Privacy Policy

1. Who we are and what this policy covers

Let’s Go is operated by Black Ocean LLC, a California limited liability company (“Black Ocean,” “Let’s Go,” “we,” “us,” or “our”). This Privacy Policy explains how information is handled when you use the Let’s Go mobile application, our related website, and services that link to this policy (collectively, the “Service”). Black Ocean LLC is the controller of personal information processed for its own purposes through the Service.

2. Information handled by the Service

Browsing without an account

Discovery, the map, place details, free stories, tours, events, and itinerary previews are available without registration. You do not need to provide a name or email address just to browse. Signing in is required for account-based features such as saved places and events, folders, personal plans, and cloud synchronization.

Browsing while signed out does not mean that no information is processed. The app may store local preferences and cached content, and our service providers may receive technical information needed to deliver maps, content, images, and support services, as described below. Optional location processing depends on your permission choices, not on whether you have an account.

Account and authentication information

When you create a Let’s Go account with email, we collect your first and last name and email address. Supabase provides our account and authentication infrastructure and processes your password, verification status, account identifier, session information, and related security records. Black Ocean does not receive your password in readable form. Supabase may also process technical information such as your IP address, device or browser information, request time, and authentication events to provide and secure the account service.

If you choose an available Apple or Google sign-in option, the provider may send us and Supabase account information you authorize, such as your name, email address, provider account identifier, and profile image. Your use of that provider is also governed by its privacy policy and account settings.

Account verification and password-recovery messages are delivered by Resend on behalf of Let’s Go. Resend processes your email address and the message content and may process delivery information needed to send, secure, and troubleshoot those messages. Supabase handles customer data as a service provider to Black Ocean under its applicable customer-data terms. See the Supabase Privacy Policy and the Resend Privacy Policy.

Profile and personal-library information

When you are signed in, Let’s Go stores your display name and personal library through Supabase. Your personal library can include identifiers for saved places and events, saved-place folders and assignments, and travel plans you create, including plan dates, notes, and manually entered plan items. This information is associated with your Let’s Go account and is used to keep your library available across supported devices.

If you choose a profile photo, the app resizes it and converts it to JPEG on your device, then uploads it to private Supabase storage. The photo is not public and access is limited to your signed-in account. Let’s Go also keeps local copies of profile and library information so the app can load quickly and continue working during temporary network interruptions.

Information stored only on your device

Search entries, map and navigation state, recent app state, location permission choices, and most app preferences are stored locally on your device and are not included in personal-library sync. This local information generally remains until you clear the app’s storage or uninstall the app, subject to your device and backup settings.

Location and Google Maps

Location access is optional. If you enable location and grant iOS permission, Let’s Go accesses your precise or approximate location while the Explore map is using location services. We use it to position you on the map, identify the supported city around you, follow your position while you explore, and show nearby curated places. You can use Let’s Go without sharing location by selecting a city or moving the map manually.

The app uses Google Maps to display maps. When location is enabled, map requests may include your location or a map center derived from it. Google may also receive technical information such as your IP address, request parameters, request time, browser or device type, operating system, application information, and response status. We do not use location for advertising, do not build a location history, and do not store your precise location on Black Ocean servers. Google handles information according to the Google Privacy Policy and the Google Maps/Google Earth Additional Terms.

Premium subscriptions

Apple processes Let’s Go Premium purchases, billing information, and subscription management through the App Store. Let’s Go does not receive your full payment-card or bank-account details. The app reads Apple-provided information such as the subscription product, active or inactive status, expiration date, cancellation state, and revocation state so that it can unlock Premium content, restore a purchase, and display access status. Black Ocean may receive aggregated sales and financial reports from Apple. Apple handles information under the Apple Privacy Policy.

Deleting local Let’s Go data does not cancel a subscription because the subscription is associated with your Apple Account. You can manage or cancel it in your Apple Account subscription settings.

Hosted travel content

Let’s Go retrieves published city guides, editorial content, place information, and media from Sanity’s content-delivery services. Sanity may process technical request information such as IP address, date and time, browser or device type, operating system, requested content, transfer volume, performance information, and error data to deliver, secure, and troubleshoot the service. Sanity handles this information according to the Sanity Privacy Policy.

App usage counts

Newer app versions send a limited event name and, when relevant, the city, article, or place's public app ID to a Let’s Go endpoint hosted by Supabase. We use these events to count article and place views, map and save actions within articles, paywall views, and subscription attempts. The database keeps daily totals, without account IDs, device IDs, email addresses, transaction IDs, precise location, or individual event histories. Supabase may process IP addresses and request metadata transiently to deliver and secure the endpoint. These counts do not use Meta and do not depend on Apple's tracking permission.

Remote media and external websites

Some images or other media may be delivered by content-delivery networks or websites operated by venues, publishers, or other content sources. Loading remote media sends a technical request to the host, which may receive information such as your IP address, request time, requested file, and browser or device information. Let’s Go does not send your local profile, saved places, or profile photo with those requests. Independent hosts process information under their own privacy policies.

Let’s Go also contains links to venue websites, ticketing services, social platforms, and other third-party services. When you choose to open an external link, that service’s terms and privacy policy apply. Black Ocean is not responsible for the privacy practices of independent third parties.

Support communications

If you choose to send a problem report in Let’s Go, we receive the content of your report, any reply email address you optionally provide, your selected profile city, app version, basic device or browser information, submission time, IP address, and related correspondence. We use this information to respond, troubleshoot, protect the Service, and keep appropriate business records. Problem reports are transmitted through Vercel’s hosting infrastructure and Resend’s email-delivery service. Their processing is governed by the Vercel Privacy Notice and the Resend Privacy Policy.

You may instead choose the email option, which opens a prepared email draft addressed to Black Ocean. The report is not delivered until you send that draft, and your email provider processes it under its own terms and privacy policy.

Optional advertising measurement

App versions with Meta measurement request Apple's App Tracking Transparency permission after the opening screen. If you allow it, Meta's iOS SDK receives app activation and session information, completed subscription events, and technical information such as device identifiers, the advertising identifier, device and app characteristics, and network information including IP address. Subscription events include the product, transaction identifier, purchase amount, and currency. We use this information to measure which ads bring installs and subscribers and to improve our campaigns. Meta may associate it with information from its services under its Privacy Policy.

We do not initialize Meta measurement before permission or after permission has been denied or restricted. We do not send your account email, name, profile photos, saved places, plans, search entries, or GPS coordinates to Meta. Automatic purchase logging is disabled; we report eligible Apple-verified subscription purchases explicitly. Restores and test purchases are excluded. You can withdraw tracking permission in iOS Settings under Privacy & Security > Tracking. This stops future measurement from the app and does not undo data previously sent. Existing app versions without this integration do not send Meta measurement events.

Separately, the app registers its first launch with Apple's SKAdNetwork so Apple can report eligible ad-driven installs in an aggregate, privacy-preserving way. These Apple-signed postbacks do not contain user- or device-specific identifiers and do not require Apple's tracking permission. Reporting is subject to Apple's attribution windows and privacy thresholds.

Information we do not collect through the app

The current app does not collect contacts, calendars, health data, biometric identifiers, or microphone recordings. It does not display third-party ads. It does not upload your contacts, precise location history, or search history to Black Ocean servers. Profile and personal-library sync is limited to the information described above.

3. How we use information

We use information only as reasonably necessary to:

• Create, verify, secure, recover, and delete Let’s Go accounts.
• Sync and restore your private profile and personal library.
• Provide maps, nearby-place features, and published travel content.
• Understand which articles and app features people use in aggregate.
• Process and restore Premium access through Apple.
• Measure and improve our advertising when you allow tracking.
• Respond to support requests and troubleshoot problems.
• Maintain the security, integrity, and reliability of the Service.
• Comply with law and enforce applicable terms.

Where European or similar data-protection law applies, our legal bases are: your consent for optional location access; performance of a contract or steps requested by you for Premium and support services; our legitimate interests in operating, securing, improving, and supporting the Service; and compliance with legal obligations. You may withdraw location consent at any time through iOS Settings.

4. How information is disclosed

Information may be disclosed only in the following circumstances:

• Service providers: Supabase for accounts, authentication, private profile-photo storage, personal-library sync, and aggregate app usage counts; Resend for account and support email delivery, Apple for App Store purchases, Google for maps, Sanity for content delivery, Vercel for report-endpoint hosting, and other infrastructure or support providers necessary to operate the Service.
• Optional Meta measurement: with tracking permission, we share the advertising measurement information described above with Meta. Meta processes this information under its own terms and privacy policy.
• Legal and safety reasons: when reasonably necessary to comply with law, legal process, or a lawful government request; protect users, Black Ocean, or others; investigate fraud or abuse; or enforce our rights.
• Business transaction: in connection with a merger, financing, acquisition, reorganization, bankruptcy, or transfer of all or part of the Service, subject to appropriate safeguards.
• At your direction: when you choose to open an external service or share information using your device.

We require service providers acting on our behalf to use information only for authorized purposes and to provide protections consistent with this policy, their agreements with us, and applicable law.

5. Advertising measurement and tracking choices

Black Ocean does not sell personal information for money. With your tracking permission, Meta measurement may link activity in this app with activity on other companies' apps and websites. This can qualify as sharing for cross-context behavioral advertising under applicable privacy laws. You can decline Apple's tracking prompt or disable tracking for Let’s Go in iOS Settings at any time. The app remains usable and subscription access is unaffected by your choice.

6. Retention

• Let’s Go account information, your synced profile, your personal library, and private profile photos remain until you delete your account or replace the applicable information. Account deletion removes the active Supabase Auth user, associated profile and library records, private profile-photo objects, and active sessions, subject to limited security logs, backups, dispute records, and legal retention obligations.
• Local cached profile, library, and app data remain until they are cleared by the app, you clear app storage, or you uninstall the app. Uninstalling without deleting your account does not delete the synced copy associated with your account.
• Precise location is used in memory while location features are active. Black Ocean does not keep a server-side location history.
• Premium subscription records are maintained by Apple under Apple’s policies. Let’s Go reads the current entitlement state as needed but does not maintain an independent subscriber account in the current version.
• Support correspondence is generally retained for no longer than 24 months after the last interaction, unless a longer period is reasonably necessary for security, disputes, or legal obligations.
• Google, Sanity, remote media hosts, and other independent providers retain technical logs according to their applicable terms and privacy policies.

7. Your choices and privacy rights

• Delete your Let’s Go account in the app. This removes the hosted account, synced profile and personal library, private profile photos, and sessions, but does not cancel an Apple subscription.
• Decline location and browse by selecting or moving the map.
• Change or revoke location permission in iOS Settings.
• Decline or revoke optional advertising tracking in iOS Settings.
• Clear local app data by clearing app storage or uninstalling the app.
• Manage or cancel Premium through your Apple Account.
• Choose whether to send a prepared support report.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection; to withdraw consent; and to appeal or complain to a data-protection authority. These rights may be subject to legal exceptions. Because some Let’s Go information remains only on your device, Black Ocean may not possess that local information. You can exercise applicable rights by emailing info@letsgotravelguide.com. We may need to verify your request and may allow an authorized agent where required by law. We will not discriminate against you for exercising a privacy right.

8. California privacy notice

This section supplements the rest of the policy for California residents. In the preceding 12 months, the Service may have handled the following categories of personal information: identifiers such as name, email address, and account identifier; technical network information such as IP address; internet or other electronic network activity associated with authentication, content, and map requests; precise or approximate geolocation when enabled; commercial information related to Premium status; and support correspondence you choose to provide. Sources and purposes are described above.

Precise geolocation is considered sensitive personal information under California law. We use it only to provide the location-based functionality you request and do not use it to infer characteristics about you. We do not sell personal information for money. Optional Meta measurement described above may constitute sharing for cross-context behavioral advertising. To the extent the California Consumer Privacy Act applies, California residents may request to know, access, delete, or correct personal information and may limit certain uses of sensitive personal information. To opt out of future advertising measurement sharing, decline the tracking prompt or disable tracking for Let’s Go in iOS Settings. Submit other privacy requests using the contact information below.

9. International processing

Black Ocean is based in the United States, and the Service is offered internationally. Information processed by us or our providers may be transferred to and processed in the United States and other countries whose privacy laws may differ from those where you live. Where required, we rely on appropriate safeguards made available by our providers, such as contractual protections for international data transfers.

10. Children’s privacy

Let’s Go is a general-audience travel service and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to Black Ocean, contact us so we can investigate and delete it when required. Users below the age at which they may consent to data processing in their country should use the Service only with permission from a parent or legal guardian.

11. Security

We use reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Supabase provides the hosted account, authentication, personal-library database, and private profile-photo infrastructure. Access controls are designed so signed-in users can access only their own profile, library, and photos. The security of local cached data also depends on your device, passcode, backups, and operating system settings.

12. Changes to this policy

We may update this policy as the Service, providers, or applicable laws change. We will update the effective date and provide additional notice when required. Your continued use of the Service after an update is subject to the revised policy, except where consent is required by law.

13. Contact us

For privacy questions or requests, contact: