Peregrino

Privacy Policy

Effective 13 October 2026

In short: Peregrino has no accounts, no ads and no tracking, and we never sell or rent your data. Your travels live on your devices and in your own iCloud, where we can't see them. Anything you share by link is also kept in iCloud, and only for as long as you choose.

This policy explains what the Peregrino app for iPhone, iPad and Mac ("Peregrino", "the app") and the website peregrino.mksvrcek.com handle, where it is kept and the choices you have. Peregrino is made by Michael Kimberly Svrcek ("we", "us").

Your travel library

Everything you add (countries, trips, stays, tickets, events, places, visas, the names of people you travel with, notes, the photos you pin, your profile name and picture, and your settings) is stored on your device. If iCloud is turned on, it syncs between your devices through your own private iCloud database, using Apple's CloudKit. That data is held by Apple under Apple's Privacy Policy. We have no access to your private iCloud data, and Peregrino has no server of its own that receives it.

Permissions, used on your device

• Location. If you allow it, Peregrino checks which country you're in so it can suggest a new stamp or entry. Your location is used on your device only; it never leaves it and is never stored, except as the stamps you choose to keep.
• Photos. If you allow it, Peregrino reads the dates and places of your photos on your device to find trips and show photos from them. Your photos aren't uploaded. Only small copies of the photos you pin to a trip or stay are saved, in your library and your iCloud.
• Contacts. When you pick someone from your contacts, only their name is saved with your trip. Your contacts aren't uploaded.
• Notifications. Reminders are scheduled on your device.
• Apple Music. If you add songs to a trip, Peregrino uses Apple's MusicKit; Apple handles that under its own policy.

Sharing, only when you choose

Nothing is shared unless you share it. When you do, it stays within Apple's iCloud.

Public links (anyone with the link)

When you make a public link to a trip, stay, ticket, event or place, Peregrino saves a copy of the details you pick, together with your name as the sharer and, if you include it, your profile picture. This copy goes into Peregrino's public database in Apple's iCloud (CloudKit), under a long random link. Anyone with the link can open it, in the app or on this website at peregrino.mksvrcek.com/s/…; nobody can find it without the link.

• It all remains in iCloud. The website is a viewer: it reads the shared copy directly from iCloud in the visitor's browser and doesn't keep or forward it. We run no database of shares.
• It stays up to date. While a link is live, it is updated when you edit what it shows.
• You stay in control. You can set a link to expire, change what it includes, or stop sharing at any time. Stopping a link, or letting it expire, deletes its copy from iCloud, and the link stops working. Deleting the shared trip or item stops its link too.
• Opening someone else's link needs no account, and nothing is saved to your iCloud; the app keeps a copy on your device so you can open it again, until you remove it.

Invites and edit links

When you invite people to see or edit a trip, the shared copy is kept in your private iCloud and shared with those people through Apple's iCloud sharing. You can stop sharing at any time.

Friends

If you add friends, Peregrino shares a card with them: your name, profile picture, stamps, trip and distance counts and trophies. It is kept in iCloud and shared only with the friends you add. To connect, a friend code and friend requests use small records in Peregrino's public iCloud database holding an anonymous iCloud user identifier, a display name and the invitation; they never hold your stamps, trips or photos. Removing a friend or leaving deletes your card from what you shared.

Frequent Flyer Gold

Frequent Flyer Gold is a one-time purchase handled by Apple through the App Store. We never receive your payment details. Each member gets a member number: to keep it, Peregrino saves a record in its public iCloud database with the number, the purchase date and Apple's transaction identifier for the purchase, so that a restore on a new device finds the same number. It contains no name or contact details.

Services the app contacts

• Flight lookups. When you type a flight number, the flight number and date are sent to flight data services (adsbdb.com and hexdb.io, and AeroDataBox on RapidAPI only if you add your own key) to fill in the route.
• Artist lookups. For an event's line-up, an artist's name may be sent to MusicBrainz.
• Maps. Place search and maps use Apple Maps.

These requests carry only what is needed for the lookup, plus what any internet request carries (such as your IP address). They aren't linked to you or your library.

Diagnostics

Peregrino keeps Apple's performance and crash reports (MetricKit) on your device, and they leave it only if you choose to export them. If you share analytics with app developers in your device's settings, Apple may also share crash reports with us without identifying you.

This website

peregrino.mksvrcek.com is a static site hosted by Cloudflare, which processes standard request data (such as IP addresses) to deliver and protect it. The site uses fonts from Google Fonts, so your browser requests them from Google. The site sets no cookies.

To learn how the site is used, it counts visits with Umami, a privacy-friendly analytics tool we host ourselves: the pages and sections viewed, how far down a page people scroll, which buttons are tapped, and the browser, device type and country a visit comes from. Umami sets no cookies, stores nothing on your device, doesn't keep your IP address and can't recognise you on another day or follow you to other sites; the results are only counts, never sold or shared. Browsers that send Do Not Track aren't counted. On a shared link, only that a share was opened (and of which kind) is recorded, never the link itself.

On the site's own pages (not shared links), Umami also records a small share of visits, about one in seven, as an anonymous replay of how the page was used (scrolling, clicks and pointer movement, with anything typed hidden), and gathers clicks and scrolling into heatmaps, so we can see what is hard to find or use. Replays are kept on our own analytics server, aren't linked to who you are, and are deleted after we've reviewed them. Shared links are never recorded, and neither are browsers that send Do Not Track. The home page reads your time zone in your browser to pick a nearby airport for its animation; it isn't sent anywhere.

Keeping and deleting your data

• Anything you delete in the app is removed from your devices and your iCloud.
• You can stop any shared link or invite in the app, which deletes its shared copy.
• To remove all Peregrino data from iCloud, delete the app's data in your device's iCloud settings (Manage Storage).
• Peregrino can export your whole library as a file (Settings › Backup).
• For anything else, including a member number record, write to us and we'll delete it.

Children

Peregrino isn't directed at children under 13, and we don't knowingly collect their personal information. Because your data stays in your own iCloud, we hold none of it.

Your rights

Depending on where you live (for example under the GDPR or the CCPA), you have rights to access, correct, export and delete your personal data. Most of this you can do directly in the app; for anything else, contact us and we'll help.

Changes

If this policy changes, we'll update it here with a new effective date, and tell you in the app if the change is significant.

Contact

Questions or requests: [email protected]