Privacy

Effective 18 September 2026

This policy covers the Wozere app for iPhone, made by OpenSoftLabs LLC ("we"). It says what the app reads, what it keeps, and the few times it talks to anyone else.

Your photos

To build your map, Wozere asks for access to your photos. You can allow all of them, or only the ones you pick; the map is built from whatever you allow.

For each photo and video, Wozere reads the location and the date stored with it, from your phone's own photo library. It works out the country and the town on your phone, using a map of borders (Natural Earth) and a list of towns (GeoNames) built into the app. No photo, location or date is sent anywhere to do this.

Screenshots are skipped, and so are photos in albums other people shared with you, so a friend's trip never lands on your map.

Wozere keeps a photo index on your phone: for each photo with a location, its identifier in your library, where and when it was taken, and the country and town. It never copies your photos. When a photo is shown, on a country page, on the map or full screen, it is loaded from your library and held in memory only.

On iOS 18 and later, Wozere picks a cover photo for each place with Apple's Vision framework, which rates photos on your phone. That also happens on the device.

Each time you open the app, Wozere reads the photos taken since the last time, so new trips appear by themselves. That happens on your phone too.

Your map and your trips

Your countries and towns, your home country, the covers you chose, the trips you add to Next up and the name you give your profile are saved in the app's storage on your phone. Trips in Next up are private: the only thing that can leave the phone is a trip you choose to show on your share card, and then only its place.

Like anything in an app's storage, this is included in your phone's own backups (iCloud Backup or a backup to your computer) if you use them, under Apple's terms. We have no copy.

Maps

The map of a country or a town uses Apple Maps. To draw it, your iPhone loads map tiles for the area on screen from Apple, as any app with a map does, and Apple's privacy policy covers that. Your photo spots are drawn on top by your phone; they are not sent.

If you tap "Open in Apple Maps" on a photo, Wozere hands that one spot and its place name to the Apple Maps app.

Without an internet connection the map can't load its tiles. Everything else in Wozere works offline.

Your share card

The share card is made on your phone. It shows your counts, your map and a few stamps, plus your next stamp if you chose to show one. Nothing is sent unless you send it: to the app you pick in the share sheet, or saved to Photos.

Saving asks for permission to add to Photos. That permission lets Wozere save the card; it does not let it read your library. Once you share a card, it is with whoever you shared it with.

App updates

When you open Wozere, it can download small fixes from Expo's update service (EAS Update, run by Expo), so a bug can be fixed without waiting for the App Store. The request carries the app's version, the update channel and the platform, and a random identifier for this install of the app. It carries nothing about you, your photos or your map. As with any connection, the server sees your IP address. Expo's privacy policy covers that service.

Analytics

To learn which parts of Wozere people use and where it goes wrong, the app sends anonymous usage counts to PostHog, an analytics service that stores them for us in the United States.

What they contain:

• That something happened, with numbers and short labels only. For example: a scan finished, having read about 400 photos and found 24 countries; a trip was added, 30 days ahead; a share card was sent, in the "year" style.
• Which screen was open, by its kind, such as "country page", never which country.
• Basic facts about the app and phone: the app version, the iOS version, the phone model, the language, and when the app was opened or installed.
• Crash and error reports: where in the app's code something failed.
• A random identifier made for this install of the app, so repeat visits can be counted. It isn't linked to your name, your Apple ID or any account, and it changes if you delete and reinstall the app.

What they never contain: where you've been (no countries, towns or coordinates, not even their names or codes), your photos or anything about them, your trips' places or dates, the name on your profile, or anything you type.

PostHog sees your IP address, as any server does when your phone connects to it. Wozere tells it not to work out a location from that address, so your whereabouts are not recorded that way either. There are no user profiles: nothing ties the counts to a person.

To stop them, turn off Settings → Share anonymous usage data in the app. That also drops anything waiting to be sent. PostHog's own privacy policy covers how it handles the data it stores for us.

What we don't do

• We don't have accounts, and we don't ask for your email or your contacts. The name on your profile card is yours to set, and it stays on your phone.
• We don't show ads, and we don't track you across other companies' apps or websites.
• We don't sell data, and we don't share it with anyone for advertising. The only thing that leaves your phone is the anonymous usage counts above, and only if you leave them on.

Deleting your data

Everything Wozere keeps is on your phone, so you are in control of it:

• Settings → Delete my photo index removes the index and starts your map over.
• Profile → Edit countries adds or removes countries by hand.
• Deleting the app removes everything it saved.

Photos access can be changed or turned off any time in the iPhone's Settings → Privacy & Security → Photos.

Children

Wozere is not directed at children under 13. It asks no one for personal information, and the anonymous usage counts carry nothing that identifies a person.

Changes

If what Wozere does with your data changes, this page changes first, with a new effective date at the top.

Contact

Questions about privacy: hello@opensoftlabs.org. OpenSoftLabs LLC.