Privacy Policy

Michi · Last updated 2 October 2026

In short: Michi has no account, advertising, or analytics. Your travel history is stored on your iPhone and, only if you turn on sync, in your private iCloud database. Photo import reads only the date and place saved in your photos, on your iPhone, and sends nothing anywhere. Michi does not operate its own backend or receive a copy of your travel history.

Contact

For privacy questions or requests concerning an email you sent to support, contact nixywex@icloud.com.

What Michi stores, and where

Everything you enter — cities and countries you’ve visited or want to visit, past and planned trips, places you lived, dates, day counts, trip notes, and the places you mark as favourites or want to come back to — is stored on your device and used only to provide the app’s features.

• With iCloud sync off (the default): Michi does not send your travel history to the developer or to a backend operated by the developer.
• With iCloud sync on: your data is synchronised through your own iCloud account into Apple’s private CloudKit database so it can be available on your devices. Private CloudKit records are not visible to the developer in the CloudKit developer portal. Apple provides this service under Apple’s Privacy Policy.
• Your display name and profile picture stay on the device you set them on. They are not synchronised by Michi and are not sent to the developer.

What Michi does not do

• No account, sign-in, or password.
• No analytics, behavioural tracking, advertising, or advertising identifiers.
• No location tracking. Michi never asks for your current position. Photo import reads the location saved in your photos, on your device only (see Photo import).
• No data is sold, rented, or used for advertising or profiling.
• Michi does not send your travel history to its developer.

Profile picture

You may choose a picture through Apple’s system photo picker. Michi uses only the picture you select, stores it on your device, and does not synchronise it through Michi or send it to the developer.

Photo import

Photo import is optional and starts only when you tap Import. iOS then asks whether Michi may access your photo library; you can allow all photos or only some. Michi reads two things from each photo: the date it was taken and the location saved in it. It never opens the pictures themselves, never downloads them from iCloud, and never copies or sends them anywhere. Locations are matched to cities on your device, using the city list bundled with the app. Nothing is saved until you review the suggestions and confirm them. Michi then keeps only the cities and dates you confirmed, not your photos or their exact locations. You can change or withdraw access at any time in iOS Settings → Privacy & Security → Photos → Michi.

Searching for places

City and country search runs entirely on your device against a list bundled inside the app (GeoNames, used under CC BY 4.0). What you type is never sent anywhere.

Maps

Michi’s square map is drawn from data inside the app and needs no network. Other maps in Michi use Apple Maps (MapKit): the standard map, the map at the top of a place or trip page and of the trip and visit forms, and the map on a shared trip card. When one is shown, requests to Apple can include the area being shown — the area around the place or trip you opened — and technical device and network information needed to provide the map. Michi sends Apple no names, dates, or other entries. These requests are covered by Apple Maps & Privacy.

Sharing

Share cards — your map, a continent, or a trip — are drawn on your device. Nothing is sent until you choose where to send it in the iOS share sheet, and then it goes only there. You decide what a card shows: your display name, planned and wish-list places, and a trip’s dates are each optional. If you choose Save Image, iOS asks whether Michi may add images to your photo library. That permission lets Michi add a picture, not read your photos.

Contacting support

Tapping “Contact support” opens a draft email in your own mail app. It is prefilled with the app version, your iOS version, and your device model — and with nothing from your travel history. If you send it, we receive your email address, the message, and those diagnostics. We use them only to answer or resolve the support request. Our mailbox is provided by Apple; your own email provider may also process the message. We delete support emails within 90 days after resolving the request, unless a longer retention period is required by law.

TestFlight builds

While Michi is distributed through TestFlight, Apple provides the developer with crash reports and basic installation information, and passes on any feedback you choose to submit. This processing is provided by Apple and described in Apple's Privacy Policy. It does not include travel history from Michi.

Deleting your data

• Delete individual places, trips, or visits inside the app at any time.
• Deleting the app removes Michi’s local data from that device.
• If iCloud sync is on, delete travel data in Michi and allow it to sync before deleting the app. Deleting the app alone may not delete the synchronised iCloud copy. You can also manage iCloud app data in iOS Settings → your name → iCloud → Manage Account Storage.

The developer does not hold a copy of your travel history. Use the controls above to access, correct, or delete it. To request deletion of a support email, contact us at the address above.

Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, portability, and objection, and the right to complain to your local data-protection authority. Support email is processed on the basis of our legitimate interest in answering and resolving your request. You may object to that processing or request deletion by email. Apple’s processing of iCloud, Maps, and TestFlight data is governed by Apple’s privacy information.

Children

Michi is not directed at children. We do not knowingly collect personal information from children.

Changes to this policy

If what the app does changes, this page changes with it, and the date at the top is updated.