Privacy Policy

1. Data collected

We collect and store information necessary to provide and improve platform functionality, such as login credentials, technical data (IP address, approximate location at city or region level, device type, browser type), and usage metrics. Login is optional, but some features are only available to authenticated users. Technical and browsing data may also be collected even without authentication.

All informational content about countries, cities, and destinations is sourced from public or third-party sources. The platform curates, organizes, and presents this content, but we do not independently verify its accuracy.

We do not collect sensitive personal data or precise geolocation without explicit consent.

2. Cookies and similar technologies

We use first-party cookies and session storage to maintain user preferences, authentication, and platform functionality. Third-party cookies from analytics providers may be used to analyze usage patterns. You can manage or revoke consent through your browser or platform settings.

Important: Due to Apple's AppTrackingTransparency (ATT) framework, behavioral tracking technologies requiring explicit consent are not operational on Apple devices in our app. We do not use or install ATT-based tracking frameworks. As a result, behavioral data collection and related analytics are limited or unavailable on Apple devices.

3. Analytics tools

We use analytics tools like Google Analytics and Microsoft Clarity to understand platform usage and improve our services. These tools collect non-identifiable data such as IP address, approximate location (city or region level), browser type, session duration, and visited pages. No personal identification is shared with these services.

Note: On Apple devices, behavioral tracking and cross-app data collection are limited due to ATT restrictions.

4. Data sharing

We do not sell or rent your personal data. Data is only shared with trusted third-party providers essential to the platform’s functionality, such as hosting services, analytics providers, and advertising platforms. These providers operate under strict confidentiality agreements, and data access is limited to necessary information.

5. Data storage and security

Your data is securely stored on Microsoft Azure servers, with possible replication in other regions for stability and availability. Data is encrypted during transmission (e.g., via HTTPS) and protected with access controls and monitoring.

When an account is deleted, personal data is removed from the main database. Certain data may be retained in isolated systems for up to 6 months for legal or operational reasons, such as fraud prevention or compliance. After this period, the data is permanently deleted or anonymized.

6. User rights

You can delete your account at any time and request removal of your data. You also have the right to access, correct, or export your data using tools provided in your account settings or via support channels.

If you have questions about your data or wish to exercise your rights under applicable privacy laws (GDPR, LGPD, CCPA/CPRA), please contact us through the platform’s support page.

7. Public and private content

The platform features curated public content that can be viewed and shared by any visitor. Logged-in users can create private content, including lists and personal notes, which remain confidential unless shared externally by the user.

Users are responsible for any content they share publicly. By sharing content publicly, you grant My Next Spot a worldwide, non-exclusive, royalty-free, fully sublicensable, perpetual license to use, reproduce, distribute, modify, display, and promote such content within the platform, related services, and promotional materials.

We may moderate or remove content that violates laws or platform rules but do not guarantee review of all content. Public content does not represent My Next Spot or its affiliates, and we do not endorse or guarantee its accuracy or reliability.

8. Children and minors

The platform is designed for general audiences and is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If we learn that a minor has provided personal information without parental consent, we will delete such data promptly.

9. Legal compliance

This policy aligns with privacy laws including GDPR, LGPD, and CCPA/CPRA, depending on your location. We continuously review our practices to ensure compliance with applicable regulations.

10. Contact

For any questions, requests, or complaints regarding your data privacy, please use the support page within the platform or contact us directly.

11. Updates to this Policy

We may update this Privacy Policy periodically to reflect changes in technology, services, or regulations. Significant changes will be communicated through notifications or email when feasible. We encourage you to review this policy regularly.