Effective July 29, 2026
Overview
This Privacy Policy explains how Marco (“Marco,” “we,” or “the app”) handles information when you use the Marco iOS app. Marco does not sell your personal information and does not use third-party advertising or cross-app tracking.
Information stored on your device
Marco stores your travel log locally on your iPhone. This may include countries, regions, and cities you mark as visited, approximate coordinates for cities you add, dates associated with those entries, and countries on your wishlist.
This local travel information is used to display your map, statistics, and wishlist. Marco does not require an account for these core features.
Optional social features
Sign in with Apple
If you choose to use the friends scoreboard, Marco asks you to sign in with Apple. The app receives an Apple-provided user identifier and, when Apple provides it, your given name. These values are stored securely in the iOS Keychain to maintain your sign-in state.
CloudKit
When you use the friends scoreboard, Marco stores a travel profile in Apple CloudKit containing your display name, the country codes you have marked as visited, your country count, and the date the profile was updated. City, region, and wishlist details are not included in this profile.
The profile is stored in Marco's public CloudKit database so that other Marco users who discover you through their contacts can compare travel history with you. Marco looks up specific iCloud users resolved through contact discovery; the app does not provide an open directory of all users.
Contacts
With your permission, Marco uses Apple's iCloud contact discovery to identify contacts who also use Marco. Contacts access is optional. Marco does not upload or store your address book in its own database. You can change Contacts permission at any time in iOS Settings.
Third-party services
Marco relies on Apple services, including Sign in with Apple, iCloud, and CloudKit. Apple handles information under its own privacy policy. Marco does not include third-party advertising or analytics SDKs.
Data retention and deletion
Local travel data remains on your device until you delete it in the app or remove the app. Signing out removes the locally stored Sign in with Apple identifier and display name from Marco's Keychain storage. To request deletion of a CloudKit scoreboard profile, contact us using the address below.
Children's privacy
Marco is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Changes to this policy
We may update this policy as Marco changes. The effective date at the top of this page will show when the policy was last revised.
Contact
Questions or data requests can be sent to marco@erictang.co.