Sunimod · Journey Weaver
Journey Weaver privacy notice
Current development build
Last updated: October 26, 2026. Journey Weaver is in development for Android and iPhone. It is not publicly released, and internal store availability has not been verified.
Information in the current build
The current Journey Weaver app stores personal trip names and details, destinations, itinerary entries and drafts, packing and task states, basic expense entries, and imported vault files on your device. Entries can include the dates, locations, notes, provider links and other information you choose to enter. Use only information you are entitled to hold.
Personal trips and vault files stay local. The development client can attempt account, collaboration and billing requests as described below; it is not an offline-only app. Public account creation, sign-in, hosted collaboration and purchases are not available, and a request may fail without completing the action. Imported files are never included in these requests.
Local encryption and device authentication
The implementation encrypts stored record content and imported vault files with AES-GCM. Device keys are held using the platform’s Keychain or Keystore. Device authentication uses the operating system’s supported biometric or device-credential checks; Sunimod does not receive your face, fingerprint, device PIN or device password.
App-switcher redaction and Android screen-capture protection are implemented for sensitive app views. These controls are still being validated across devices. They are not a guarantee that another person with access to an unlocked device cannot view or copy information.
Files and permissions
When you choose an import, the app receives the selected file and stores an encrypted local copy. Originals and metadata in the source location remain separate. Device authentication and file selection use platform interfaces. Imported documents, images, passport identifiers and ticket contents do not go through a Sunimod upload service.
Keep your own originals. Do not use this development build as the only copy of travel documents or important plans.
Services, diagnostics and external links
The current app has no advertising or analytics SDK and no configured remote crash-reporting service. Development tooling and the operating system can produce local diagnostics; they are not a Journey Weaver cloud backup.
Sunimod connection attempts
Account and shared-planning controls use HTTPS requests to collaboration.sunimod.com. Requesting an email sign-in code sends the email address you enter, an app identifier and an app-generated device identifier. Starting passkey sign-in sends the app and device identifiers to request a challenge. These requests can reach Sunimod even when sign-in fails; they do not upload your vault or personal trip library.
The client also implements code redemption, session refresh, account and email changes, device and passkey management, invitations and shared-trip requests. When an authenticated test session is present, account-dependent requests can include session credentials, account/device/passkey identifiers, email changes, invitation tokens and the trip or family text selected for that action. Passkey responses contain public credential information and cryptographic proofs, not your biometric data or private passkey. Account details, entitlements and permitted shared metadata may refresh when you open or resume the app or relevant screens.
Billing requests use billingverification.sunimod.com for account-bound purchase context, subscription entitlement checks and purchase verification. Verification can send an Apple transaction identifier or Google Play purchase token with the authenticated session. Native billing components also initialize when the app starts and may contact Apple or Google even if you do not start a new purchase. Public account, collaboration and billing features remain unfinished; this notice does not claim a successful public account, purchase or synchronization.
Sunimod hosts receive technical connection information, such as IP address, request time, method, path and response status. Technical request logs may be retained for operation, security and troubleshooting, including failed requests. Sending a request is not proof that an account was created or its contents were saved as an account record. This development notice does not assert a fixed log-retention period or automatic deletion after a failed sign-in; contact us about connection information using the privacy route below.
Apple, Google, your device provider and distribution services may independently process installation, security, diagnostics and device information under their own policies and your platform settings. This notice does not set their retention periods or claim that removing Journey Weaver erases their records.
If you open a provider or support destination outside Journey Weaver, that service receives the information needed to handle the visit or message, such as connection details and content you choose to submit. Visiting sunimod.com is covered separately by the Sunimod website privacy section, including its technical request information and browser storage.
Document boundaries remain separate
The client separates trip-shared text, family-private reservation text and device-only documents. Imported files and images, passport identifiers and images, thumbnails, raw imported email content and raw OCR are never uploaded to Sunimod. An email address entered for sign-in is distinct from imported email content. Paying for or organizing a trip does not grant access to another family’s private information. Metadata synchronization is not described as end-to-end encrypted.
This notice will be updated with the deployed service’s collection, recipients, retention, account deletion and user choices before public account, collaboration or purchase features become available. Connection attempts in the development client do not establish that those services work.
Retention, deletion and your choices
Local information stays in Journey Weaver’s app container until it is removed or replaced. Archiving a trip keeps its records and documents; archiving is not deletion. In-app record and vault deletion controls are not yet exposed in the current development interface.
To remove the current app’s local container, use the operating system’s app removal controls. On iPhone, use Delete App rather than Offload App; offloading retains documents and data. On Android, clearing app storage or uninstalling removes local app data. Platform key storage can persist separately, so app removal should not be treated as proof that every key or provider-held record has been erased.
The native configuration requests exclusion of Journey Weaver data from automatic app cloud backup and device transfer. Those protections are implemented but still require validation on the intended physical devices. Operating-system and device-provider behavior can vary. Manage any existing backups through the provider holding them.
Public account creation and sign-in are not available. Sunimod cannot remotely recover or erase data that remains only on your device. A failed sign-in, sign-out, loss of connectivity or subscription downgrade does not delete saved personal trips or block offline documents. For information transmitted in connection attempts or retained in technical logs, use the privacy contact below; removing the app does not itself delete server-held information. Encrypted export, backup recovery and cross-device synchronization are not available. Losing the device or its encryption key can make the saved information inaccessible; keep your originals for re-import.
Removing Journey Weaver does not erase original files elsewhere on your device, copies you have shared yourself, Sunimod technical request logs, support emails, platform diagnostics or records independently held by another provider. Manage those copies with the service or location holding them.
Support and privacy requests
Email admin@sunimod.com and identify Journey Weaver for privacy questions or requests about connection attempts, technical logs or other information you have sent to Sunimod. We receive your sender details, message and any attachments you choose to provide and use them to respond. Do not send passports, ticket barcodes, reservation codes, passwords, payment details or unnecessary personal travel records.
Support correspondence follows the Sunimod policy’s retention and choices provisions. You can ask for access, correction or deletion of information you sent us; verification and applicable retention needs are described there. This support route does not remotely erase your local app container.
Audience
Journey Weaver is being designed as an adult-managed travel-planning tool. It is not intended for children to submit information to Sunimod. Adults should handle sign-in attempts, support and privacy requests. No store age rating or public availability is claimed by this notice.
Updates
We will update this notice as Journey Weaver’s implemented behavior changes. The development status and scope are shown on the Journey Weaver product page.
Journey Weaver help & support · Sunimod website & app privacy · All Sunimod apps
