Last updated: 3 August 2026. The short version: your travel history never leaves your device unless you export or share it yourself. The only thing that ever leaves is anonymous usage statistics and crash reports — and only if you choose to send them.
Free · no subscriptionWorks offlineNo account · no tracking
Voymark is published by Outside Software SRL, a company registered in Romania. For this policy, we are the data controller. Almost everything the app records stays on your device and never reaches us; where something does reach us, this policy says so plainly and names it.
No accounts. No advertising. No advertising identifier — the apps do not read it at all. No data brokers. We never sell, rent or trade anything about you, and nothing you record — countries, trips, places, notes, journals, photos — is ever sent to us or to anyone else.
When you first open Voymark, it asks whether you want to help improve it. You have three answers: send anonymous usage statistics and crash reports, send crash reports only, or send nothing at all. The first answer is selected to begin with, and you can pick another before you continue. Nothing is sent until you do continue, and you can change the answer whenever you like under More → Privacy. If you choose to send something, this is the whole of it:
This is handled for us by Google Analytics for Firebase and Firebase Crashlytics, acting as our processor under a data processing agreement. Google may process it outside the European Economic Area under the European Commission's standard contractual clauses. Our legal basis is your consent, which you may withdraw at any time; withdrawing stops future collection and does not affect what was lawfully collected before. Reporting data is kept for 14 months and then deleted automatically.
Even with everything switched on, the statistics never contain the contents of your passport. No place names, no coordinates, no dates of travel, no journal text, no companion names, no photo identifiers, no country list, no display name. The numbers tell us that a screen was opened; they never tell us what was on it.
If you grant photo access, Voymark reads locations and dates from your photo library entirely on your device to reconstruct trips. Images are never copied, uploaded or analyzed anywhere else, and you can revoke access at any time in system settings. To name your destinations, place coordinates (never the images themselves) are looked up with the device's built-in geocoding service — operated by Apple on iPhone and by Google on Android.
Comparing passports with a friend can be done by scanning a QR code, which is why both apps ask for camera permission the first time you open that screen. The camera image is decoded as it arrives and is never stored, never saved to your library and never sent anywhere. If you would rather not grant it, the same comparison works through a file or a pasted code, and the permission is never requested anywhere else in the app.
Countries, trips, places, notes and settings are stored locally on your device. Backups and exports (CSV, GPX, KML, GeoJSON, PDF, passport files) are files you create, keep and delete yourself. Uninstalling the app deletes its local data.
Compare codes, share cards, travel books and exports leave your device only when you choose to share them, through your system's share sheet, to the destination you pick. Passport-compare payloads contain only country stamps and a display name — never trips, places, photos or dates.
Downloading Voymark through the App Store or Google Play is governed by Apple's and Google's own privacy policies. This website is a static site hosted on GitHub Pages; GitHub may log standard technical requests. The site sets no cookies, runs no analytics and loads nothing from a third party — the fonts are served from this domain. On iPhone, the optional Modern and Satellite map styles load map tiles through Apple Maps; those requests go to Apple under Apple's privacy policy. The Atlas and Paper maps are fully offline on both platforms. On Android, place search sends the text you type to OpenStreetMap's free Nominatim service, which finds places the built-in city list and the device geocoder don't cover; only that text is sent, governed by the OpenStreetMap Foundation's privacy policy.
Under the GDPR you have rights of access, rectification, erasure, restriction, objection and portability, and the right to withdraw consent at any time. For everything the app records, those rights are exercised directly on your device: the data is already in your hands, and the export tools give you portability in open formats. For the anonymous statistics, write to hello@voymark.app — the deletion page explains exactly what happens. You also have the right to complain to a supervisory authority; ours is the Romanian ANSPDCP.
If this policy changes in a way that matters, we'll say so here with a new date at the top. Questions: contact Outside Software SRL at hello@voymark.app.