Effective 25 September 2026
Privacy policy
This policy explains how Packnaut, the Android app published by Sumacron, handles your personal data: what we collect, why, who receives it, how long we keep it, and the rights you have.
In short. Your packing lists are stored on your phone. There are no ads and no analytics or tracking tools, and we don't sell your data. To write a list, Packnaut sends your trip details to our server, which uses a weather service and an AI service. If you sign in and have Pro, your lists are backed up so they sync between your phones. You can delete your account and all of its data from inside the app at any time.
1. Who is responsible for your data
Packnaut is developed and published by Sumacron ("we", "us"), the Google Play developer name of an individual developer based in the Philippines. Our full legal name is shown with our developer details on the Google Play listing. We decide how and why your personal data is processed. That makes us the personal information controller under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). If you're in the EU or UK, see also section 14.
- Developer
- Sumacron
- packnaut@gmail.com
- Data protection officer
- Same email, subject "Data protection"
2. What we collect, why, and our legal basis
Your trips, packing lists, templates, name and packing preferences are stored in a database on your own phone, and most of the app works without sending any of it anywhere. The table below lists every case where personal data leaves your phone.
Our legal basis is one of these:
- Contract: the processing is necessary to provide the app you asked for (Data Privacy Act section 12(b)).
- Legitimate interests: keeping the service secure and free from abuse, where this doesn't override your rights (Data Privacy Act section 12(f)).
| What | When and why | Legal basis |
|---|---|---|
| Trip details: destination, dates, trip type, how you like to pack, your always-forget items, and items you've told Packnaut you don't need | Sent each time you create a trip or ask for a list to be rewritten, to write your packing list and get the forecast. Not stored by us afterwards, unless you use sync. | Contract |
| Place searches: the text you type to find a destination | Sent when you search, to find matching places. Not stored. | Contract |
| Account and device identifiers: an anonymous account ID created automatically on first launch, a random installation ID, your app language, and a notification token if you allow notifications | When the app starts and whenever it contacts our server: to keep each person's data separate, to remember a purchase on this phone, to deliver notifications, and to prevent abuse. | Contract; legitimate interests (security) |
| Google sign-in details: email address, name and a link to your Google profile picture | Only if you choose to sign in with Google, to create your account for backup and sync. Signing in is optional. | Contract |
| Synced content: your trips, lists, categories, templates, weather suggestions, name, packing preferences, always-forget items, and what Packnaut has learned from past trips | Only while you're signed in and have Pro, to back up your lists and keep them the same on each of your phones. | Contract |
| Purchase history: which Pro plan you bought, and when it renews, ends or is refunded | When you buy, renew, restore or cancel Pro, to give you Pro and keep it working. Payments are made through Google Play; we never receive card or bank details. | Contract |
| IP address | Each time the app contacts our server, for rate limiting: a daily count of requests so no one can overload the service. Not linked to your account. | Legitimate interests (security) |
| Messages you send us: your email address and what you write | When you contact us, so we can reply and act on your request. | Contract; legitimate interests |
Sensitive information. We don't ask for sensitive information such as health details. Anything you type into a list is stored as you typed it and protected like the rest of your data.
Reminders. Night-before and morning-of reminders are scheduled on your phone and send nothing to us. If you have Pro and allow notifications, our server may send you an alert when the forecast for an upcoming trip changes, using your notification token.
3. What we don't collect
- Your location. Packnaut never asks for location permission; a destination you type is not your location.
- Your contacts, photos, files, messages, calendar, microphone or camera.
- Your advertising ID. The app doesn't use it.
- Analytics or crash reports. There are no analytics or tracking tools in the app.
- Payment card or bank details.
4. How we use it
Only to provide the features described above, keep them secure, handle purchases and answer your messages. We don't use your data for advertising, don't sell or rent it, and don't share it for anyone else's marketing. Packnaut doesn't make automated decisions that have legal or similarly significant effects on you: the AI suggests items for a packing list, and you decide what to keep. Our AI provider processes trip details only to write your list and, under its commercial terms, doesn't use them to train its models.
5. Service providers
We use these services to run Packnaut. They process data only on our behalf.
- Supabase: database, sign-in and server
- Anthropic: AI list suggestions (trip details only, never your name or email)
- OpenWeather: weather and place search
- RevenueCat: Pro purchases
- Google: sign-in, payments and notifications
- Expo: notifications
We may also disclose data when the law requires it.
6. Where your data is processed
Our servers are in Japan, and some providers process data in the United States and the United Kingdom. We stay responsible for your data wherever it's processed.
7. How long we keep it
| Data | How long |
|---|---|
| Everything on your phone | Until you delete it, delete your account, or uninstall the app |
| Trip details sent to write a list | Not kept after your list is made. Forecasts are cached by location and never linked to you. |
| Your account and synced content | Until you delete your account |
| Trips or items you delete one at a time | Gone from your lists right away. A deletion record, which may include the contents, stays until you delete your account so your phones stay in sync. |
| Record of a phone's Pro status | Kept so Pro keeps working. Holds only a random installation ID, nothing about you. |
| Purchase records | As long as needed for billing and refunds |
| Rate-limit counts by IP address | Kept to protect the service from abuse; not linked to your account |
| Emails you send us | Up to 2 years |
| Database backups | Up to 30 days, after which they're overwritten |
8. Security and breaches
- All data between the app and our services is encrypted in transit (HTTPS).
- Our database only lets each account read and change its own data, enforced by the database itself.
- Secret keys stay on our server and are never included in the app.
- Our server functions check every request and limit how often they can be called.
- Access to production systems is limited to the developer.
No system is perfectly secure. If a personal data breach occurs that is likely to put you at risk, we will notify the Philippine National Privacy Commission and affected users within 72 hours of becoming aware of it, as NPC Circular 16-03 requires, and any other authority that the law requires us to notify.
9. Your rights
Under the Philippine Data Privacy Act, you can ask to access, correct, delete or get a copy of your data, object to how it's used, and claim damages. Users in the EU and UK have further rights (section 14).
- In the app: edit your name, preferences and lists, or delete your account in Settings.
- By email: write to packnaut@gmail.com from your account's email address, so we know it's you. It's free, and we reply within 30 days.
- Complaints: you can complain to the National Privacy Commission in the Philippines or the data protection authority where you live.
10. Deleting your account
In the app, go to Settings → Privacy → Delete account (or Erase my data if you never signed in). This permanently deletes your account and everything linked to it, on every phone. You can also ask by email. See how to delete your account for the steps and what's kept. Deleting your account doesn't cancel a subscription; cancel it in Google Play under Payments & subscriptions.
11. Children
Packnaut is for adults aged 18 and over and isn't directed at children.
12. This website
This website uses no cookies, analytics or trackers. Our web server keeps standard access logs (IP address and pages visited) for up to 14 days, for security.
13. Changes to this policy
We may update this policy and will change the effective date above.
14. For users in the EU and UK
Extra information under the GDPR
- Legal bases: contract (to provide the app) and legitimate interests (security). Section 2 shows which applies to each type of data.
- Your rights: you can access, correct, erase or export your data, restrict its use, and object to processing based on legitimate interests. Use them as described in section 9. You can also complain to your local data protection authority.
- Data leaving the EU and UK is protected by safeguards such as Standard Contractual Clauses.