receive your IP address and browser or device information. If you tap directions, Google Maps opens separately. Sources and photo links also open external sites. Their own privacy notices apply when you use those services.
Cloudflare privacy notice
OpenStreetMap Foundation privacy notice
Storage, transfers and retention
Account, saved-place and visit records are kept while your account is active, unless you remove them sooner. Your session is stored on your device in secure storage on iOS and Android, or browser local storage on the web. Deleting your account removes its live account, profile, saved-place records, visits, notes and planned-feature interest records. Planned-feature interest records are retained while your account is active. Removing a catalogue entry preserves your private visit title, region, date and note, but removes its map pin. If you submitted or reviewed a place as an editor, we keep the place research and review trail but remove its link to your account. Images and app resources may also be cached on your device. Provider backups expire under their backup schedules. Operational logs are kept for the time needed to run and protect the service, subject to provider retention settings; we can tell you the current periods on request. Information needed for a legal obligation or claim may be kept for longer where the law permits.
Visum’s core Supabase database, authentication and image storage are hosted in Ireland. Supabase may support the service from outside that region, and Cloudflare operates a global network. Where required, transfers are protected by UK adequacy arrangements or contractual safeguards, including UK Addenda to standard contractual clauses in our providers’ data processing terms. Email us for details or a copy of the applicable safeguards.
Your choices and rights
You can edit your display name in Account and permanently delete your account and its saved places, visits and notes through the Delete account page. You can edit or remove individual visits in Your explorations. You can also email submission@visumapp.uk to request access, correction, deletion, restriction, portability, or to object to processing based on legitimate interests. We will respond under applicable data protection law. You may complain to the UK Information Commissioner’s Office.
Your right to object
You can object at any time to processing based on our legitimate interests, including operational and security logs and planned-feature interest measurement, by emailing submission@visumapp.uk. We will consider the request under data protection law.
Changes
We will update this policy when our services or data use change. Material changes will be brought to account holders’ attention before new processing starts where required.