Legal

Privacy Policy

Ventr records where you went and what you saw there. That is unusually personal data, so this page says plainly what is collected, who it reaches, and how to get rid of it.

Effective 2026-08-29

Who we are

Ventr is operated by Ventr Industries, LLC (Colorado, United States). Privacy questions go to privacy@getventr.app.

What we collect

Because you gave it to us

• Your account. Email address, and a display name and username if you set one. If you use Sign in with Apple we receive an identifier from Apple, plus the email and name you choose to share. Passwords are stored only as a hash.
• Your trips. Titles, notes, dates, destinations, and any corrections you make.
• Photos and videos you add to a trip, including the original files.

Because the app records it

• Precise location, continuously, while you are recording a trip and only then. This is the point of the product: the route line is the trip. Recording runs in the background so it survives your phone locking, which is why the app asks for Always access. It stops when you finish the trip.
• Information inside your photos. When a photo has an embedded timestamp or GPS coordinates, we read them to place the photo on your trip.

Because we generate it

• Descriptions of your photos and a written story of your trip, produced by an AI model from your photos, your track, and the facts above.
• Usage events: that a trip was imported, a story published, an export requested. These record what happened, not who you are, and the fields are restricted to an explicit allowlist in our code.

What we do not do

• We do not sell your data, and we do not share it with data brokers.
• We do not track you across other companies' apps or websites.
• There is no advertising in Ventr, and no advertising SDK in the app.
• We do not read your photo library. The app sees only the photos you pick.

What is private, and what is not

Everything you record is private by default. A trip is visible only to you unless you publish it, which is a deliberate act with a confirmation that names what becomes visible.

When you publish a trip, one protection is applied automatically and cannot be turned off: both ends of your route are trimmed until each is at least 750 metres from where it actually began and ended. This keeps a published trip from pointing at your driveway. The published page says the route was obscured rather than hiding the fact.

A published trip can be public, meaning search engines may index it, or unlisted, meaning it is reachable only by a long unguessable link and is marked not to be indexed. You can unpublish at any time.

Who else processes it

We use a small number of services to run Ventr. They process your data on our instructions and for no other purpose.

• Render: hosting for the application and the database (United States).
• Cloudflare R2: storage for your photos, videos, and route files.
• Anthropic: the AI model that describes your photos and writes your trip story. Photos sent for description have their embedded metadata stripped first.
• Mapbox: map rendering inside the app.
• Mux: video hosting and playback, when a trip has video.
• Resend: sends the account emails we have to send you, such as a password reset link. It receives your email address and nothing else.
• Apple: if you use Sign in with Apple.

How long we keep it

Your account and its contents are kept until you delete them. Deleting a single trip removes it from your account and immediately kills any public link to it.

Deleting your account closes it immediately: every session ends and every trip is retracted. Your stored files are then erased within seven days. That gap is deliberate, because it means an accidental deletion or a storage failure does not become permanent in the same instant, and it is the only window in which anything survives.

If you have published stories, deletion asks you what should happen to them. Choosing to delete them takes the public links down with everything else. Choosing to leave them up keeps those pages online and detaches them from you: your account closes, every identifying field on it is erased, and everything you did not publish is deleted. A published story never carried your name to a reader in the first place, so what this removes is the link back to an account and the account itself.

Usage events are kept with the identifying reference removed, so we can still count what happened without it being attached to you.

Deleting your account

In the app: Profile → Delete account. It asks you to type a confirmation, offers the choice above if you have anything published, then does what it says. If you signed in with Apple, we also revoke Ventr's access to your Apple ID at the same time.

If you cannot reach the app, email privacy@getventr.app from your account's address and we will do it for you.

Your rights

You can ask us to show you what we hold about you, correct it, or delete it, and you can ask for a copy of your trips. Write to privacy@getventr.app. We will answer within 30 days. Deletion you can do yourself, immediately, in the app.

Children

Ventr is not directed at children under 13 and we do not knowingly collect their information. If you believe a child has created an account, write to us and we will remove it.

Changes

If this policy changes in a way that affects what we collect or who receives it, we will change the effective date above and tell account holders by email before the change takes effect.