Last updated: 14 August 2026 · donbreda4@gmail.com
Decumanus collects no data. We have no servers and receive nothing you enter. The app contains no advertising, no trackers and no analytics, uses no third-party sign-in, and does not profile you.
Trips, days, stops, places, bookings, expenses, journal pages and attached files stay on your device and in your iCloud account (Apple CloudKit's private and shared databases), which we cannot access. They sit behind the same protections as your Apple account. Without iCloud the app still works, and the data simply stays on the device.
If you use iCloud, your data syncs across your devices. When you share a trip or a list of places, its contents become available to the people you invite — again through iCloud and under Apple's control. The app sends your data to no other server.
The app asks for your location only when it is needed: the first time you open the map on the “Today” tab, so it can show where you are relative to the day's stops and work out the time to the next one. Your location is never stored and never sent to us: it lives in the app's memory while you are using it.
If you turn on “Field alerts” in Settings, the app also asks for background location so it can notice when you reach a stop and ask whether you have been there. The comparison happens on the device, the notification is local, and no location leaves the phone. You can turn the switch off, or revoke the permission, at any time.
To turn a place's name into a point on the map, to draw the maps, and to work out travel times, the app uses Apple Maps (MapKit). Apple receives what it needs in order to answer — the search text, or the start and end coordinates — under its own privacy policy. The app does not tie those requests to your identity and keeps no record of them.
The external service the app uses is iCloud and Apple Maps; Apple's Privacy Policy applies.
There is exactly one exception. If you open a Google Maps short link
(of the maps.app.goo.gl kind) that you shared into the app yourself, the app
makes a single request to that address to read which page it points at, so
it can take the place's name and, when present, its coordinate. At that moment Google
receives the request as it would from a browser (IP address, date and time). The app
does not download the page, does not read its contents, sends nothing of
yours, and holds no account with Google. If you use no short links, that request is never
made.
There are no other providers, and no third-party SDKs of any kind.
Photos and files you attach to a booking, an expense or a journal page are resized on the device and saved in your iCloud alongside the trip. They never pass through us.
Because the data is in your iCloud, the control is yours. From the app you can read it and delete it — a trip, a list, an attachment, or everything — and leave any trip or list shared with you at any time. There is no need to contact us, because there is nothing to ask for: we hold no copies.
The app is intended for a general audience and is not directed at children under 13.
Any questions: donbreda4@gmail.com.