Privacy Policy

Scope and operator

This policy applies to the native Northbound iOS app for iPhone (the “App”). The App uses the Northbound account and synchronization service at northbound.raduku.com (the “Northbound Service”) so users can sign in, synchronize supported trip content, share family journeys and memories, invite guests to an individual trip, and reuse a calculated route across authorized devices.

This web page publishes the App’s privacy policy; it does not change the native App into a web or WordPress application. Northbound is operated independently by its developer and is not affiliated with Apple or the other providers named below.

Where your data is stored

Information the App processes

Account and session information

When you create an account, the Northbound Service stores your display name, email address, and a one-way password hash. It does not store your password in readable form. To keep you signed in and protect the account, the Service also stores a one-way session-token hash, a shortened device/app user-agent string, a one-way hash of the sign-in IP address, session dates, expiry, and revocation status.

Trips and saved places

The App processes trip titles, destinations, dates, time zones, daily regions, place names, categories, addresses, latitude and longitude, visiting order, planned/visited/skipped status, and identifiers used to match the local copy with the synchronized trip. The coordinates describe saved itinerary places.

Route data

Calculated route data can include the selected mode, routed stop identifiers, distances, travel durations, walking/transit/driving leg summaries, route geometry, calculation fingerprint, provider label, and the account that calculated the shared server copy. It is stored locally and, for a synchronized trip, uploaded to the Northbound Service so authorized participants do not need to recalculate the same unchanged itinerary.

Memories

When you choose a photo and save a memory, the App stores the selected image, your optional comment, creation date, and associated itinerary place locally. If the trip and place have synchronized, the App uploads that image and comment to the Northbound Service so authorized family members or trip participants can see them. The App accesses only the photo you select through Apple’s photo picker.

Booking documents

Imported PDFs and images, their original filenames, file types, locally generated stored filenames, creation dates, and optional itinerary-place links are stored locally and uploaded to the Northbound Service for synchronized trips. Authorized family members and trip guests can download these documents. Because files can contain names, booking references, contact details, or payment-related information, review a document before importing it and share trips only with people you trust.

Location

Northbound does not continuously track your device. If you choose the map’s user-location control or start navigation from your current position, iOS and the selected maps provider may use your location after the system permission prompt. The Northbound Service does not receive or store a history of your live device location. Saved itinerary-place coordinates are different from live location and may be synchronized as described above.

Maps, routes, weather, and place providers

The App contacts a provider only when needed for a feature you use. A request may contain a search term, saved place name, address, coordinates, travel mode, or route endpoints:

• Apple MapKit, Apple Maps, and Apple geocoding provide the native map, Apple place search, reverse geocoding, walking and driving routes, public-transport estimates, map positioning, and Apple Maps navigation.
• OpenStreetMap Nominatim is used when Apple place search has no result and for some day-region detection requests.
• The Northbound Service receives route endpoints when the App requests a detailed public-transport route. The Service may use Transitous and OSRM to produce the route geometry and leg data returned to the App.
• Open-Meteo receives the coordinates resolved from the itinerary region to return a seven-day forecast.
• OpenStreetMap, Wikidata, English Wikipedia, Wikivoyage, and Wikimedia Commons may receive a place name, address, category, or coordinates so Northbound can match the actual saved location and provide descriptions, historical context, source links, and relevant images. Northbound checks identity and geographic proximity before accepting a result.
• Google Maps or Waze receives the destination coordinates only if you explicitly select that app for navigation.

Apple and these external services process requests under their own terms and privacy policies. Northbound does not send your password, memory photos, or booking documents to map, weather, transit, or place-information providers.

Family and trip sharing

A family invitation links participating Northbound accounts into one family workspace. Family members can access synchronized trips created by members of that family and the memory photos and comments attached to those trips.

A trip-specific invitation gives the accepting Northbound account access only to the selected trip. The Service stores the inviter, accepting account, assigned role, relevant trip or family identifier, token hash, creation date, expiry, acceptance, and revocation state. The raw invitation token is included in the link you choose to share; treat that link as private until it is accepted or expires.

Only people authorized for a trip can request its synchronized data and shared memories. Their ability to edit depends on the role and ownership rules applied by the Service.

Retention and deletion

On your iPhone

Local app data remains until you delete it in the App, use Settings → Remove local cached data, or delete the App. Deleting synchronized content while online also requests deletion from the Service; an offline deletion is retained as a pending change and sent when synchronization resumes. Removing all local cached data does not by itself delete synchronized server data.

On the Northbound Service

Account and synchronized content are retained while needed to provide the account and shared trips. Sign-in sessions normally expire after 30 days and can be revoked earlier by signing out or account-security actions. Unused family and trip invitations normally expire after 14 days.

You can request permanent account deletion in Settings → Security → Delete account. The Service deletes your account, its sessions and preferences, trips owned by that account, family and trip memberships, invitations tied to the account, and memories authored by that account according to database relationships. Trips owned by another person remain with their owner; local copies already downloaded to another authorized device can remain until that device synchronizes, clears its local data, or removes the App.

Limited backup or security records may remain temporarily when necessary for recovery, fraud prevention, dispute resolution, or legal compliance and are removed or overwritten according to the applicable retention cycle.

Your controls and privacy rights

You choose which photos and documents to import, which places to save, whether to calculate a route, whether to use current location, and whom to invite. You can edit or remove content where your role permits, revoke pending invitation links, sign out, clear local cached data, and initiate account deletion from the App.

Depending on where you live, you may also have rights to access, correct, export, restrict, object to, or delete personal information and to complain to a data-protection authority. Contact us for help with a verified request.

Northbound does not sell personal information, display third-party advertising, or use personal information for tracking you across other companies’ apps or websites.

Security, transfers, and age

The App and Northbound Service use measures designed to protect data, including HTTPS transport, one-way password and session-token hashing, secure HTTP-only session cookies, role-based access checks, private memory-image responses, request rate limits, and Apple’s app sandbox for local files. No method of storage or transmission is completely secure.

Northbound and the feature providers named above may process requests in countries other than your own. Their privacy policies explain their processing locations and safeguards.

Northbound is a general-audience travel-planning app and is not directed to children under 13. A higher minimum age applies where local law requires it.