Privacy

Publisher and scope

21 Million SLU publishes BestOf.ad for iPhone and is responsible for the processing it carries out to operate the app and provide support. Contact: paul@21million.ad. This page covers the native app and its information pages, not every service on the website.

The app does not require an account, offer in-app purchases or include an analytics or advertising-tracking SDK. The optional location feature is described separately below. These choices do not prevent technical data from being transmitted when online services are used.

What the app stores locally

The notebook stores BestOf place identifiers (slugs), notes you write, your day-plan selection and its order. Your language choice is also saved. These values use the app’s private preferences, called UserDefaults, so your choices are available when you reopen it.

The text of your notes is not automatically sent to BestOf, and the notebook does not sync with a BestOf account. To retrieve saved places’ names and details, opening the notebook may send their identifiers (slugs) to the BestOf API. Those requests do not contain your note text: saved references and notes are therefore handled differently.

The app does not create a persistent disk cache of provider listings or photos. Some content is kept temporarily in memory for display. This is not a promise about every mechanism used by iOS, Apple or backups.

What travels over the network

The app requests the catalogue and listings from the BestOf API. Language, search terms, filters and pagination appear in GET request URLs; a place identifier appears in its listing URL. These values may therefore appear in technical logs. Avoid entering sensitive information in search.

Services contacted receive your IP address and normal connection metadata, such as request time and technical information sent by the network client. These exchanges deliver content, keep the service running and help handle incidents or abuse; browsing is not an entirely offline activity.

Services involved

Apple’s distribution and diagnostic services, including TestFlight when you use it, may also process information depending on the service and your settings. The absence of an analytics SDK in BestOf does not describe all of that processing.

• BestOf and Vercel: API access and hosting for these information pages.
• Google CDN and, depending on the image, BestOf: catalogue photo delivery. Image requests reach the image host.
• Supabase: server-side catalogue hosting and some photos. Notebook notes are not synced to this database.
• Maps: the Andorra tab loads a BestOf page using Mapbox, with OpenStreetMap credits, for places and their Google ratings, in an isolated, non-persistent WKWebView. Displaying it sends requests and technical information needed for the service to BestOf and Mapbox. Notebook note text is not sent to the map. Earlier TestFlight builds 0.1.0 (1), with Apple MapKit, and 0.1.0 (2), with Mapbox, worked without location access.
• Your email app, sharing services, external websites and maps: used when you choose to open them or send them content. Their own practices also apply.

Optional location

The map in the Andorra tab has a native Around me button, a Full screen option and filters. Full screen keeps the same map, view and filters.

A tap on the native Around me button requests a single location fix, using only iOS permission while the app is in use (WhenInUse). An approximate location is accepted and shown as approximate. You can decline permission and keep using the map manually. Permission remains optional and can be changed in iOS Settings: after a denial, or when Location Services are off on the device, the app shows a Settings button.

Opening the map does not request your location, and it is requested neither at startup nor on returning to the foreground. There is no continuous or background tracking. Each new fix requires another tap; granting permission alone or a web-page message does not initiate one.

The location and its accuracy are used temporarily in memory, including in the non-persistent WKWebView that displays the map. They are saved neither in the notebook nor in persistent storage. Coordinates are added neither to BestOf URLs nor to its API queries or application logs. The location is cleared when you tap Andorra overview, leave the Andorra tab or open a place, when the app enters the background, or when the map session ends. Clearing here means removing the location marker and its accuracy. The viewed area may remain visible in the map’s in-memory session; this is not tracking your movements.

The viewed area, including after centering on your location, determines requests for map resources sent to Mapbox. These exchanges and their technical metadata exist even without BestOf saving your location. Temporary use of location in the app does not establish an absence of provider processing or retention; providers’ actual practices and retention periods for BestOf remain unverified.

The standard feedback link provided by Mapbox, available through the map credits, includes the viewed map center in its URL. That center may correspond to your location after recentering. The app asks for native confirmation before opening it externally, with the option to cancel. Mapbox and OpenStreetMap credits remain visible.

Retention and known limits

Active notebook data stays in the app until you remove or erase it. If recovery is needed, the app may keep local copies of an earlier notebook to avoid silently losing data. These copies may contain old notes and remain until you erase the entire notebook. Your language preference is separate from that erasure.

Service providers may retain operational, security or diagnostic logs under their policies and service configurations. Their actual retention periods for BestOf are not yet verified. We therefore do not promise immediate deletion of those logs or a fixed retention period.

System backups may include app data. Their retention and deletion depend on the backup service and your settings. Exported copies are also separate from the active notebook. A recovery export may contain original notes encoded in base64; that is not encryption. Ordinary My day sharing excludes your notes but includes available names or references, stop order and URLs. You choose whether to export or share these items.

When you contact support

An email is sent only if you choose to send it. We receive your address, message and any attachments you select. We use them to answer, investigate the issue and follow up, with the email service providers needed for that exchange.

Correspondence is kept to handle the request, follow up and meet applicable obligations. We do not state an unverified numerical retention period. Share only what is useful: a screenshot or recovery file may reveal personal notes.

Your choices and requests

To delete the notebook and its recovery copies within the app, choose Andorra → Settings → Erase notebook and confirm. Manage exported files and backups separately. BestOf cannot remotely erase a backup you control through another service.

Email paul@21million.ad to ask about data relating to you, request access, correction or deletion, or raise a privacy concern. Identify the exchange or issue concerned without sending unnecessary sensitive information. We will consider your request and any applicable limits or obligations.

We do not have access to the text of notes you have not shared with us. An email request therefore cannot recover a lost local notebook.

These pages and future changes

These information pages include no tracking scripts, remote images or remote fonts. Visiting them still sends a request to the host with the network metadata described above.

We update this information when the app or its services change. The date at the top identifies this edition of the text; it is not a verification date for every listing in the catalogue.