Only what the app needs to work. Specifically:

We do not track your location in the background. It is read while you are using Ludgely: to show which area Today will search, when you ask for suggestions (so places near you can be found), and when you confirm you arrived somewhere. Never otherwise. Only the moment you arrived is stored with your outing.

We do not sell your data. Your check-ins, location, notes, photos and voice notes are never shared with advertisers or data brokers. There are no ads in Ludgely. The one thing that can go to advertising platforms is your device's advertising identifier, explained below.

We do not use your check-ins to train any model, ours or anyone else's. Your history is used to personalise your own suggestions and nothing else.

We do not show your activity to other users. Ludgely has no social feed, no followers and no public profile.

Ludgely uses Google Gemini, an AI service operated by Google, to find real places near you and write up your suggestions.

Exactly what is sent to Gemini, each time you ask for a suggestion:

Your photos and voice notes are never sent to Gemini or to any other third party. They stay in private storage that only your account can open.

Your email address, phone number, full name and password are never sent to Gemini.

Google processes the text above to produce the response. Under the terms that apply to this use, Google does not use it to train their models. We send the minimum needed for a useful suggestion, and nothing is sent unless you ask for one.

When you type a town or area, the letters you type are sent to Photon, a free place search run by Komoot (photon.komoot.io), so we can suggest matching places as you type. Only the text in that box is sent, never your name, account or anything else you wrote.

To show the name of the area you are in, your phone's own map service (Apple's on iPhone, Google's on Android) turns your coordinates into a neighbourhood name.

Ludgely contains no advertising. It does use three tools to understand how the app is used and which of our ads bring people in:

On iPhone, you will be asked before any of these are switched on. If you allow it, your device's advertising identifier is shared with Meta and Google so they can tell us which ads led to an install, and the tools above start. If you choose "Ask App Not to Track", none of them start at all. Nothing is collected, nothing is held back to send later, and the app works exactly the same.

On Android there is no system prompt, so these tools start when you open the app. You can stop your advertising identifier being shared with anyone by deleting or resetting it in your phone's settings, under Privacy and then Ads. There is not yet a switch inside Ludgely to turn analytics off on Android; if you would like to know more, write to us.

What these tools receive are events about how the app is used: that a check-in was completed, which of the three mood tiers a suggestion was for, whether it was accepted or skipped, which platform you are on and which version of the app you have, tied to an anonymous account number rather than your name or email.

They never receive what you wrote. Your mood text, your notes, your location, your photos and your voice notes are never sent to any analytics tool.

Your data lives in Supabase, which hosts on Amazon Web Services. Every table enforces row-level security, meaning your rows are readable only by your account, not by other users.

Photos and voice notes are stored in a private bucket. They are not publicly addressable and can only be retrieved through a short-lived signed link issued to you.

The town you last typed is also kept on your phone, so you only have to type it once.

We keep your data for as long as you have an account, and remove it when you delete the account. Usage events already held by the analytics tools, and purchase records held by Apple, Google and RevenueCat, are kept under those services' own policies.

Subscriptions on iPhone and Android are handled by Apple and Google respectively, through RevenueCat. RevenueCat knows your purchases by an anonymous account number. We never see or store your card details.

We receive only your subscription status, so the app knows whether your access is active.

When you subscribe, when a subscription is set to end, or when a payment does not go through, we email you about it. Those emails are sent through Resend, an email delivery service, which receives your email address, your first name and the message itself.

Now and then we may also send a short, friendly email, for example if you have not tried Ludgely yet or have not used it for a while. Never more than one a week. We keep a record of when each was sent, and whether it was delivered, opened or a link in it was tapped, so we do not send too many. Every one has an unsubscribe link at the bottom, and one tap stops them for good. Emails about your subscription still arrive either way.

You are in control of all of it:

Ludgely is for adults aged 18 and over. It is not intended for anyone under 18, and we do not knowingly collect data from anyone under 18. If you believe someone under 18 has created an account, contact us and we will remove it.

If we change how we handle your data, we will update this page and change the date at the top. Significant changes will be told to you in the app rather than left here quietly.

For any privacy question, or to request a copy or deletion of your data, write to support@ludgely.com.