Privacy Policy
1. Who we are and how to contact us
Quokka is a travel journal and storytelling app run by YourTrip Pty Ltd (ABN 47 602 442 768), a business registered in Australia ("Quokka", "we", "us"). We are responsible for the personal information described in this policy.
This policy explains what we collect, why, who can see it, and the choices and rights you have. It covers the Quokka app and any Quokka website. Effective date: 15 November 2026.
Contact: hello@getquokka.app. Write to us about anything in this policy, including access, correction, deletion and complaints.
2. What we collect
We collect what you give us, what the app records at your request, and what other people add about you.
| Information | What it is | Who can see it |
|---|---|---|
| Account | Email, name, username, bio, profile photo, home city. You sign in with Apple, Google or an emailed link. | Your profile details are visible to other users. Your email is not. |
| Location trail | Precise GPS points recorded while you use the app, and in the background if you turn on always-on location. | Only you. |
| Home point | A pin you can set in Settings so we can hide the area around your home. | Only you. It is never shown or described to anyone. |
| Journal | Field notes (text, date, place, weather), photos, chapters, days, the travel between places (type, times and any ticket details you add) and the places you save, add or visit. | Only you, until you share it. |
| Posts | Photos, photo sets, shared notes, days in review (a trimmed route, map picture, chosen photos and note excerpts) and travel stories (one journey: the travel type, times, optional ticket details such as airline, flight number, aircraft, class and seat, a simplified route, photos and your text), plus captions. | The audience you pick: Only me, Friends or Everyone. |
| Social | Follows, likes and comments, and the notifications they cause. | The people involved, and anyone who can see the post. |
| Technical | Device and connection details our service providers log when the app connects (for example IP address). | Us and our providers. |
We do not collect your contacts, your microphone or camera recordings, health data or payment details. We do not use analytics, advertising or crash-reporting tools.
"Friends" means people who follow you and whom you have accepted.
3. How we use it, and why
We use your information to run Quokka and for nothing else. We do not sell it, and we do not use it for advertising.
| What we do | Legal basis (GDPR and UK GDPR) |
|---|---|
| Provide your account, journal, map and sharing | Contract: it is needed to give you the app |
| Record your location and build your days and routes | Consent: you switch it on and can switch it off at any time |
| Show your posts to the audience you choose | Contract and your choice |
| Suggest places and write place descriptions, including suggestions based on the travel styles of similar users | Legitimate interests in making the app useful; you can object |
| Keep Quokka secure, prevent abuse and fix problems | Legitimate interests, and legal obligations |
| Respond to requests and comply with the law | Legal obligation |
Automated decisions. We use computer programs to suggest places and write descriptions. These do not decide anything that significantly affects your legal rights or interests, such as access to a service, and a person does not need to approve them. If that ever changes we will say so here, including the kinds of information and decisions involved.
Where we rely on consent, you can withdraw it in your device settings or in the app. Withdrawing does not affect what happened before.
4. Who can see what, and who helps us run Quokka
Your journal is private. Your chapters start private and your field notes default to private. Nothing leaves your journal until you share it, and each post has its own audience: Only me, Friends (people you have accepted as followers) or Everyone using Quokka. You can change a post's audience or delete it later. A day in review is a snapshot, so changing your journal afterwards does not change it.
When you share a route or a place, others can see where you went. We always remove the part of a shared day's route near your home, and we never show your home or your distance from it. A travel story shows only a simplified route (for flights, a straight line between the two ends), also with the area near your home removed; if you have not confirmed a home point, it shows no route.
Service providers. We use these companies to run the app. They handle information only to provide their service to us:
- Supabase stores accounts, journal data, photos and location points, and handles sign-in.
- Mapbox provides maps and address search. It receives the text you search for and map usage information.
- Foursquare provides place search through our servers. It receives the search text and area, not your account.
- AeroDataBox (through RapidAPI) looks up a flight when you ask it to. It receives the airline code, flight number and date, not your account.
- OpenAI helps write place descriptions and suggestions from place information, not from your private journal.
- Apple and Google provide sign-in, and the Apple App Store and Google Play distribute the app.
Others. We may disclose information if the law requires it, to protect someone's safety or our rights, or to a buyer if the business is sold, in which case this policy will continue to protect it.
5. Location and your home point
Location is the most sensitive thing Quokka handles, so you stay in control of it.
- Always-on location is optional. If you turn it on, the app records your position in the background, even when it is closed or not in use, to build your private journal and map. We explain this and ask for permission before your device does. You can turn it off in the app or in your device settings at any time.
- Stored privately. Your location points are saved to your Quokka account and are visible only to you. We use them to build your days, routes and distances.
- Shared only by you. Others see a route only if you share a journey, day or post, and a shared day's route never includes the area around your home.
- Home point. If you set a home pin in Settings, we store it separately where only you can read it, and use it to hide the area around your home when you share. If you do not set one, we use your home city's centre, which protects less. It is never shown to anyone.
- Photos and places. If you tag a photo or note with a place, others see the place you chose when you share it, not hidden file data.
6. Photos and their hidden data
Photos can carry hidden data, such as the exact place and time they were taken. Since November 2026, every photo is resized and stripped of that hidden data before it leaves your phone. We read the location first and keep it in your account, so your photo map and places still work. Photos uploaded earlier may still contain it until we clean them.
Photos in field notes and photo posts are stored with web addresses that are hard to guess, but anyone who has an address can open the photo, so share only what you are comfortable with. Photos in a day in review or a travel story are kept in private storage and are readable only by people allowed to see that post. Deleting a post or note deletes its photo files.
7. Where your data is stored and sent
Your account data, journal and photos are stored by Supabase on servers in Singapore. Our providers, including Mapbox, Foursquare, AeroDataBox and OpenAI, may process limited information in other countries, including the United States, to provide their services.
When information goes overseas we take reasonable steps to make sure it is handled in line with the Australian Privacy Principles. For people in the EU or UK, we rely on adequacy decisions or standard contractual clauses approved by the European Commission or the UK, and you can ask us for a copy of the safeguards.
8. How long we keep it, and deleting your account
We keep your information while your account is open. Your location trail and journal stay until you delete them or your account.
To delete your account, email hello@getquokka.app from the address you signed up with (see how to delete your account). We are building a Delete account button in the app and will update this policy when it ships. Once we confirm it is you, we delete your profile, journal, location points, photos, posts, comments and likes within 30 days. Copies in backups are overwritten within 90 days. Posts you shared are removed from other people's feeds when you delete your account.
We may keep a limited record where the law requires it, for example to deal with a dispute or a legal claim.
9. Your rights
You can ask us to see, correct, delete or export your information, and to stop using it in ways you have not agreed to. Email hello@getquokka.app. We reply within 30 days, and may need to confirm it is you first. Most of this you can already do yourself in the app by editing or deleting your posts, notes and places.
| Where you live | Your rights | Who to complain to |
|---|---|---|
| Australia | Access and correct your information, deal with us under a pseudonym where practical, and complain if we mishandle it (Australian Privacy Principles). | Us first. |
| EU, EEA and UK | Access, correct, delete, restrict, object, withdraw consent, and receive your data in a portable format. | Your local data protection authority, such as the ICO in the UK. |
| United States (California and other states with privacy laws) | Know what we collect and why, access, correct and delete it, opt out of sale or sharing, and limit the use of sensitive information, without being treated differently for using these rights. | Us first. Where your state allows, you can appeal our decision and then contact your state attorney general. |
We do not sell your personal information or share it for advertising. We use precise location only to provide the features you use. We do not respond to Do Not Track signals because we do not track you across other sites.
10. Children, security, changes and complaints
Adults only. Quokka is for people aged 18 and over. We do not knowingly collect information from anyone under 18, and we delete it if we find out we have.
Security. Data is encrypted in transit, stored with access controls so you can only read your own private data, and shared content is limited to the audience you choose. No system is perfectly secure. If a breach is likely to cause you serious harm, we will notify you and the regulator as the law requires, including under Australia's Notifiable Data Breaches scheme and the GDPR.
Changes. We may update this policy. For significant changes we will tell you in the app before they take effect, and we will always show the date above.
Questions and complaints. Contact hello@getquokka.app. We will respond within 30 days.