Bilargo Prep — Privacy Policy

Effective date: 2026-07-06

This Privacy Policy explains how Bilargo — Michał Lipski, a sole proprietorship (jednoosobowa działalność gospodarcza) registered in Poland, with registered address at Aleja Partyzantów 51A, 24-100 Puławy, Poland, NIP 7161515351, REGON 061686949 ("Bilargo", "we", "us" or "our"), handles information when you use the Bilargo Prep iOS application (the "App") and related support materials.

Bilargo is a trade name of the sole proprietorship operated by the natural person Michał Lipski. For the purposes of the EU General Data Protection Regulation ("GDPR"), Bilargo / Michał Lipski is the data controller for personal data we process.

1. Summary

Bilargo Prep is designed to work locally on your iPhone.

As currently offered:

• packing lists, prep tasks, shopping items, reminders, photos, and settings are stored locally on your device; we do not send them to our servers — we operate no servers for the App;
• we do not require user accounts and the App contains no analytics SDKs, advertising SDKs, or third-party trackers;
• the optional Family Mode shares a trip through your own iCloud account using Apple's CloudKit sharing; the shared data flows between the Apple Accounts of the people you invite, via Apple's infrastructure — never through us;
• reminders are local notifications scheduled on your device;
• purchases (Pro Lifetime one-time purchase; optional Pro Yearly auto-renewing subscription with a 7-day free trial) are handled by Apple's In-App Purchase system;
• standard Apple / App Store flows (purchase, restore, updates, iCloud) and voluntary support communications may involve network activity outside our control.

2. Information processed locally

The App may process and store locally on your iPhone:

• trip names, packing lists, items, categories, and quantities;
• prep tasks (for example: buy, wash, iron, charge) and shopping-list entries;
• departure dates and reminder settings;
• photos you take in the App or pick from your photo library, stored in the App's own storage area;
• local settings and preferences;
• purchase entitlement state (whether Pro is unlocked).

This local information remains on your device unless you choose to share it via Family Mode, copy, export, back up, or otherwise move it outside the App.

If you use iCloud Backup or device backups, the App's local data (including photos stored in the App) is included in your own backup like any other app data. Those backups are made under your Apple Account and governed by Apple's terms; we have no access to them.

3. Camera, photo library, and notifications

• Camera — used only to take photos that are saved inside the App's storage area, and, if you unlock the Pro list-scanning feature, to read a paper list. Text recognition for scanned lists runs on your device; images and recognized text are not sent to us or to any third party.
• Photo library — accessed only when you choose to attach an existing photo to an item.
• Notifications — reminders are local notifications computed on your device from the departure date and offsets you set. No push-notification server is involved.

Each of these requires your explicit system permission and can be revoked at any time in iOS Settings.

4. Family Mode and iCloud (CloudKit)

Family Mode is optional and off by default. When you create or join a shared trip:

• the shared trip data (shared list items, assignments, shared notes, "last edited by" metadata, and packing progress) is stored in a shared CloudKit zone in your iCloud account and synchronized by Apple to the participants you invite;
• invitations travel as standard iCloud sharing links; participants join with their own Apple Accounts;
• items on your personal ("Mine") list are not uploaded unless you explicitly move them to the shared list;
• we do not operate any server and have no access to your shared data; the processing is performed by Apple as part of your iCloud service, under Apple's terms and privacy policy (https://www.apple.com/legal/privacy/);
• leaving a shared trip or stopping sharing removes your participation per CloudKit's standard behavior; the zone owner can stop sharing at any time.

If you never enable Family Mode, the App makes no CloudKit connections for your lists.

5. Purchase information

If you purchase or restore Pro (Lifetime or Yearly), Apple processes the transaction. We do not receive your payment card details. The App processes limited entitlement information from Apple on your device, such as whether a Pro purchase is active on the Apple Account in use. Apple's processing is governed by Apple's own terms and privacy policy.

6. Support communications

If you contact us for support or privacy requests, we may process the information you provide, such as your name or email address, the content of your message, device/app details you choose to include, and attachments you voluntarily send.

Please do not send sensitive personal data unless it is necessary for your request.

7. Data we do not intentionally collect

As of the effective date of this Policy, we do not collect your packing lists, photos, reminders, or any usage analytics on our own servers — we operate no servers for the App. We do not sell personal information and we do not use the App for advertising or tracking.

8. Purposes and legal bases for processing

Where GDPR applies, we rely on the following legal bases:

Purpose	Data involved	Legal basis
Providing local packing lists, prep tasks, reminders, photos and App functionality	Information processed locally on your iPhone	Performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in operating the App (Art. 6(1)(f) GDPR)
Family Mode sharing at your request	Shared trip data synchronized via your iCloud account	Performance of a contract / steps requested by you (Art. 6(1)(b) GDPR)
Managing Free/Pro entitlements	Local entitlement state and Apple purchase information	Performance of a contract (Art. 6(1)(b) GDPR); legitimate interest in preventing abuse (Art. 6(1)(f) GDPR)
Handling support and privacy requests	Contact details and message contents you provide	Performance of a contract (Art. 6(1)(b) GDPR), legal obligation (Art. 6(1)(c) GDPR), and legitimate interest in customer support (Art. 6(1)(f) GDPR)
Compliance, legal claims and App Store obligations	Records necessary to comply with law or defend claims	Legal obligation (Art. 6(1)(c) GDPR) and legitimate interest (Art. 6(1)(f) GDPR)

9. Data sharing

We do not sell your personal data.

Relevant third parties may include:

• Apple, for App Store distribution, billing, purchase restoration, iCloud/CloudKit synchronization in Family Mode, and system backups you control;
• the people you invite to a shared trip, who can see the shared list contents you and other participants put there;
• email or support providers, if you contact us by email or through a support channel;
• professional advisers or public authorities, where required by law or necessary to protect legal rights.

10. International data transfers

Some third parties involved in App distribution or support may be located outside the European Economic Area, including in the United States. Apple's iCloud/CloudKit infrastructure may store and process data in various locations under Apple's transfer mechanisms.

Where transfers we are responsible for occur, they are made using an applicable transfer mechanism, such as an adequacy decision (including the EU-U.S. Data Privacy Framework where the recipient is certified) or Standard Contractual Clauses approved by the European Commission.

11. Local storage and retention

Because the App is local-first:

• lists, photos, reminders and settings remain on your device until you delete them or remove the App's local data;
• shared-trip data remains in the CloudKit share until sharing is stopped or the trip is deleted, per Apple's iCloud behavior;
• support messages are retained only as long as necessary to handle your request and maintain reasonable business/legal records.

If you uninstall the App or remove local data, some or all local information may be deleted, subject to iOS behavior and any iCloud/device backups you control.

12. Export and other apps

If you export, share, or otherwise move content out of the App (including the optional one-time import of legacy trip data from the separate Bilargo Exit app, which happens entirely on your device via a shared App Group), that information may then be handled by other apps, backups or destinations outside our control.

13. Security

We use a local-first architecture to reduce unnecessary data transfer, but no software environment can be guaranteed to be perfectly secure. You are responsible for securing your iPhone, your Apple Account, and any backups or third-party storage you choose to use.

14. Your choices

You may be able to:

• delete trips, items, photos, and reminders in the App;
• stop sharing or leave a shared trip;
• change or revoke camera, photo-library, and notification permissions in iOS Settings;
• remove the App and its local data;
• manage or cancel the Pro Yearly subscription in your App Store settings;
• restore purchases through Apple;
• contact us about privacy questions at privacy@bilargo.com.

15. Your GDPR rights

If you are in the EU/EEA or GDPR otherwise applies, you have the right to:

• access personal data we hold about you (Art. 15 GDPR);
• rectify inaccurate personal data (Art. 16 GDPR);
• erase personal data ("right to be forgotten") (Art. 17 GDPR);
• restrict processing (Art. 18 GDPR);
• data portability (Art. 20 GDPR);
• object to processing based on legitimate interests (Art. 21 GDPR);
• withdraw consent at any time where processing is based on consent (Art. 7(3) GDPR), without affecting processing before withdrawal;
• lodge a complaint with a supervisory authority.

For Poland, the supervisory authority is:

Prezes Urzędu Ochrony Danych Osobowych (PUODO) ul. Stawki 2, 00-193 Warszawa, Poland https://uodo.gov.pl

To exercise your rights, contact us at privacy@bilargo.com. Because App data is stored on your device (and, for Family Mode, in your own iCloud account) and not on our servers, we may not be able to access or delete it for you; you can delete it directly on your device or via your iCloud settings.

16. Children

The App is not directed at children under 13 (or the minimum digital-consent age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us personal data through a support or privacy request, contact us at privacy@bilargo.com.

17. Automated decision-making

We do not use personal data for automated decision-making that produces legal or similarly significant effects within the meaning of Art. 22 GDPR.

18. Changes

We may update this Privacy Policy from time to time. If we do, we will update the effective date above and publish the current version at https://prep.bilargo.com/privacy. Where required by law, we will provide appropriate notice.

19. Contact

If you have privacy questions, contact:

• Bilargo — Michał Lipski
• Aleja Partyzantów 51A, 24-100 Puławy, Poland
• NIP: 7161515351
• REGON: 061686949
• privacy@bilargo.com
• support@bilargo.com
• https://prep.bilargo.com