Passant
Privacy Policy
Last updated: 5 August 2026
Passant is an app that logs the places you visit and lets you share them with people you choose. This policy explains what we collect, why, and what you can do about it. It is written to be read, not to be skimmed past.
Passant is operated by Passant LLC, 245 8th Ave #267, New York, NY 10011-1607, USA ("we", "us"). You can reach us at sp@spiantino.net.
What we collect
Your account. Your name, username, bio, and profile photo — whatever you enter. When you sign in with Apple or Google we receive your email address and name from them. We never see your password.
Your location. This is the core of the app, so it deserves a plain description. With your permission, Passant records where you go in the background, while the app is closed. Your phone tells us when you arrive somewhere and when you leave, and we record occasional location points in between so we can work out where you actually were. We only use this to build your personal visit log.
Your content. The lists you create, comments you write, reactions you leave, places you save, and who you follow.
Technical data. A push notification token so we can notify you, plus crash and error reports that may include your device model and iOS version.
We do not collect your contacts, your photos (beyond a profile picture you choose), your microphone, or your browsing activity in other apps. We do not track you across other companies' apps or websites, and we do not sell your data or run advertising.
Who we share it with
We use a small number of service providers to run the app. They only process your data to provide their service to us:
| Provider | What it receives | Why |
|---|---|---|
| Supabase | Account details, location data, your content | Hosts our database, login, and file storage |
| Google Places | The coordinates of a place you visited | Finds which venues are nearby |
| OpenAI | Those coordinates and the nearby venue names | Works out which venue you were most likely at |
| Mapbox | Map view coordinates | Draws the map |
| OneSignal | Push token, notification text | Delivers notifications |
| Sentry | Crash and error reports | Tells us when the app breaks |
| Apple / Google | Sign-in details | Lets you log in |
Two of these deserve to be spelled out rather than buried in a table. Your visit coordinates are sent to Google and to OpenAI every time the app works out where you were. That is how automatic visit detection works — there is no version of the feature without it. Under OpenAI's API terms, data sent this way is not used to train their models.
Other Passant users see only what you choose to share: your profile, lists you mark public, and comments and reactions you leave. Your visit log is private. Nothing you visit becomes visible to anyone else until you act on it — by adding a place to a public list or reacting to it. If you set your account to private, new followers must be approved by you first.
We will also disclose data if the law genuinely requires it.
Where it's kept and for how long
Your data is stored on Supabase's servers and may be processed outside your country, including in the United States. We keep it for as long as your account exists. When you delete your account, we delete your personal data and content within 30 days, except where we're required to keep something longer by law. Backups are overwritten on a rolling basis.
Your choices
Location. You can turn location access off at any time in iOS Settings → Privacy → Location Services → Passant. The app will stop logging visits; everything else keeps working.
Notifications. Turn them off in iOS Settings.
Your data. You can view and edit your profile in the app, delete individual lists, comments, and reactions, and tell the app to ignore visits at a specific place.
Your rights. If you're in the EU, UK, or a similar jurisdiction, you have the right to access your data, correct it, delete it, get a copy of it, object to how we use it, and complain to your data protection authority. Email us at sp@spiantino.net and we'll action it within 30 days. Our legal basis for processing is your consent (location), and performance of our contract with you (running your account).
Children
Passant is not for people under 16. We don't knowingly collect data from anyone under that age. If you believe a child has an account, email us and we'll remove it.
Changes
If we change this policy in a way that matters, we'll tell you in the app before it takes effect. The date at the top always reflects the current version.