MarcoPolo

Privacy Policy

Last updated 31 August 2026

MarcoPolo is a trip-planning app for iPhone and iPad. This policy explains what leaves your device, why, and what you can do about it. There are no accounts in MarcoPolo — you do not sign up, and we do not ask for your name, email address, or phone number.

What we collect

Trip content. When you use Marco AI, create a share link, or start a live trip, the app sends that itinerary to our server: the trip name, dates, budget, and the names and map coordinates of the stops and to-dos you added. These coordinates describe the places you are planning to visit — they are not readings of where your device is.

A random app identifier. The first time the app contacts Marco AI it generates a random ID and stores it on your device. It is sent with each AI request so the request can be rate-limited and abuse can be detected. It is not linked to you, it contains nothing about you or your device, and you can reset it by deleting and reinstalling the app.

Standard server logs. Our server sees the IP address of requests, as any web server does, and uses it only to apply rate limits.

What we do not collect

• Your photos. Scrapbook photos and the capture locations read from them stay on your device. They are never uploaded, and they are not included in share links or live trips.
• Your device’s location. MarcoPolo never asks for location permission and never reads where you are.
• Your name or contact details. The app has no accounts and no sign-in.
• Anything for advertising profiles. We do not sell or share your data with data brokers.

Who else sees your data

OpenAI processes Marco AI requests. Your trip content is sent to OpenAI to generate a plan, along with a one-way hash of the random app identifier described above — not the identifier itself. Requests are sent with storage disabled, so OpenAI does not retain them, and they are not used to train models.

Apple provides the maps, place search, and route data the app displays, and processes purchases if you buy the ad-free upgrade. Apple never receives your payment details from us; we never see them at all.

Google AdMob serves ads in the free version. If you are in a region that requires consent, AdMob shows you a consent form the first time you open the app, and you can change your answer at any time from the Privacy Choices button on the My Trips screen. Buying the ad-free upgrade removes ads entirely.

Spotify or Apple Music receive a playlist request only if you choose to build a road-trip playlist and connect your account. The playlist is created in your own account, and we do not store your music library or listening history.

Sharing and live trips

A share link or live trip is public to anyone holding the link. Editing a live trip additionally requires an edit key that is part of the invite link, so treat both links as you would a password. While a live trip is open, other people in that trip see the device model taking part — for example “iPhone” — and nothing that identifies you personally.

How long we keep it

Share links and live trips are stored on our server until you ask us to delete them. Trips you never share stay on your device only. If you want a shared trip removed, email the address below with the link and we will delete it.

Your choices

• Use MarcoPolo without Marco AI, sharing, or live trips, and nothing leaves your device.
• Change or withdraw ad consent at any time from Privacy Choices on the My Trips screen.
• Remove ads entirely with the in-app upgrade.
• Delete the app to remove everything stored on your device, including the random app identifier.
• Email us to have shared trips deleted from our server.

Children

MarcoPolo is not directed at children under 13, and we do not knowingly collect information from them.

Changes

If this policy changes materially, we will update the date at the top of this page.

Contact

Questions, or a deletion request: jimmyliang2001@gmail.com.