Legal

Privacy policy

The UnXplored Ltd. · Effective [TERMS EFFECTIVE DATE]
This Privacy Policy explains what personal data The UnXplored Ltd. ("UnXplored", "we" or "us") collects through the UnXplored app and website (the "Service"), why, who we share it with, and the rights you have over it. The UnXplored Ltd. is the controller of that data.
It applies to everyone who uses the Service. Section 9 sets out the extra rights you have if you live in the European Union, the European Economic Area or the United Kingdom.

1. What we collect

What you give us:
•
Account details — your name, email address, and the username and home country you choose. If you sign in with Apple or Google, we receive the name and email address they share with us.
•
Bookings — the Trip you book, the full name of each traveller on the booking, and what has been paid and is still owed.
•
Your Xplorer Map — the places you mark as visited or on your wishlist, the dates of your visits, and the photos you add.
•
Community activity — the posts, photos, comments and likes you share, the places you tag, the people you block, and any reports you make.
•
Messages — what you send us in the app, through the contact form, or by email.
•
Waitlist sign-ups — your email address, and your name if you give it.
What is collected automatically:
•
Notification tokens — if you allow notifications, an identifier for your device so we can send them to you.
•
Usage counts — simple counts of things like how often the app is opened or a booking is started. They carry no name, email, account ID, place or trip, so they cannot be traced back to you.
•
Crash reports — technical details of an error, with personal data removed before they are sent.
Photo locations: photos often carry hidden location data (EXIF). We strip it from the copies we store, so a photo you share does not reveal where it was taken.
Payments are handled by PayPal. Your card or PayPal account details go to PayPal directly — we never see or store them. We receive a record that a payment was made, its amount and its status.
We do not use third-party analytics or advertising tools, and we do not track you across other apps or websites.

2. How we use it, and why we are allowed to

•
To run your account and the Service, including your Xplorer Map and the community — because you asked us to (performing our contract with you).
•
To take and manage bookings, collect payments, process refunds, and send you booking emails and reminders — to perform our contract with you.
•
To keep financial and booking records — because the law requires it.
•
To keep the Service safe: filtering and moderating community content, handling reports, limiting abuse, and fixing errors — our legitimate interest in a safe, working Service.
•
To understand how the Service is used, through the anonymous counts described above — our legitimate interest in improving it.
•
To send push notifications and waitlist or marketing emails — only with your consent, which you can withdraw at any time in your device settings or with the unsubscribe link.

3. What other people can see

Community posts and comments are visible to signed-in Xplorers only, never on the public website, and show your display name. Your profile, Xplorer Map and badges are shown to others only as your profile settings allow. Your bookings, payments and messages to us are never visible to other users.

4. Who we share it with

We do not sell your personal data. We share it only with the service providers we need to run the Service, who may use it only on our instructions:
•
Google (Firebase) — hosting, sign-in, database, file storage and notifications.
•
PayPal — payment processing.
•
Our email provider — sending booking, account and support emails.
•
Apple and Google — if you choose to sign in with them, and to deliver push notifications.
We may also disclose personal data where the law requires it, to respond to a valid legal request, to protect the safety of our travellers or others, or as part of a sale or reorganisation of our business.

5. Where it is stored

Our service providers store and process data in the United States and other countries, which may not have the same data protection laws as yours. Where the law requires it, we rely on appropriate safeguards — such as standard contractual clauses — for those transfers.

6. How long we keep it

We keep your data while you have an account. When you delete your account, we delete your profile, Xplorer Map, photos, wishlist, badges, community posts, comments and likes, and your notification tokens.
Booking and payment records are the exception. We are required to keep financial records, so instead of deleting them we remove your identity from them and keep the anonymised record for [FINANCIAL RECORD RETENTION PERIOD].

7. Deleting your account

You can delete your account at any time in the app, under Settings. To ask for a copy of your data, or for anything else in section 9, email info@theunxplored.com.

8. Keeping it secure

Access to your data is restricted by security rules that are enforced on our servers, not in the app. Payment amounts are always worked out on our servers, and card details never reach us. No system is completely secure, but we take reasonable steps to protect your data and will tell you, and the relevant regulator, if a breach puts you at risk.

9. Your data protection rights

Whatever country you live in, we will consider any request about your data. If you live in the European Union, the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR gives you these rights, and the Cayman Islands Data Protection Act gives similar rights:
•
Access — to ask for a copy of the personal data we hold about you.
•
Rectification — to ask us to correct data you believe is wrong, or to complete data you believe is incomplete.
•
Erasure — to ask us to delete your data in certain circumstances, for example where we no longer need it for the purpose we collected it for, or you object to how we use it.
•
Restriction — to ask us to limit how we use your data, for example while you dispute whether it is accurate or lawfully used.
•
Objection — to object to our using your data, in certain circumstances, including for marketing at any time.
•
Portability — to ask us to send the data you gave us to you or to another organisation, in certain circumstances.
•
Withdrawing consent — where we rely on your consent, to withdraw it at any time.
To use any of these rights, email info@theunxplored.com. We will reply within one month. Requests are free, though we may charge a reasonable fee, or decline, where a request is clearly unfounded or excessive. We may need to confirm your identity first.
If you are unhappy with how we have handled your data, you can complain to your data protection authority — in the UK, the Information Commissioner's Office; in the Cayman Islands, the Ombudsman; in the EU, the authority in your country. We would appreciate the chance to put things right first.

10. Children

The Service is for people aged 18 and over, and we do not knowingly collect data from anyone younger. A Lead Traveller may give us the name of a minor travelling on their booking, and does so on the minor's behalf.

11. Changes to this policy

We may update this Privacy Policy. When we do, we will change the date at the top, and if the change is significant we will tell you in the app or by email.
Questions about your privacy? Email info@theunxplored.com.
UnXplored
Bucket lists, unlocked. People — Places — Experiences — Beyond
Follow
@solotravelersunite
@passportunlocked
info@theunxplored.com
© 2026 The UnXplored Ltd.
Destination photography is placeholder stock — see the README.