Privacy policy

Who we are

gora is a mobile app for planning and sharing group trips. It is launching on iPhone first, with Android to follow. This policy covers both, and this website. gora is published by Denmark Amano Daya (ABN 24 351 667 664), a sole trader in Western Australia, Australia. In this policy, "we", "us" and "our" mean Denmark Amano Daya, the publisher of gora.

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth), and with the privacy laws of the other countries where gora is offered.

Data Protection Officer: Denmark Amano Daya. Contact: [email protected].

Where gora is offered. gora is not offered in the EU/EEA, the United Kingdom, Switzerland, Russia, Türkiye or mainland China.

The short version

• We collect what the app needs to run your trips: your account, the trips (we call each one a "gora") you create or join, and what you add to them.
• What you add to a gora is visible to the other members of that gora (your "crew").
• Location sharing is off until you turn it on. It works only during the trip dates, and we delete shared locations after the trip ends. An SOS sends your location to your crew once.
• Your travel documents, medical card and Translate history stay on your phone. We never upload them.
• Text goes to our AI provider, Anthropic, only when you tap Translate online or send a recap request that your phone cannot plan itself.
• We do not sell or share your personal information, show ads, or use third-party analytics or advertising trackers.

What we collect

Your account

You sign in with Apple or Google. Sign in with Apple is offered on iPhone. We receive your account ID, email address (or Apple's private relay address if you choose to hide your email) and name from that sign-in. We store a display name, which your crews see. When you first sign in, you confirm that you are 18 or older, and we store that confirmation with your account.

Your trips and what you add to them

For each gora you create or join we store:

• trip details: title, destination, dates, time zone and cover photo;
• membership: who is in the gora, their role (organiser or member) and when they joined;
• itinerary items, reminders, alarm items, checklists and who ticked them;
• bookings (for example flight, hotel or tour details and reference numbers you enter) and any photos you attach to them, such as tickets or screenshots;
• chat messages and pings;
• shared packing lists, polls and votes, and ideas and likes;
• expenses: amounts, currencies, who paid, how they are split, categories, budgets and an edit history of each expense;
• places you add to the plan, your ideas or your saved places. We store only Google's ID for the place; the name on a plan item is the text you keep or type. Place details, such as the address, opening hours and photos, are loaded live from Google when you look at them and are not stored by us;
• crew reviews of places: stars and tags, which only your crew can see, and who thanked a review. When someone thanks your review, you get a notification.

Your private packing list for a gora is stored in your account and only you can see it.

Photos, videos and receipts

Photos and videos you add to a gora's shared album, booking photos, the recap clips you post to the album, and receipt photos you attach to expenses are uploaded to our cloud storage. Photos, including receipt photos, are re-saved on your phone before upload, which removes the details your camera recorded, such as where they were taken. Videos are shared as recorded, including any location saved in them. When you upload a photo or video, the app also analyses it on your phone and stores a short summary with it: content tags (such as "beach" or "food"), how many faces it shows and where they are in the frame, and sharpness scores. This summary is used to build recaps. It is not used to recognise or identify anyone.

Location

gora uses your phone's location only for these features:

• Crew location sharing (opt-in). After you agree on a consent screen and turn sharing on for a gora, your position (latitude, longitude, accuracy and time) is saved about every two minutes while the trip is on, including in the background. Your crew sees your distance from the group and you are alerted if you drift away. Sharing works only during the trip dates. When the trip ends we delete every shared location for that gora and switch sharing off.
• SOS. When you send an SOS, an urgent notification goes to the other members of that gora with your location at that moment, if your phone has it. A copy of the alert stays in each member's inbox until they delete it. We keep the times you sent an SOS so we can limit repeated alerts. SOS alerts your crew only. It is not an emergency service.
• Safety. Your location is used to show the emergency numbers of the country you are in. If you ask for the nearest hospitals or police, the app searches Apple Maps directly on your phone, unless you or the gora has Gora Pro. Then your coordinates are sent to Google Places through our server to find them. We do not store them.
• Places. When you look up places to eat, visit or search, the coordinates you search around are sent to Google Places through our server. We do not store them.

You can say no to location access, or turn sharing off at any time. The rest of the app keeps working.

Purchases

Payments are made through Apple's App Store on iPhone, or Google Play on Android. We do not receive your card details. To unlock Gora Pro, our payment provider RevenueCat receives your purchase records from Apple or Google, linked to your gora account ID. We store whether you have Gora Pro, its type (monthly or yearly) and its expiry.

Device and technical information

• A push notification token and device type for each phone you sign in on, so we can send notifications. Signing out deletes it.
• The inbox (the bell): a copy of each notification we send you, such as chat messages, pings, itinerary changes, new expenses, thanks on your reviews and SOS alerts, kept until you delete it.
• Counters for plan limits, per gora (for example storage used and place lookups made) and per person (how many online translations you made each day).
• Technical records our cloud providers keep to run and secure the service, such as IP addresses and request logs.
• Crash reports. If the app crashes, it sends a crash report (the error, the app and iOS version, the phone model) to Google Firebase Crashlytics so we can fix it. Crash reports don't include your name, email, messages, photos or location.
• App integrity check. The app proves to our servers that it is the genuine gora app (Apple App Attest through Google Firebase App Check). This sends a device attestation, not personal information.

Reports

If you report a message, photo, review or member, we store the report, who made it and what it points to, and send it to our support inbox so we can review it.

AI features

• Recap AI director. When you send a request such as "make it slower", phones that support it plan the recap on the device with the phone's built-in AI model (on iPhone, Apple's). Otherwise, when you send the request, we send your request text and a list describing the album to Anthropic's Claude model: photo and video IDs, the content tags, face counts and dates, with a number in place of who uploaded each one. Your photos and videos, their locations, your name and your account ID are not sent.
• Translate. When the language you need is downloaded on your phone, translation happens on the phone. If it is not, you can download the language for free, or tap Translate online. Only then is the text, which can be a crew member's chat message you chose to translate, sent with the two languages to our server and on to Anthropic's Claude model to be translated. We keep only a count of how many online translations you made that day, not the text or the translation.

Under its commercial terms, Anthropic does not use this data to train its models. We do not use your content to train AI models either.

What stays on your phone

These are never sent to us. They are stored on your phone and in your phone's backup, if you use one (iCloud on iPhone, or your Google account on Android):

• Travel documents (passport, visa, insurance and ticket files and their expiry dates), stored with your phone's built-in data protection.
• Medical card: your blood type, allergies, conditions, medications, notes and emergency contacts. This is health information. Only you can see it, on your phone.
• Scans. When you scan a passport or a receipt, the text is read on your phone to fill in the form. A scanned passport page is saved with your travel documents. A scanned receipt becomes the receipt photo, which is uploaded only if you save it with the expense.
• Translate history. Your Translate conversations are kept on your phone only. Speech is turned into text on your phone when the language supports it; otherwise your phone's speech recognition service (Apple on iPhone, Google on Android) processes it. The microphone is used only while you hold a Translate button.
• Recap clips are made on your phone. They are uploaded only if you post one to the album.
• Scheduled reminders and alarms, notification settings and quiet hours, the last exchange rates you used, chat read markers, cached weather, and your Crew Passport and trip memories, which are built from your own trips.

Deleting your account, or signing out and deleting the app, removes them from the phone. A copy may remain in an older phone backup until that backup is replaced.

How we use your information

We use it only to:

• create your account and sign you in;
• run the features you use and show your crew what you share with them;
• send notifications you would expect, such as itinerary changes, chat messages, pings, SOS alerts, new expenses and album expiry notices;
• apply plan limits and verify purchases;
• keep the service secure, handle reports, fix problems and answer your support requests;
• meet our legal obligations.

We do not use your information for advertising, and we do not sell or share your personal information.

Who can see your information

• Your crew. Members of a gora can see its details, members' display names, the itinerary and checklists, the album, chat, bookings, shared packing list, polls, ideas, expenses and receipts, crew reviews, SOS alerts, and the locations of members who share them.
• Anyone you invite. Anyone who has a valid invite code or link can join the gora until the code expires or is used up. Share codes only with people you trust.
• Service providers listed below, who process information for us to run gora.
• Authorities, when the law requires it.

Service providers

We use these providers to run gora. They process information on our behalf, under their own terms and privacy policies. Google, Cloudflare, Anthropic and RevenueCat each offer data processing terms that commit them to keep the information secure and confidential and to use it only to provide their service to us.

Exchange rates come from Frankfurter, which publishes European Central Bank reference rates. Our server asks only for the rates of a date; no information about you is sent.

This website

This website uses no cookies, analytics or trackers, and loads nothing from other sites: its fonts are hosted here. Cloudflare, which hosts it, processes your IP address and request details to deliver pages and protect the site from attacks. If you email us, we receive your email address and what you write.

Overseas disclosure

Our service providers store and process information outside Australia, mainly in Singapore and the United States, and in other countries where their global networks operate. Before we disclose personal information overseas, we take reasonable steps to make sure the provider handles it in line with the Australian Privacy Principles: we use established providers whose data processing terms require security, confidentiality and use only to provide their service. We remain accountable for how they handle your information on our behalf.

How long we keep it

• Shared locations: deleted after the trip's end date passes in the destination's time zone.
• Photos, videos and receipts: deleted automatically a set time after the trip ends. On the free plan, the shared album is kept for 14 days after the trip ends; on a Gora Pro gora, for 365 days. If a gora goes back to the free plan, its photos and videos follow the free plan's 14 days, but are kept for at least 30 days from that day. We show the exact date in the app and notify the crew 7 days before. Save copies you want to keep. You can also delete your own photos and videos at any time.
• Unfinished uploads: deleted after 24 hours.
• Other trip content (itinerary, chat, expenses and so on): kept until the organiser deletes the gora. Deleting a gora permanently deletes all its content and files for everyone. You can delete your own chat messages and reviews at any time.
• Inbox entries: kept until you delete them.
• Your account: kept until you delete it.
• Server logs: kept by our cloud providers for about 30 days.
• Crash reports: kept by Firebase Crashlytics for 90 days.
• Backups: daily backups of our database are kept for 7 days, so deleted information can remain in a backup for up to 7 days.
• Purchase records (what was bought, when and the price): kept for 7 years for tax and accounting.
• Reports and support emails: kept as long as we need them to deal with the request.

Your choices and rights

• Permissions. You can allow or deny location, camera, photos, microphone, speech recognition and notifications in your phone's settings (iOS Settings or Android Settings) at any time.
• Withdrawing consent. You can turn off location sharing for a gora, or notifications, at any time. This does not affect what was done before.
• Deleting what you shared. You can delete your own chat messages, photos, videos and reviews in the app.
• Leaving a gora. A member can leave a gora. This removes their membership, their shared location and their private packing list for that gora. Messages, photos, expenses and other content they added stay in the gora so the trip record stays complete, unless they delete them or delete their account.
• Access and export. You can see most of your information in the app. You can also ask us for a copy of the personal information we hold about you, in a machine-readable file.
• Correction. You can edit most of your information in the app, or ask us to correct it.
• Objection. You can object to how we use your information, and we will stop unless the law lets or requires us to continue.
• Deleting your account. In the app, or by email to [email protected] from the email address linked to your account. The steps and what is deleted are on our delete your account page. Goras you organise are deleted for everyone. In goras organised by others, your messages, reviews, photos and videos are erased; the expense amounts you are part of stay, so the crew's balances still add up. We keep only records we must keep by law, such as purchase records.

To ask for any of these, email [email protected] from the email address linked to your account. We will respond within 30 days. We may need to confirm your identity first. Using these rights is free.

Security

We take reasonable steps to protect your information. Data is encrypted in transit. Access to each gora's content is limited to its members by server-side rules. Files are kept in private storage and shared through short-lived links. No system is completely secure, so we cannot guarantee that information will never be accessed without permission.

Data breaches. If a breach of your information is likely to cause you serious harm, we will tell you as soon as we can, and tell the regulator where the law requires it, such as the Office of the Australian Information Commissioner, or the National Privacy Commission in the Philippines.

Age limit

gora is for people aged 18 and over, and you confirm your age when you first sign in. We do not knowingly collect information from anyone under 18. If you believe someone under 18 has an account, contact us and we will delete it.

Changes to this policy

We may update this policy as gora changes. We will post the new version on this page with a new effective date.

Questions and complaints

Email our Data Protection Officer at [email protected]. We will reply within 30 days. If you are not satisfied with our answer, you can complain to the data protection authority where you live. For example:

• in Australia, the Office of the Australian Information Commissioner at oaic.gov.au;
• in the Philippines, the National Privacy Commission at privacy.gov.ph.

gora is published by Denmark Amano Daya (ABN 24 351 667 664) · Western Australia, Australia