Privacy
The short version: nothing leaves your phone.
This website
This website sets no cookies and uses no analytics. It loads nothing from any other site. If your browser is set to one of its eleven languages, the English pages open in that language. The only things it keeps, in your own browser, are your light or dark choice if you use the theme button, and your language if you pick one from the menu.
The short version
Last updated: 2 November 2026
Stivale in Tasca has no accounts, no sign-in and no server of its own. It collects nothing and contains no analytics, no advertising and no third-party tracking SDKs. The one thing about you it ever passes on is your approximate location, to Google Maps, and only when you tap Nearest hospital or Nearest pharmacy (see Your location).
That includes crash reporting: there is no Crashlytics or Sentry in this app. When something goes wrong the error is written to a log on your device, which you can read, copy, clear or email from Settings → Report a problem. It is sent nowhere unless you send it.
What is stored, and where
Everything the app remembers is stored on your device using the operating system's own app storage, and nowhere else:
| What | Why |
|---|---|
| Bookmarked towns, sights and restaurants | So the Saved tab works offline |
| Trips you build, and their names and notes | So an itinerary survives a restart |
| Towns you check in to, and the date of each | For your passport's stamps and your map on Been there |
| The towns and sights you opened most recently (the last 20) | So the app can take you back to them: the Trip planner and search list them, Explore offers the last town, and the app opens on it; Clear there, or Reset local data in Settings, empties it |
| Your language and appearance choices | So the app opens in the language and light or dark look you picked |
| The kinds of place you picked as your interests | So lists of places show those first; Settings changes them, and Reset local data clears them |
| Which one-time notes you have closed (the tour invitation, the booking note, the update note for a version) | So each is shown once, not on every launch |
| Local tips you write, and the ones you shortlist | So your own notes are there next time |
| A first name, if you type one into a tip | So a tip you write is attributable to you, by you |
| A short log of recent errors (the last 20) | So you can report a problem with what actually happened |
| The day's summary of the last town you opened, only while the Today home-screen widget is placed | So the widget can show it; removing the widget, or Reset local data, erases it |
None of it is uploaded. There is no backup to a server, no sync between devices, and no copy anyone else can read. Uninstalling the app deletes all of it.
Backups you make
Settings → Back up trips and saved places puts your trips and saved places in one file and opens your phone's share sheet. You choose where it goes: your files, your own cloud storage, or an email to yourself. The app does not upload it and keeps no copy. Check-ins are not included. Restoring reads only the file you pick, when you pick it, and adds what is in it to what you already have.
Reading phrases aloud
Listen, on a phrase, hands that Italian phrase to your phone's own text-to-speech engine and nothing else. The app uses only an Italian voice installed on your phone, so it works with no signal and the phrase is not sent to an online voice; if no Italian voice is installed, the app says so. Nothing is recorded, and the microphone is never used.
No email address, phone number, contact list, photo library, precise location or advertising identifier is requested or read. Approximate location is read only as described under Your location.
Your location
The app reads your location only when you tap Check in on a town, or Nearest hospital or Nearest pharmacy (on the emergency card, in Explore's Help, or in search's answers), and only approximately: Android's approximate permission, never precise and never in the background. Each tap reads it once.
- Check in compares the reading with that town's centre on your phone, to confirm you are there, and then discards it. What is kept is the town and the date.
- Nearest hospital and Nearest pharmacy put the reading in the Google Maps search they open, so that Maps looks around you rather than wherever its map happens to be. The reading goes to Google Maps, where Google's privacy policy applies, and the app keeps nothing.
Your position is never saved, never logged and never sent anywhere else. Nothing else in the app reads your location: the nearest train, bus, ferry and taxi buttons and directions leave it to Google Maps. You can turn the permission off in your phone's settings at any time; check-ins then cannot be confirmed, the hospital and pharmacy searches open without your location, and everything else works as before.
Share my passport, in the Trip planner, turns the towns you checked in to and their dates into an image on your phone, and hands it only to the app you choose in your phone's share sheet. Nothing is sent until you pick one. Share my map, on Been there, does the same with your regions and towns, without the dates; each town is drawn where the app's own map places it, never where your phone was.
Network connections the app makes
- On launch, only an update check. The towns, sights, festivals and photographs are bundled in the app, so the whole catalogue works with no connection at all. On Android the app asks the Google Play app on your phone whether a newer version is available, the same check Google Play makes for its own automatic updates; the app adds nothing of its own. If there is one, a card on Explore offers to open the app's Google Play page.
- Partner listings, where a partner is configured: the app asks that partner's API for listings for the region you are looking at. The request carries the place, not you.
- Google Places, only in builds where the optional ratings feature is switched on: a restaurant lookup sends the town name to Google.
When you tap a partner link
Booking, ticket, rail and transfer buttons hand off to that company's own site or app — Booking.com, Trip.com, Expedia, GetYourGuide, Tiqets and others. From that point their privacy policy governs what happens, not this one.
Those links carry an affiliate identifier so that a booking can be credited to this app. The identifier describes the app, not the person tapping it: it contains nothing about you, your device or anything you have saved.
The Booking.com button passes through Stay22, an affiliate service, on the way to Booking.com. The link it receives carries the same identifier and the location of the town you are looking at, and nothing about you.
Maps, phone and email
Directions open Google Maps with a destination, on the web or in the Maps app, and Google's privacy policy applies there.
The nearest train, bus, ferry and taxi buttons open a Google Maps search for that kind of place with no location attached. Google Maps then looks near the phone's own position. Any use of your location for those searches happens inside Google Maps; these buttons send no position of yours.
The nearest hospital and pharmacy buttons open the same kind of search with your approximate location in it, as described under Your location. Without the permission, or when no reading comes within a few seconds, they open it with no location, like the station buttons.
Opening a route in Google Maps sends the names of its stops to Google Maps as a directions link. Sharing a route or a town hands its name and a Google Maps link to whichever app you choose in your phone's share sheet; nothing is sent until you pick one.
The emergency and roadside assistance numbers open your phone's dialler with the number filled in. The app does not place calls and sees nothing about them.
Sending a local tip, a correction to the guide, or a trip you suggest, opens your own mail app with a draft already written. A suggested trip carries its name, its stops and its link, and a first name only if you type one. The app never sends mail itself, so nothing leaves your phone unless you press send in your mail app — and then it goes to the project's own inbox, not to a third party.
Other services the app links to
Some buttons open another service with nothing but a place name: Meetup and Eventbrite for meetups and events near a town, the Tripadvisor and Rick Steves Italy forums, Airbnb, Trainline, and Google Maps searches for reviews, trails and taxi ranks. WhatsApp opens only when you choose to send a taxi message, with the text you picked and no recipient.
Whatever you do there — signing in, posting, joining, messaging — happens in that service, under its own privacy policy. This app has no account with any of them, sends them nothing about you, and receives no data from them. That is also why the app has no feed, reviews or meetups of its own: those would mean holding other people's posts on a server, which this app does not have.
Your calendar
Add to calendar, on a festival, opens your own calendar app with the festival filled in, and you decide whether to save it. The app asks for no calendar permission, never reads your calendar and never learns whether you saved anything. (On Android this is the system's calendar insert intent, which needs no permission by design.)
Supporting the project
On Android the support button opens an external page. On iOS it uses Apple's in-app purchase, so Apple handles the payment end to end. The app never sees card or account details on either platform, and nothing is granted in return for a contribution.
Children
This is a general-audience travel guide. It is not directed at children and collects nothing from anyone, of any age.
Changes
If this policy ever changes, the updated text ships with the app version it applies to, and the date at the top of this file changes with it.
Contact
Questions about this policy go to the project's inbox — the same address shown under Settings → Privacy in the app.