Travel Art.

YOUR MEMORIES. YOUR INFORMATION.

Privacy Policy

Effective date: 8 November 2026

1. Who is responsible for your information?

This policy covers the Travel Art website and mobile app, which help you turn photographs into personalised travel posters, and purchases through our Shopify store.

Data controller: Simon Hopkin, trading as Travel Art
Privacy contact: support@travelart.app

You can email us or use our contact form. The roles of Teemill, Shopify and Gelato in print preparation and purchases are described below.

2. Information we process

Most information comes from you or your use of the service. Our providers return information such as generated images, authentication status, notification delivery status and print handoff results. Checkout providers collect the contact, delivery and payment details you provide during checkout.

3. How we use information

You can create, edit and prepare posters for purchase as a guest. Your guest projects are stored privately in our cloud service; guest use does not mean that no personal data is processed. Optional registration lets you recover your projects and access them on other devices. When you link or import guest projects into an account, we keep their ownership and usage history consistent so the transfer does not reset service limits.

We use information to create and secure your account; upload and save your projects; generate artwork; prepare previews and print files; arrange your requested checkout; send enabled service notifications; answer support requests; enforce usage limits; and investigate technical or security problems.

We also use your finished artwork and its title to generate a product description, and process purchase information to manage orders placed through our Shopify store, arrange printing and delivery, and handle cancellations, returns, refunds and order support. We currently use Shopify purchase information for order handling and support, rather than marketing.

You need a private guest session or an optional account, and a selected photo, to generate artwork. If you do not provide the information needed for a feature, we may not be able to provide it. You can browse the marketing website without creating an account.

We rely on the following lawful bases:

Where you have granted the store-product licence in section 4.1 of our Terms & Conditions, we may also use that finished design and its product details to maintain a public store listing and offer and fulfil sales to other store visitors. This concerns the selected finished store product, not private artwork you have not turned into a product or the original source photograph. A content licence is not itself consent to all processing of personal information and does not override your data-protection rights; any use of personal information must also have an applicable lawful basis.

Optional app analytics and crash diagnostics

The iOS and Android apps offer separate, optional choices to share usage analytics and crash diagnostics. Both are enabled by default. There is no startup analytics prompt. Any choices you have already saved are preserved. You can use every app feature without sharing either, and change your choices under Guest Settings or Account Settings → Analytics & Diagnostics.

While usage analytics is enabled, Google Analytics for Firebase helps us understand feature use, where people leave the poster-creation and printing journey, repeat usage and errors. Reports include app interactions, selected styles and print options, operation timings, safe error codes, app/device information and an app-instance identifier. Google Analytics may derive approximate geography from connection information. We do not attach your account ID, name, email, photos, poster lettering or support messages, and we do not use this information for advertising. Installation identifiers mean these reports are pseudonymous, not fully anonymous.

While diagnostics is enabled, Firebase Crashlytics receives technical crash reports, device/OS details and installation identifiers to help us fix faults. Our non-fatal error reports use fixed codes instead of your content or original error messages. When both choices are enabled, usage events may appear as context in crash reports. Crash reports may be stored locally and are submitted on a later app launch while diagnostics remains enabled.

Switching usage analytics off stops new collection and resets local analytics data. Switching diagnostics off prevents new report submissions and discards pending reports. These choices do not erase reports already sent. Our launch setting for Analytics event-level retention is two months without extending it on new activity; aggregated reports can remain longer. Firebase states that Crashlytics retains crash traces and associated identifiers for 90 days before starting removal from live and backup systems. These provider reports are separate from ordinary service logs and cannot be located through your Travel Art account ID. Contact us about privacy requests using the details below.

4. Your photos, artwork and product descriptions

When you ask us to create artwork, our backend sends the selected source photo and style instructions to OpenAI through its image-editing API. A variation may use an earlier generated image. The app stores the returned artwork with your project. The backend normalises uploaded images and removes metadata from the processed source; that does not remove personal details visible within a photo.

When preparing a store product, we also send OpenAI a reduced-resolution copy of your finished poster and its title to generate a product description. This may include lettering and any personal details visible in the artwork.

Under our current standard API configuration, OpenAI does not use API inputs or outputs to train its models. OpenAI may retain inputs, outputs and associated information in abuse-monitoring logs for up to 30 days, unless it must keep them longer for legal reasons. We have not enabled OpenAI Zero Data Retention, Modified Abuse Monitoring or regional data residency. OpenAI processes this information for us under its business data-processing terms.

Only upload images you are entitled to use, and consider the privacy of anyone shown in them. The purpose of this processing is to create your artwork and its product description; it is not used to make decisions about your eligibility for employment, credit or similar services.

5. Who receives information?

Access by people operating the service is limited to what their role requires. Information may also be disclosed where necessary to comply with law or establish, exercise or defend legal claims.

Store-listing visibility: When you choose Prepare for Purchase, your finished artwork is used to create a publicly accessible product listing in the relevant store. The listing can be viewed before you make a purchase and is separate from your private saved project in the app. Where you have granted the store-product licence in our Terms & Conditions, anyone visiting the store may buy physical prints of that finished design; you receive no royalty or other payment. The design, its lettering and product details are visible to visitors and may contain personal information, so consider this before creating a product. Deleting your account does not automatically remove an existing store product. Contact support@travelart.app for help requesting product removal.

Temporary print files: preparing a store product creates a print-ready artwork copy that anyone with its unguessable public link can access. We supply this link to the selected print provider so it can import the artwork.

For Teemill, we delete the temporary copy after confirmation of import. For newly prepared Gelato products, we delete it after confirming that the product is ready to view in the store. Files may remain longer while preparation is unresolved or cleanup is being retried. Copies retained for older Gelato products are not automatically removed by this cleanup.

Deleting the temporary file does not remove artwork already imported by the provider or the store listing.

6. Where information is processed

Travel Art's initial launch is limited to the UK. Our core Firestore, Cloud Storage and Cloud Functions resources are configured in London. However, using a London backend does not mean that every part of the service is processed only in the UK.

Where personal information is transferred outside the UK, we use providers whose terms include an applicable safeguard, such as UK adequacy regulations or approved contractual protections. OpenAI's data-processing addendum incorporates the UK Addendum to the EU Standard Contractual Clauses for UK API data, and Google's applicable processing terms provide contractual safeguards for restricted transfers. Contact support@travelart.app if you would like more information about the safeguard used for a particular transfer.

We record and periodically review the roles, locations and transfer safeguards of our providers. Before offering Travel Art in the EU, we will review this notice, EU representative requirements, EU transfer mechanisms and local rights rather than relying on this UK-launch wording.

7. How long we keep information

Guest projects remain accessible while your guest credentials and the retained projects are available. If an inactivity-deletion policy applies to your guest session, its period is shown in Guest Settings. Active or unresolved artwork or print preparation may delay deletion. Registration is optional and protects recovery if you lose guest credentials; reinstalling the app does not guarantee guest recovery.

Both mobile apps may keep an app-private local copy of your selected photo and unfinished design to restore interrupted work. These recovery files are excluded from device backups and cleared when you discard the draft, sign out or clear the relevant app data. This local recovery is separate from your saved cloud projects.

Minimal generation-budget and abuse-prevention records can remain separately from deleted projects for the configured security retention period. Automatic budget-record cleanup is currently off; records remain until an explicit retention policy is applied or they are removed after operational review. They do not retain your photographs merely to count usage. Records concerning uncertain provider submissions may be retained while their outcome is investigated. These counters prevent deletion or account conversion from resetting shared generation limits.

We retain your account, saved photographs, artwork and designs while the account remains active. An account becomes inactive when there has been no sign-in, project change, generation request or print-preparation activity for 90 days. We intend to warn you by email before inactivity deletion where reasonably possible. You can delete an individual creative project or request account deletion sooner.

The documented account deletion process removes authentication access first, then schedules private data cleanup after a minimum fifteen-minute delay so accepted work can finish. Failed cleanup is retried; the delay is not a guarantee that every copy is erased within fifteen minutes. A minimal deleted-account security marker is retained for 24 hours to prevent old sign-in tokens recreating data.

Deleting your account does not cancel print orders or automatically remove existing store products or information already shared for those products and orders. Where granted, the store-product licence continues after account deletion, and the finished design and necessary product information may remain with the store and print providers while the product is lawfully offered or to fulfil existing orders. The licence does not authorise indefinite retention of unrelated private project data or remove applicable erasure, objection or other data-protection rights. Contact support@travelart.app for help with a product-removal or privacy request. Website enquiries are stored separately from app accounts, so deleting an app account does not automatically remove a website enquiry; you can request its deletion using the email address or contact form below. Provider backups may take additional time to expire through their normal backup cycles.

8. Your choices and rights

To request deletion without using the app, visit Delete your Travel Art account. You can email or contact us without signing in or reinstalling the app.

You can choose which photographs to upload, delete creative projects, clear a guest session in Guest Settings, and request registered-account deletion in Account Settings. Clearing guest data does not require an email address or password. Delivery and contact details for a physical purchase are collected at Shopify checkout; clearing app data does not cancel that purchase. Registered-account deletion through the app requires recent sign-in. Both guest clearing and registered-account deletion may be blocked while generation, rendering or an unresolved print transfer is active. You can change notification permission in your device settings.

Depending on the law and lawful basis that applies, you may have rights to access, correct or erase information; restrict processing; receive or transfer certain information; and withdraw consent for future processing where consent is the basis. These rights have conditions and exceptions. Withdrawing consent does not invalidate earlier lawful processing.

Send a privacy request to support@travelart.app. We log the request through the support mailbox, acknowledge it, and may ask only for proportionate information needed to verify your identity. We respond without undue delay and normally within one calendar month. If a request is complex or you make several requests, the law may allow up to two additional months; if so, we will explain the delay within the first month.

You may complain to the UK Information Commissioner’s Office. You do not have to contact us before approaching the ICO.

9. Website cookies and tracking

The current marketing website does not set application cookies, run advertising or analytics scripts, load third-party fonts, or include mailing-list forms. Its contact form collects your name, email and message to handle your enquiry through Firestore and the support email queue. Website email addresses are self-reported and are not verified against app accounts. Submission references prevent duplicate processing, while derived IP-address and email identifiers support enquiry rate limits; these are not anonymous data. Hosting infrastructure may also retain request logs. Firebase Hosting still processes requests to serve the website. These statements apply to the Travel Art marketing website. Our Shopify store, checkout and payment services may use cookies or similar technologies to operate the store, maintain your basket, process payments and prevent fraud. Their privacy notices and any cookie choices presented there apply when you use those services. We currently have no analytics or marketing tracking enabled in our Shopify store.

10. Protecting information and policy updates

The app’s documented protections include authenticated access to private projects, ownership checks and backend-only provider credentials. The temporary print-delivery links and public store listings described above are exceptions to private image access. No service can promise absolute security.

We will update this page when the service or its privacy practices change. Material changes should also be communicated through an appropriate in-app or direct notice where required.

Read the Terms & Conditions for the conditions of using Travel Art.