Privacy Policy

1. Who we are and what this policy covers

Let’s Go is operated by Black Ocean LLC, a California limited liability company (“Black Ocean,” “Let’s Go,” “we,” “us,” or “our”). This Privacy Policy explains how information is handled when you use the Let’s Go mobile application, our related website, and services that link to this policy (collectively, the “Service”). Black Ocean LLC is the controller of personal information processed for its own purposes through the Service.

2. Information handled by the Service

Browsing without an account

Discovery, the map, place details, free stories, tours, events, and itinerary previews are available without registration. You do not need to provide a name or email address just to browse. Signing in is required for account-based features such as saved places and events, folders, personal plans, and cloud synchronization.

Browsing while signed out does not mean that no information is processed. The app may store local preferences and cached content, and our service providers may receive technical information needed to deliver maps, content, images, and support services, as described below. Optional location processing depends on your permission choices, not on whether you have an account.

Account and authentication information

When you create a Let’s Go account with email, we collect your first and last name and email address. Supabase provides our account and authentication infrastructure and processes your password, verification status, account identifier, session information, and related security records. Black Ocean does not receive your password in readable form. Supabase may also process technical information such as your IP address, device or browser information, request time, and authentication events to provide and secure the account service.

If you choose an available Apple or Google sign-in option, the provider may send us and Supabase account information you authorize, such as your name, email address, provider account identifier, and profile image. Your use of that provider is also governed by its privacy policy and account settings.

Account verification and password-recovery messages are delivered by Resend on behalf of Let’s Go. Resend processes your email address and the message content and may process delivery information needed to send, secure, and troubleshoot those messages. Supabase handles customer data as a service provider to Black Ocean under its applicable customer-data terms. See the Supabase Privacy Policy and the Resend Privacy Policy.

Profile and personal-library information

When you are signed in, Let’s Go stores your display name and personal library through Supabase. Your personal library can include identifiers for saved places and events, saved-place folders and assignments, and travel plans you create, including plan dates, notes, and manually entered plan items. This information is associated with your Let’s Go account and is used to keep your library available across supported devices.

If you choose a profile photo, the app resizes it and converts it to JPEG on your device, then uploads it to private Supabase storage. The photo is not public and access is limited to your signed-in account. Let’s Go also keeps local copies of profile and library information so the app can load quickly and continue working during temporary network interruptions.

Information stored only on your device

Search entries, map and navigation state, recent app state, location permission choices, and most app preferences are stored locally on your device and are not included in personal-library sync. This local information generally remains until you clear the app’s storage or uninstall the app, subject to your device and backup settings.

Location and Google Maps

Location access is optional. If you enable location and grant iOS permission, Let’s Go accesses your precise or approximate location while the Explore map is using location services. We use it to position you on the map, identify the supported city around you, follow your position while you explore, and show nearby curated places. You can use Let’s Go without sharing location by selecting a city or moving the map manually.

The app uses Google Maps to display maps. When location is enabled, map requests may include your location or a map center derived from it. Google may also receive technical information such as your IP address, request parameters, request time, browser or device type, operating system, application information, and response status. We do not use location for advertising, do not build a location history, and do not store your precise location on Black Ocean servers. Google handles information according to the Google Privacy Policy and the Google Maps/Google Earth Additional Terms.

Premium subscriptions

Apple processes Let’s Go Premium purchases, billing information, and subscription management through the App Store. Let’s Go does not receive your full payment-card or bank-account details. The app reads Apple-provided information such as the subscription product, active or inactive status, expiration date, cancellation state, and revocation state so that it can unlock Premium content, restore a purchase, and display access status. Black Ocean may receive aggregated sales and financial reports from Apple. Apple handles information under the Apple Privacy Policy.

Deleting local Let’s Go data does not cancel a subscription because the subscription is associated with your Apple Account. You can manage or cancel it in your Apple Account subscription settings.

Hosted travel content

Let’s Go retrieves published city guides, editorial content, place information, and media from Sanity’s content-delivery services. Sanity may process technical request information such as IP address, date and time, browser or device type, operating system, requested content, transfer volume, performance information, and error data to deliver, secure, and troubleshoot the service. Sanity handles this information according to the Sanity Privacy Policy.

Remote media and external websites

Some images or other media may be delivered by content-delivery networks or websites operated by venues, publishers, or other content sources. Loading remote media sends a technical request to the host, which may receive information such as your IP address, request time, requested file, and browser or device information. Let’s Go does not send your local profile, saved places, or profile photo with those requests. Independent hosts process information under their own privacy policies.

Let’s Go also contains links to venue websites, ticketing services, social platforms, and other third-party services. When you choose to open an external link, that service’s terms and privacy policy apply. Black Ocean is not responsible for the privacy practices of independent third parties.

Support communications

If you choose to send a problem report in Let’s Go, we receive the content of your report, any reply email address you optionally provide, your selected profile city, app version, basic device or browser information, submission time, IP address, and related correspondence. We use this information to respond, troubleshoot, protect the Service, and keep appropriate business records. Problem reports are transmitted through Vercel’s hosting infrastructure and Resend’s email-delivery service. Their processing is governed by the Vercel Privacy Notice and the Resend Privacy Policy.

You may instead choose the email option, which opens a prepared email draft addressed to Black Ocean. The report is not delivered until you send that draft, and your email provider processes it under its own terms and privacy policy.

Information we do not collect through the current app

The current app does not collect contacts, calendars, health data, biometric identifiers, advertising identifiers, or microphone recordings. It does not include third-party advertising, behavioral advertising, cross-app tracking, or third-party analytics SDKs. It does not upload your contacts, precise location history, or search history to Black Ocean servers. Profile and personal-library sync is limited to the information described above.

3. How we use information

We use information only as reasonably necessary to:

• Create, verify, secure, recover, and delete Let’s Go accounts.
• Sync and restore your private profile and personal library.
• Provide maps, nearby-place features, and published travel content.
• Process and restore Premium access through Apple.
• Respond to support requests and troubleshoot problems.
• Maintain the security, integrity, and reliability of the Service.
• Comply with law and enforce applicable terms.

Where European or similar data-protection law applies, our legal bases are: your consent for optional location access; performance of a contract or steps requested by you for Premium and support services; our legitimate interests in operating, securing, improving, and supporting the Service; and compliance with legal obligations. You may withdraw location consent at any time through iOS Settings.

4. How information is disclosed

Information may be disclosed only in the following circumstances:

• Service providers: Supabase for accounts, authentication, private profile-photo storage, and personal-library sync; Resend for account and support email delivery, Apple for App Store purchases, Google for maps, Sanity for content delivery, Vercel for report-endpoint hosting, and other infrastructure or support providers necessary to operate the Service.
• Legal and safety reasons: when reasonably necessary to comply with law, legal process, or a lawful government request; protect users, Black Ocean, or others; investigate fraud or abuse; or enforce our rights.
• Business transaction: in connection with a merger, financing, acquisition, reorganization, bankruptcy, or transfer of all or part of the Service, subject to appropriate safeguards.
• At your direction: when you choose to open an external service or share information using your device.

We require service providers acting on our behalf to use information only for authorized purposes and to provide protections consistent with this policy, their agreements with us, and applicable law.

5. No sale, targeted advertising, or tracking

Black Ocean does not sell personal information. We do not share personal information for cross-context behavioral advertising, use personal information for targeted advertising, or track you across apps and websites owned by other companies. The current app does not request App Tracking Transparency permission because it does not engage in tracking as Apple defines that term.

6. Retention

• Let’s Go account information, your synced profile, your personal library, and private profile photos remain until you delete your account or replace the applicable information. Account deletion removes the active Supabase Auth user, associated profile and library records, private profile-photo objects, and active sessions, subject to limited security logs, backups, dispute records, and legal retention obligations.
• Local cached profile, library, and app data remain until they are cleared by the app, you clear app storage, or you uninstall the app. Uninstalling without deleting your account does not delete the synced copy associated with your account.
• Precise location is used in memory while location features are active. Black Ocean does not keep a server-side location history.
• Premium subscription records are maintained by Apple under Apple’s policies. Let’s Go reads the current entitlement state as needed but does not maintain an independent subscriber account in the current version.
• Support correspondence is generally retained for no longer than 24 months after the last interaction, unless a longer period is reasonably necessary for security, disputes, or legal obligations.
• Google, Sanity, remote media hosts, and other independent providers retain technical logs according to their applicable terms and privacy policies.

7. Your choices and privacy rights

• Delete your Let’s Go account in the app. This removes the hosted account, synced profile and personal library, private profile photos, and sessions, but does not cancel an Apple subscription.
• Decline location and browse by selecting or moving the map.
• Change or revoke location permission in iOS Settings.
• Clear local app data by clearing app storage or uninstalling the app.
• Manage or cancel Premium through your Apple Account.
• Choose whether to send a prepared support report.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection; to withdraw consent; and to appeal or complain to a data-protection authority. These rights may be subject to legal exceptions. Because some Let’s Go information remains only on your device, Black Ocean may not possess that local information. You can exercise applicable rights by emailing info@letsgotravelguide.com. We may need to verify your request and may allow an authorized agent where required by law. We will not discriminate against you for exercising a privacy right.

8. California privacy notice

This section supplements the rest of the policy for California residents. In the preceding 12 months, the Service may have handled the following categories of personal information: identifiers such as name, email address, and account identifier; technical network information such as IP address; internet or other electronic network activity associated with authentication, content, and map requests; precise or approximate geolocation when enabled; commercial information related to Premium status; and support correspondence you choose to provide. Sources and purposes are described above.

Precise geolocation is considered sensitive personal information under California law. We use it only to provide the location-based functionality you request and do not use it to infer characteristics about you. We do not sell personal information or share it for cross-context behavioral advertising. To the extent the California Consumer Privacy Act applies, California residents may request to know, access, delete, or correct personal information and may limit certain uses of sensitive personal information. Because we do not sell or share personal information as those terms are defined for cross-context behavioral advertising, there is no sale or sharing to opt out of. Submit requests using the contact information below.

9. International processing

Black Ocean is based in the United States, and the Service is offered internationally. Information processed by us or our providers may be transferred to and processed in the United States and other countries whose privacy laws may differ from those where you live. Where required, we rely on appropriate safeguards made available by our providers, such as contractual protections for international data transfers.

10. Children’s privacy

Let’s Go is a general-audience travel service and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to Black Ocean, contact us so we can investigate and delete it when required. Users below the age at which they may consent to data processing in their country should use the Service only with permission from a parent or legal guardian.

11. Security

We use reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Supabase provides the hosted account, authentication, personal-library database, and private profile-photo infrastructure. Access controls are designed so signed-in users can access only their own profile, library, and photos. The security of local cached data also depends on your device, passcode, backups, and operating system settings.

12. Changes to this policy

We may update this policy as the Service, providers, or applicable laws change. We will update the effective date and provide additional notice when required. Your continued use of the Service after an update is subject to the revised policy, except where consent is required by law.

13. Contact us

For privacy questions or requests, contact: