Bilargo Pack — Privacy Policy

Effective date: September 2, 2026

This Privacy Policy explains how Bilargo — Michał Lipski, a sole proprietorship (jednoosobowa działalność gospodarcza) registered in Poland, with registered address at Aleja Partyzantów 51A, 24-100 Puławy, Poland, NIP 7161515351, REGON 061686949 ("Bilargo", "we", "us" or "our"), handles information when you use the Bilargo Pack iOS application (the "App") and related support materials.

Bilargo is a trade name of the sole proprietorship operated by the natural person Michał Lipski. For the purposes of the EU General Data Protection Regulation ("GDPR"), Bilargo / Michał Lipski is the data controller for personal data we process.

1. Summary

Bilargo Pack is designed to work locally on your iPhone.

As currently offered:

  • packing lists, prep tasks, shopping items, reminders, photos, and settings are stored locally on your device; we do not send them to our servers — we operate no servers for the App;
  • we do not require user accounts and the App contains no analytics SDKs, advertising SDKs, or third-party trackers;
  • the optional weather forecast is off until you switch it on for a particular trip; when you do, the coordinates of that trip's destination are sent to Apple's WeatherKit service to obtain a forecast — no part of your packing list is sent, and the request does not pass through us;
  • reminders are local notifications scheduled on your device;
  • purchases (Pro Lifetime one-time purchase; optional Pro Yearly auto-renewing subscription, which begins with a free trial only if your Apple Account is eligible for the introductory offer) are handled by Apple's In-App Purchase system;
  • standard Apple / App Store flows (purchase, restore, updates, iCloud) and voluntary support communications may involve network activity outside our control.

2. Information processed locally

The App may process and store locally on your iPhone:

  • trip names, packing lists, items, categories, and quantities;
  • prep tasks (for example: buy, wash, iron, charge) and shopping-list entries;
  • departure dates and reminder settings;
  • template covers you choose from your library and historical item media retained from earlier versions, stored in the App's own storage area;
  • local settings and preferences;
  • purchase entitlement state (whether Pro is unlocked).

This local information remains on your device unless you copy, export, back up, or otherwise move it outside the App.

If you use iCloud Backup or device backups, the App's local data (including photos stored in the App) is included in your own backup like any other app data. Those backups are made under your Apple Account and governed by Apple's terms; we have no access to them.

3. Camera, photo library, and notifications

  • Camera — used only to read a paper list when you unlock the Pro list-scanning feature. Text recognition for scanned lists runs on your device; images and recognized text are not sent to us or to any third party.
  • Photo picker — Pro imports only the image you explicitly choose as a template cover through the system picker; the App does not need access to your entire photo library.
  • Notifications — reminders are local notifications computed on your device from the departure date and offsets you set. No push-notification server is involved.

Camera and notification access require your system permission, which can be revoked in iOS Settings. Cover import uses the system photo picker and your explicit selection, rather than permission to read the whole library.

4. Optional Apple services: place search and weather

4.1 Weather forecast (Apple WeatherKit)

The weather forecast is optional and off by default. It is enabled per trip: the App asks before the first forecast for that trip and remembers the answer only for that trip. When it is enabled:

  • the latitude and longitude of that trip's destination (and of any additional stops you added to it), together with the date range of the stay, are sent to Apple's WeatherKit service in order to receive a forecast;
  • no packing-list content, item titles, photos, names or identifiers of yours are sent with the request;
  • the forecast received back is stored locally on your device, on that trip, so the App does not have to ask again on every screen; you can switch the forecast off for the trip at any time;
  • Apple's WeatherKit processing is governed by Apple's own terms and privacy policy (https://www.apple.com/legal/privacy/), and Apple states that WeatherKit requests are not used to build a profile of the user. Weather data is provided by Apple Weather and its sources (https://weatherkit.apple.com/legal-attribution.html);
  • more than ten days before departure the App makes no request at all, because a forecast that far ahead isn't reliable.

Because the destination coordinates describe a place you intend to travel to, they can be considered coarse location data. They are not linked to your identity and are not used for tracking or advertising. The App does not request access to your device's location.

If you never enable the forecast, the App makes no WeatherKit connections.

4.2 Place search (Apple Maps)

Typing a destination in the place-search field sends the query to Apple Maps through MapKit. Selecting a suggestion asks Apple Maps to resolve its coordinates. This happens independently of enabling the weather forecast; the forecast permission does not control place search. No device-location permission is requested. If search is unavailable, you can save the typed name without coordinates or a forecast. Apple handles these requests under its own privacy policy.

5. Purchase information

If you purchase or restore Pro (Lifetime or Yearly), Apple processes the transaction. We do not receive your payment card details. The App processes limited entitlement information from Apple on your device, such as whether a Pro purchase is active on the Apple Account in use. Apple's processing is governed by Apple's own terms and privacy policy.

6. Support communications

If you contact us for support or privacy requests, we may process the information you provide, such as your name or email address, the content of your message, device/app details you choose to include, and attachments you voluntarily send.

Please do not send sensitive personal data unless it is necessary for your request.

Launch notifications. If you write asking to be told when the App is released, we keep your email address for that single purpose and delete it within three months of launch. The legal basis is your own request (Art. 6(1)(a) GDPR); reply to us at any time to be taken off the list.

7. Data we do not intentionally collect

As of the effective date of this Policy, we do not collect your packing lists, photos, reminders, or any usage analytics on our own servers — we operate no servers for the App. We do not sell personal information and we do not use the App for advertising or tracking.

8. Purposes and legal bases for processing

Where GDPR applies, we rely on the following legal bases:

Purpose Data involved Legal basis
Providing local packing lists, prep tasks, reminders, photos and App functionality Information processed locally on your iPhone Performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in operating the App (Art. 6(1)(f) GDPR)
Providing the weather forecast for a trip you switch it on for Destination coordinates and the date range of the stay, sent to Apple's WeatherKit Performance of a contract / steps requested by you (Art. 6(1)(b) GDPR)
Managing Free/Pro entitlements Local entitlement state and Apple purchase information Performance of a contract (Art. 6(1)(b) GDPR); legitimate interest in preventing abuse (Art. 6(1)(f) GDPR)
Handling support and privacy requests Contact details and message contents you provide Performance of a contract (Art. 6(1)(b) GDPR), legal obligation (Art. 6(1)(c) GDPR), and legitimate interest in customer support (Art. 6(1)(f) GDPR)
Compliance, legal claims and App Store obligations Records necessary to comply with law or defend claims Legal obligation (Art. 6(1)(c) GDPR) and legitimate interest (Art. 6(1)(f) GDPR)

9. Data sharing

We do not sell your personal data.

Relevant third parties may include:

  • Apple, for App Store distribution, billing, purchase restoration, the WeatherKit forecast service when you switch the forecast on for a trip, and system backups you control;
  • email or support providers, if you contact us by email or through a support channel;
  • professional advisers or public authorities, where required by law or necessary to protect legal rights.

10. International data transfers

Some third parties involved in App distribution or support may be located outside the European Economic Area, including in the United States. Apple's iCloud/CloudKit infrastructure may store and process data in various locations under Apple's transfer mechanisms.

Where transfers we are responsible for occur, they are made using an applicable transfer mechanism, such as an adequacy decision (including the EU-U.S. Data Privacy Framework where the recipient is certified) or Standard Contractual Clauses approved by the European Commission.

11. Local storage and retention

Because the App is local-first:

  • lists, photos, reminders and settings remain on your device until you delete them or remove the App's local data;
  • a forecast received for a trip is cached on that trip on your device and goes away with the trip;
  • support messages are retained only as long as necessary to handle your request and maintain reasonable business/legal records.

If you uninstall the App or remove local data, some or all local information may be deleted, subject to iOS behavior and any iCloud/device backups you control.

12. Export and other apps

If you export, share, or otherwise move content out of the App, that information may then be handled by other apps, backups or destinations outside our control. You choose the recipient or storage location; the App does not automatically upload an exported file to Bilargo.

List import, copying, sharing, and export, as well as full backup export and import, require Pro. Text and TXT exports contain reusable list content without photos or appearance. Bilargo and JSON list files can also contain the list’s background, symbol, effect, and an embedded custom cover. List exports may include names, notes, and destination coordinates, but do not include packing progress or history.

A full .bilargopack backup contains templates, packing lists and history, people, prep tasks, stored media, and the preferences covered by the backup. It does not contain your purchase entitlement, and importing it does not recreate external cloud shares. The import is reviewed and applied locally. You can undo it while the import result screen remains open; this does not reverse changes already sent to a cloud service.

Bilargo Pack and Bilargo Exit do not exchange stored trip data. The departure-day handoff only opens the separate Exit app when it is installed.

13. Security

We use a local-first architecture to reduce unnecessary data transfer, but no software environment can be guaranteed to be perfectly secure. You are responsible for securing your iPhone, your Apple Account, and any backups or third-party storage you choose to use.

14. Your choices

You may be able to:

  • delete trips, items and reminders, including their retained historical media, in the App;
  • switch the weather forecast on or off for any trip;
  • change or revoke camera, photo-library, and notification permissions in iOS Settings;
  • remove the App and its local data;
  • manage or cancel the Pro Yearly subscription in your App Store settings;
  • restore purchases through Apple;
  • contact us about privacy questions at privacy@bilargo.com.

15. Your GDPR rights

If you are in the EU/EEA or GDPR otherwise applies, you have the right to:

  • access personal data we hold about you (Art. 15 GDPR);
  • rectify inaccurate personal data (Art. 16 GDPR);
  • erase personal data ("right to be forgotten") (Art. 17 GDPR);
  • restrict processing (Art. 18 GDPR);
  • data portability (Art. 20 GDPR);
  • object to processing based on legitimate interests (Art. 21 GDPR);
  • withdraw consent at any time where processing is based on consent (Art. 7(3) GDPR), without affecting processing before withdrawal;
  • lodge a complaint with a supervisory authority.

For Poland, the supervisory authority is:

Prezes Urzędu Ochrony Danych Osobowych (PUODO) ul. Stawki 2, 00-193 Warszawa, Poland https://uodo.gov.pl

To exercise your rights, contact us at privacy@bilargo.com. Because App data is stored on your device and not on our servers, we may not be able to access or delete it for you; you can delete it directly on your device or via your iCloud settings.

16. Children

The App is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data through a support or privacy request, contact us at privacy@bilargo.com.

17. Automated decision-making

We do not use personal data for automated decision-making that produces legal or similarly significant effects within the meaning of Art. 22 GDPR.

18. This website

This policy is about the App. The website you are reading it on processes one more thing, and it is worth stating plainly: our hosting provider, Cloudflare, collects standard server logs — IP addresses, request timestamps, and browser user-agent strings — when serving these pages. An IP address is personal data, so here is the full picture. We process it for the security and performance of the site; the legal basis is our legitimate interest, Art. 6(1)(f) GDPR. Cloudflare processes these logs for us, as our processor and on our instructions. On the plan we use, raw request logs are not available to us at all — exporting them is an Enterprise-only feature — and the request-level data we can see, which includes IP addresses, covers the previous seven days and nothing older. We keep no separate copies, and what Cloudflare retains for its own purposes is set out in its own privacy policy. Cloudflare runs a global network: requests are served from its edge servers, while the metadata about those requests is processed in its data centers in the United States and in Europe. Transfers outside the EEA rely on the European Commission's standard contractual clauses in their controller-to-processor module; those clauses form part of Cloudflare's data processing addendum. Cloudflare's Privacy Policy describes its own practices.

This site sets no cookies, runs no analytics, and has no contact forms. Your rights, described above, cover this processing too.

19. Changes

We may update this Privacy Policy from time to time. If we do, we will update the effective date above and publish the current version at https://prep.bilargo.com/privacy. Where required by law, we will provide appropriate notice.

20. Contact

If you have privacy questions, contact:

We keep both language versions — Polish and English — in substantive alignment. For consumers in Poland the Polish version is the binding one.