Privacy Policy

Last updated October 22, 2026

This Privacy Policy explains how IZANAMI LABS ('we', 'us', or 'our') collects, uses, shares and protects personal information when you use Tokoyo at tokoyoapp.com (the 'Services').

Tokoyo is a personal travel atlas. You can record trips by country, city and dates, see your travel history on an interactive map with statistics such as countries visited and days spent in each, add photos to your trips, and check visa requirements and how many days you have used in visa-free zones such as the Schengen Area. Anyone can browse the map without an account. Saving trips, photos and passports requires signing in with Google.

Questions? Email us at tokoyoapp@gmail.com.

Summary

• What we collect: your name and email address from Google, the trips, photos, passport nationalities and visa settings you enter, and basic technical data (such as IP address, browser and error reports).
• What we don't do: we do not sell or share your personal information for advertising, show ads, use advertising cookies, or share your trips with other users.
• Who else processes it: a small number of service providers that host and run the Services (listed in section 4).
• Your rights: you can ask to access, correct, export or delete your data at any time by emailing us.

Contents

1. What information we collect
2. How we use your information
3. Legal bases for processing
4. Who we share your information with
5. Cookies, local storage and analytics
6. International transfers
7. How long we keep your information
8. How we keep your information safe
9. Children
10. Your privacy rights
11. Additional information for US residents
12. Additional information for other regions
13. Do-Not-Track
14. Changes to this policy
15. Contact us

1. What information we collect

Information from your Google account

When you sign in with Google, Google shares your name, email address and a unique Google account identifier with us. We use these only to create and identify your account. We do not receive your Google password, contacts or any other Google data. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Information you enter

• Trips: the countries and cities you visited and the dates of each stay.
• Passports: the countries whose passports you hold, if you choose to add them. We use these only to show visa requirements and stay limits for you. Some laws treat citizenship as sensitive information; we do not use it to infer anything about you or for any other purpose.
• Photos: images you choose to add to a trip. Before upload, your browser re-encodes each photo and creates a thumbnail, which removes embedded metadata such as GPS location and camera details. Photos are stored privately and can only be viewed through your account.
• Visa settings: custom stay limits you create and imported limits you choose to hide.
• Messages: anything you send us by email, such as support requests.

Information collected automatically

• Server and network logs: IP address, browser type, device and operating system, pages requested, date and time, and referring URL. These are recorded by our servers and hosting providers to run and secure the Services.
• Usage analytics: aggregate information about page visits (such as page viewed, referrer, browser, device type and country derived from IP address), collected with self-hosted Umami analytics. See section 5.
• Error and performance reports: when something goes wrong or loads slowly, technical details (such as the error message, the page, browser and device information, and IP address) are sent to Sentry so we can fix it.

We do not collect your precise location, payment information, or information about you from data brokers or social networks.

2. How we use your information

• To create and manage your account and sign you in.
• To provide the Services: store your trips, photos, passports and visa settings and show your map, statistics, visa requirements and stay estimates.
• To respond to your questions and support requests.
• To send service messages, such as important changes to these policies. We do not send marketing email.
• To keep the Services secure, prevent abuse and fix errors.
• To understand, in aggregate, how the Services are used so we can improve them.
• To comply with the law and to establish, exercise or defend legal claims.

Your trips, photos and passports are private to your account. We do not share them with other users, sell them, or use them for advertising.

3. Legal bases for processing

If you are in the European Economic Area (EEA), the UK or Switzerland, we rely on these legal bases:

• Performance of a contract: to provide your account, trips, passports and the features you use.
• Legitimate interests: to keep the Services secure, diagnose errors, and understand aggregate usage so we can improve the Services. You can object to this processing (see section 10).
• Legal obligation: where we must process information to comply with the law.
• Consent: where we ask for it. You can withdraw consent at any time; this does not affect processing that took place before you withdrew it.

If you are in Canada, we process your information with your consent, which may be express or implied (for example, by signing in and entering trips), or where otherwise permitted by law. You can withdraw consent at any time by contacting us, although this may mean we can no longer provide the Services to you.

4. Who we share your information with

We share personal information only with service providers that help us run the Services, under contracts that limit how they can use it:

• Google (United States): sign-in. Google's own privacy policy applies to your Google account.
• Cloudflare (United States): website hosting, content delivery, network security, storage of your photos, and storage of database backups. Requests to the Services pass through Cloudflare's network.
• Sentry (Functional Software, Inc., United States): error and performance monitoring.
• Our server host: the virtual private server on which our application, database and Umami analytics run.

We may also disclose information:

• To comply with the law, such as a valid court order or legal request, or to protect the rights, safety or property of our users, us or others.
• In a business transfer, such as a merger, acquisition or sale of assets. We will tell you before your information becomes subject to a different privacy policy.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

5. Cookies, local storage and analytics

• Session cookie: when you sign in, our server sets a cookie that keeps you signed in. It is strictly necessary and is deleted when you sign out or the session expires.
• Local storage: the app saves small convenience settings in your browser (such as the last date you entered). This data stays on your device and is not sent to us. You can clear it in your browser settings.
• Analytics: we use Umami, hosted on our own servers. It does not use cookies, does not track you across other websites, and does not build profiles of individual visitors.

We do not use advertising or third-party tracking cookies.

6. International transfers

We are based in Canada. Our servers and service providers are located in the United States and possibly other countries, so your information may be transferred to and processed in countries whose data protection laws differ from those where you live. Where the law of the EEA, UK or Switzerland requires it, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses (and the UK and Swiss equivalents) or an adequacy decision. You can contact us for more information.

7. How long we keep your information

• Account, trips, photos and passports: for as long as you have an account. When you delete a trip or photo, it is removed from our systems. When you ask us to delete your account, we delete your account and all associated data from our active systems within 30 days.
• Logs and error reports: only as long as needed for security and debugging, after which they are deleted automatically.
• Analytics: stored in aggregate form that does not identify you.
• Emails with us: for as long as needed to deal with your request.

We may keep information for longer where the law requires it or to establish, exercise or defend legal claims. Data in backups is overwritten in the normal course of our backup cycle.

8. How we keep your information safe

We use reasonable technical and organisational measures to protect your information, including encrypted connections (HTTPS), access controls, and keeping sign-in on our server rather than in your browser. No system is completely secure, so we cannot guarantee the security of your information. If a breach affects your personal information, we will notify you and the relevant authorities where the law requires it.

Photos are encrypted in transit and at rest, but they are not end-to-end encrypted. This means our systems hold the keys, and authorised Tokoyo staff could technically access them, for example to investigate a problem or respond to a lawful request. Please avoid uploading anything highly sensitive, such as identity documents or passports.

9. Children

The Services are intended for users aged 18 or older. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

10. Your privacy rights

Depending on where you live, you may have the right to:

• know whether we process your personal information and get a copy of it;
• correct inaccurate information;
• delete your information;
• receive your information in a portable format;
• object to or restrict certain processing;
• withdraw consent where we rely on it; and
• complain to a data protection authority.

You can edit or delete individual trips, photos, passports and visa settings in the app at any time. To exercise any other right, including deleting your account, email tokoyoapp@gmail.com from the address linked to your account. We may need to verify your identity before acting on a request. We will respond within the time the law requires (usually 30 days) and will not treat you differently for exercising your rights.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

11. Additional information for US residents

Residents of California and other states with consumer privacy laws (including Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia) may have the rights described in section 10. Those rights include the right to know what we collect and disclose, to access, correct and delete it, to get a copy, to opt out of sale, sharing for targeted advertising, and profiling, and not to be discriminated against for exercising these rights.

In the past 12 months we have collected the following categories of personal information:

We collect these categories from you, from Google when you sign in, and automatically from your device, for the purposes in section 2. We disclose them only to the service providers in section 4. We use sensitive personal information (citizenship) only to provide the visa feature you asked for, not to infer characteristics about you, so the right to limit its use does not apply. We have not sold or shared personal information for targeted advertising in the past 12 months and will not do so.

Authorised agents and appeals. You may use an authorised agent to make a request; we may ask for proof that the agent is authorised. If we decline your request, you may appeal by emailing us. If your appeal is denied, you may complain to your state attorney general.

California 'Shine the Light'. We do not disclose personal information to third parties for their direct marketing purposes.

12. Additional information for other regions

EEA, UK and Switzerland

IZANAMI LABS is the controller of your personal information. You can complain to your local data protection authority. In the UK, this is the Information Commissioner's Office; in Switzerland, the Federal Data Protection and Information Commissioner. We would appreciate the chance to deal with your concerns first, so please contact us.

Canada

You can access and correct your personal information and withdraw consent as described above. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada.

Australia and New Zealand

We handle your information in line with Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. You can complain to the Office of the Australian Information Commissioner or the Office of the New Zealand Privacy Commissioner.

South Africa

You can complain to the Information Regulator (South Africa) at enquiries@inforegulator.org.za.

13. Do-Not-Track

We do not track you across other websites, so we do not change our practices in response to Do-Not-Track signals.

14. Changes to this policy

We may update this policy from time to time. We will change the 'Last updated' date above, and if the changes are material we will tell you by email or by a notice in the Services before they take effect.

15. Contact us

IZANAMI LABS
Email: tokoyoapp@gmail.com