Privacy policy

Beyond the Stump is a travel app and website for Australians. This policy explains what personal information we collect, why, and what you can do about it. We handle it in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

The short version

• You can use the website without an account. If you do, nothing we store identifies you.
• With an account, we store your email, your display name and the passports you hold.
• Trips you plan on the website are saved to your account. Trips and packing lists in the app stay on your device.
• A trip is only visible to others if you turn on its share link.
• Your data is stored in Sydney. We don't sell it, and we don't use it for advertising.
• You can delete your account and its data at any time from your account page on the website.

What we collect

• If you don't sign in: passports you pick for entry checks are saved only in your own browser (local storage), not on our servers.
• Account details: the email address you sign in with.
• Profile: your display name, the passports you hold (your nationalities) and, if you add it, your home airport.
• Trips: trips you plan on the website (their names, stops, dates and notes) are stored with your account. In the app, trips and packing lists are stored on your device, not on our servers. We'll update this policy before the app syncs them to your account.
• Place searches: when you search for a place to add to a trip, our server sends the search text to Photon, a place-search service run by komoot in Germany using OpenStreetMap data. It doesn't receive your IP address or account details.
• Technical information: like any website, our hosting providers process your IP address and browser details to deliver pages and protect the service. Maps load tiles from OpenFreeMap on the website and Apple Maps in the app, which also see your IP address.

We don't collect your location, contacts or payment details, and we don't use advertising trackers.

How we use it

• To show entry requirements for the passports you hold.
• To sign you in and keep your passports, profile and trips the same wherever you sign in.
• To show a trip to people you've shared it with.
• To keep the service secure and working.

Your passports are used only to work out entry requirements. We don't share them, and we don't use them to profile you.

Who else handles your data

We use these service providers to run Beyond the Stump:

• Supabase: database and sign-in, hosted in Sydney, Australia.
• Vercel: website hosting. Pages are served from a global network, with server functions in Sydney.
• SMTP2GO: sends sign-in emails.
• Apple: Apple Maps, in the iOS app.
• OpenFreeMap: map tiles on the website.
• Photon (komoot): place search when you add a stop on the website.

Some of these companies are based overseas, including in the United States, and may process information outside Australia to provide their services. We only share what each one needs to do its job.

Shared trips

Trips are private until you turn on a trip's share link. Then anyone with the link can see the trip's name, your display name, and each stop with its dates and notes. Share links are hard to guess and we don't list them anywhere or let search engines index them. Turning sharing off, or deleting the trip, disables the link straight away.

Cookies and browser storage

We use cookies only to keep you signed in. When you're signed out, we keep the passports you pick in your browser's local storage. We don't use advertising cookies.

Links to other sites

eSIM plans and other offers link to the provider's own website, and some of those links earn us a commission. Once you leave Beyond the Stump, that provider's privacy policy applies.

Keeping and deleting your data

We keep your information while your account exists. You can delete your account at any time from your account page on the website (and in the app, once accounts are available there). That immediately deletes your account and everything stored with it. Copies in our providers' backups are removed when those backups expire.

Security

Data is encrypted in transit, stored in Australia, and protected by access rules that let each person reach only their own information.

Access, correction and complaints

You can view and update most of your information in your account. To ask for a copy of it, a correction, or to make a privacy complaint, email hello@beyondthestump.com.au. We'll reply within 30 days. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner.

Children

Beyond the Stump isn't designed for children under 16. If you're under 16, use it with a parent or guardian.

Changes to this policy

If we make a significant change, we'll update the date above and let account holders know in the app or by email.