Your visits stay yours.

Last updated: 4 May 2026

What we collect

We collect only what you type or tap into the app. That includes:

• Visit details — museum, date, exhibition, rating, your written reflection, the favourite piece you saw, and the names of companions you tag.
• Photos — any pictures you take or select while logging a visit.
• App preferences — your chosen Logbook colour and Logbook font.

We do not collect your name, email, phone number, location history, address book, browsing history, IP address, advertising ID, or any kind of behavioural analytics. There is no account to create. There is no log-in.

Where your data lives

Three places, depending on what it is:

• Visit metadata (museum, date, rating, reflection, etc.) is stored locally on your device using Apple's SwiftData framework, then automatically synchronised to your private CloudKit database. CloudKit private databases are encrypted in transit and at rest by Apple. Anthropic and Museum Log cannot read them.
• Photos are stored as downscaled JPEGs in Museum Log's app sandbox on your device. When you take a photo inside Museum Log, we also save a copy to your Photos library so iCloud Photos can back it up — that's covered by Apple's iCloud Photos terms, not ours.
• App preferences (Logbook colour, font, etc.) live in your device's UserDefaults and stay on the device.

Permissions we ask for

iOS will prompt you the first time Museum Log needs each of these. You can revoke any of them at any time in Settings → Museum Log.

• Camera — to capture a photo while you're logging a visit.
• Photos library (read & write) — to attach existing photos to a visit, to save captured photos so iCloud Photos backs them up, and to re-attach photos on a new device using their cross-device identifier.
• Contacts (optional) — only if you choose to pick a companion from your address book. We store the contact's display name and an Apple-provided identifier; we never read or transmit anything else.

If you decline any of these, the rest of Museum Log still works — we just degrade gracefully (no photo, free-text companions, etc.).

Third parties we use

Museum Log is deliberately small. The only third-party services involved are:

• Apple iCloud / CloudKit — for the private sync between your devices. Governed by Apple's iCloud terms.
• Google Places — when you search for a museum we don't have in our preset atlas. Only the search query is sent; no personal data. Governed by Google's privacy policy.
• Apple's App Store — handles app distribution and any future paid features. We never see your card number.

We do not use Facebook SDK, Google Analytics, Mixpanel, Amplitude, Segment, Sentry, Crashlytics, or any other analytics, attribution, or advertising service.

Children

Museum Log is not directed at children under 13 (or the equivalent age in your country). We do not knowingly collect data from anyone under that age. If you're a parent and believe a child has used the app, contact us and we'll help you delete any local data.

Your rights

Because we don't store your data on our servers, "data subject" rights under GDPR, the UK GDPR, and the CCPA are largely already in your hands:

• Access — your visit history is fully visible inside the app at all times.
• Portability — every visit can be exported as text or shared as a card from inside the app.
• Deletion — delete a visit from the visit detail page, or delete the app to remove everything locally. To remove the iCloud copy too, go to Settings → [your name] → iCloud → Manage Account Storage → Museum Log → Delete Data.

If you'd like a written confirmation of any of the above, email hello@museumlog.app and we'll respond within 30 days.

Changes to this policy

If we change anything that affects your data, we'll update the "Last updated" date at the top of this page. Material changes — anything that broadens what we collect or how we use it — will also surface as an in-app notice the next time you open Museum Log. We will never silently expand our data collection.

Contact

Questions about this policy, or want a copy of any data we hold? hello@museumlog.app.