DPRT is a travel itinerary application operated by NVWL LLC ("we", "us", or "our"), a Nebraska limited liability company. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
By using DPRT, you agree to the practices described in this policy. If you do not agree, please discontinue use of the application.
Account information. When you sign in, we collect your email address. We do not collect your name, phone number, or payment card details directly — payment processing is handled by RevenueCat and Stripe (see Section 4).
Trip and itinerary data. We store the trips and events you create, including event names, dates, times, durations, locations, addresses, GPS coordinates, timezone information, travel routes, and notes you add to events. This data is stored locally on your device and, if you are signed in, synced to our cloud database.
Authentication metadata. Supabase, our authentication and database provider, automatically records your account creation timestamp, last sign-in time, and a unique user identifier (UUID) when you sign in.
Location search queries. When you search for a location in DPRT, your search query is sent to Google Places API via a server-side proxy we operate. Google logs these requests in accordance with their own privacy policy. GPS coordinates from selected locations are sent to open-meteo to determine the correct timezone; open-meteo's privacy policy governs their handling of this data.
Shared itinerary data. If you enable sharing for an itinerary, we host a read-only version of that itinerary (including a calendar file) at a unique URL. This content is accessible to anyone who has the link until you disable sharing.
Analytics. We use self-hosted Plausible Analytics to understand how DPRT is used. Plausible is privacy-first: it sets no cookies, collects no personal data, and does not track you across sites or devices. We collect anonymous behavioral signals only — for example, whether a trip was created, which event types are used, and whether the upgrade flow was completed. Your IP address is anonymized before storage and never recorded. We host Plausible on our own server; your data never leaves our infrastructure or reaches a third-party analytics service.
We do not sell your personal information. We do not use your data for advertising.
Your trip data is stored locally on your device using browser local storage. If you are signed in, it is also stored in our cloud database hosted by Supabase (Supabase, Inc.), which uses industry-standard encryption in transit and at rest.
Your account is protected by one-time passcode authentication — we do not store passwords. We implement row-level security policies in our database so that only you can access your own trip data.
No method of electronic transmission or storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security.
DPRT uses the following third-party services. Each is governed by its own privacy policy:
We retain your account and trip data for as long as your account is active. If you request account deletion, we will delete your data within 30 days, except where we are required to retain it by law.
Local data stored on your device is controlled by you and can be cleared at any time through your browser or device settings.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at compliance@nvwl.app. We will respond within 30 days.
If you are located in the European Union or United Kingdom, the following additional provisions apply.
Lawful basis for processing. We process your personal data on the following legal bases: (a) performance of a contract — to provide the DPRT service you have requested; (b) legitimate interests — to maintain and improve the application, detect fraud, and ensure security; and (c) consent — where you have explicitly agreed to specific processing (such as sharing an itinerary).
Data transfers. Your data may be transferred to and processed in the United States, where our service providers (Supabase, RevenueCat, Stripe) operate. These transfers are made under appropriate safeguards including standard contractual clauses.
Right to lodge a complaint. You have the right to lodge a complaint with your local data protection authority.
If you are a California resident, you have the right to know what personal information we collect, to request deletion of your personal information, and to opt out of the sale of your personal information. We do not sell personal information. To exercise your rights, contact us at compliance@nvwl.app.
DPRT is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at compliance@nvwl.app and we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date at the top of this page. Continued use of DPRT after changes are posted constitutes acceptance of the updated policy.
NVWL LLC
Nebraska, United States
Privacy inquiries: compliance@nvwl.app
General support: support@nvwl.app