Privacy Policy
Effective October 31, 2026
My Travel Challenge is operated by Big Blue Sky Labs, LLC, an Arizona limited liability company ("we," "us"). This policy explains what we collect when you use the app at app.mytravelchallenge.com, our website at mytravelchallenge.com, and our future iPhone and Android apps (together, the "Service"), and how we use and share it.
We don't sell your personal information, and we don't show ads.
1. Information we collect
| What | Examples | Where it comes from |
|---|---|---|
| Account | Name, email address, password (stored only as a secure hash), sign-in links | You, when you sign up or sign in |
| Profile and preferences | Home city, travel style, favorite cuisines, price comfort, dietary needs you choose to share | You (all optional) |
| Travel content | Countries, states and cities you've visited, trips, bucket list, favorites, challenges, places, check-offs, dates | You and the people you share with |
| Ratings, notes and messages | Scores, visit notes, comments, chat messages, photos you add | You |
| Groups and invitations | Group and challenge memberships, the email address and optional name of someone you invite, an optional invite note | You and the people who invite you |
| Referrals and rewards | Your referral code, who joined through your link, stamps and badges | Generated by the Service |
| AI requests | What you ask the AI to find (for example "taco spots in North Phoenix"), your challenge preferences, and the suggestions returned | You and our AI provider |
| Device and usage | IP address, browser and device type, pages used, error reports, timestamps, email delivery records | Collected automatically |
Some features listed here, such as photos, chat and profile preferences, are being added over time. This policy applies to each one as it becomes available.
Location. We use the places you enter to put them on your map. We don't track your device's location in the background. If a future app feature uses your current location (for example "near me"), it will ask your permission first.
Browser storage. We store your sign-in session and short-lived invite or referral codes in your browser's local storage so you stay signed in and your invite isn't lost. We don't use advertising cookies or cross-site trackers.
2. How we use it
- Run the Service: your map, challenges, trips, ratings, stamps and leaderboards.
- Let you play with others: show your progress, ratings and notes to the people in your groups and challenges.
- Send the emails you and your crew trigger (see section 4).
- Generate AI suggestions for your challenges, matched to your preferences.
- Keep the Service safe: prevent abuse, fix errors, enforce usage limits and our Terms.
- Improve the Service using aggregate, non-identifying usage.
- Meet legal obligations.
We don't use your content to build advertising profiles, and we limit what our AI provider receives (see section 3).
3. Who sees your information
People you play with. Members of your groups and challenges see your name, your progress, and what you add there. People invited only to watch a challenge see its places and what's done, but not scores, visit notes or other members' email addresses. Your map is private until you share it.
Service providers. They process data only to run the Service for us:
| Provider | What they do | Data involved |
|---|---|---|
| Supabase | Database and sign-in | Account and all app content |
| Vercel | Hosting and running the app | Requests, IP address, logs |
| Resend | Sending email | Recipient address, email content, delivery status |
| Mapbox | Maps and place search | Place names and map views you request, IP address |
| xAI | AI suggestions | Your AI requests and challenge preferences, not your email address |
| Google Fonts | Loading fonts | IP address, browser details |
xAI does not use these requests to train its models, and deletes them after 30 days.
Legal and safety. We may disclose information if the law requires it, to protect someone's safety, or to enforce our Terms.
Business changes. If the Service is sold or merged, your information may transfer to the new owner under this policy.
We never sell or rent your personal information.
4. Emails we send
- Account emails: sign-in links, password resets, and important notices about the Service.
- Invitations you send: when you invite someone, we email them on your behalf with your name, the group or challenge, and any note you add. Only invite people you know who would want to hear from you.
- One reminder: if an invitation isn't answered in 3 days, we send one reminder, never more.
- Activity notices: for example, "Wendy joined your challenge." Each is sent once.
We don't send marketing email without your consent. To stop activity emails, or invitation emails to your address, write to hello@mytravelchallenge.com and we will stop.
5. Keeping, deleting and your choices
How long we keep it. We keep your information while your account is open. When you delete your account, we delete your profile and content within 30 days, except where we must keep records for legal, security or billing reasons. Copies in our backups are deleted on a rolling schedule within 30 days after that. Content you added to a shared challenge (for example a place or a rating) stays with that challenge so your crew's progress isn't lost, shown as "Former member" instead of your name.
Your choices.
- See and edit your name, email, profile and content in the app.
- Delete your account in the app (Menu → Your account → Delete account, as it becomes available), or by writing to hello@mytravelchallenge.com.
- Leave a group or challenge at any time.
- Decline invitations, and ask us to stop invitation emails to your address.
Your rights. Depending on where you live (for example California or the EU/UK), you may have the right to access, correct, delete, or receive a copy of your information, to object to or limit certain uses, and to not be discriminated against for using these rights. Write to hello@mytravelchallenge.com and we will respond within 30 days, or sooner if the law requires. We may need to confirm your identity first.
6. Children
The Service is not for children under 13, and we don't knowingly collect their information. If you believe a child under 13 has an account, write to us and we will delete it. Users aged 13 to 17 need a parent or guardian's permission.
7. Security
We use encryption in transit, hashed passwords, access controls that limit each person to their own and shared data, and admin audit logs. No system is perfectly secure, so please use a strong password or sign-in links, and tell us if you suspect a problem.
8. Where your data is stored
We are based in the United States, and our providers store data in the United States. If you use the Service from elsewhere, your information is transferred to and processed in the U.S.
9. Changes to this policy
We will post any change here and update the effective date. If a change is significant, we will tell you in the app or by email before it takes effect.
10. Contact
Big Blue Sky Labs, LLC · hello@mytravelchallenge.com