Privacy Policy

This Privacy Policy explains what personal data Logam collects, why we use it, and the choices and rights available to you.

Effective date: August 31, 2026. Last updated: August 31, 2026.

1. Who is responsible for your personal data

Logam is operated by an individual sole trader based in the United Kingdom. That operator is the data controller responsible for the personal data processed through Logam. Contact david@logamjournal.com for privacy questions or rights requests.

2. Personal data we collect

Account and identity data may include your email address, Clerk user ID, profile metadata, authentication timestamps, session information, and account-security details. Clerk handles password and passkey authentication; Logam does not receive or store raw passwords or private passkey material.

User-entered trip and expense data may include trip names and dates, expense descriptions, amounts, currencies, categories, budgets, notes, payment methods, receipts or related information, and optional companion names.

Technical and analytics data may include IP address, browser and device type, operating system, pages visited, page titles, approximate location, referring pages, timestamps, and interaction events collected through Google Analytics.

3. How we collect data

We collect account data when you register, sign in, or manage your account through Clerk; trip and expense data when you enter or edit it; and technical information automatically when you visit or use Logam. Google Analytics may collect usage telemetry and performance information through its script and cookies or similar technologies, subject to local consent requirements.

4. How we use data and legal bases

We rely on contractual necessity to manage Clerk accounts, authenticate logins, host data, and calculate expense summaries. We rely on legitimate interests to maintain security, prevent unauthorized access, improve app performance, and generate anonymized and aggregated travel insights. We rely on consent for non-essential cookies and analytics tracking where local law requires it. We may also process data to comply with legal obligations.

5. Third-party data

If you enter information about travel companions, you are responsible for having permission or another lawful basis to provide it and for giving any notice required by applicable law. Enter only relevant information and avoid sensitive personal data.

6. Processors and service providers

Clerk, Inc. provides user registration, login authentication, passkeys and passwords, session management, account security, and profile identity services. Google Analytics 4 provides aggregated usage telemetry, page views, interaction events, and app performance insights. Hosting and database infrastructure vendors, which may include Replit-managed infrastructure and its partners, host the application and securely store account, trip, and expense data, backups, logs, and monitoring data.

We may disclose data where necessary to comply with law, protect security, investigate abuse, or support a change in the operation of the service. We do not sell your personal data.

7. International data transfers

Logam and its providers may process data and authentication or analytics telemetry outside your home country, including in the United States. Where required, safeguards may include Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, and recognized data privacy frameworks where a provider participates.

8. Data retention

We retain account, trip, and expense data while your account is active. When you close your account, we delete account-linked data from active systems, subject to reasonable processing time and limited secure backup or legal records. Clerk session data and Google Analytics data are retained according to their applicable retention standards and settings. Anonymized insights may be retained.

9. Data security

We use reasonable industry-standard technical and organizational measures, including secure transmission, access controls, account-security features, monitoring, and practices provided through vendors such as Clerk and our hosting and database providers. No online service is completely secure.

10. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete or erase, restrict, export or port, and object to processing of your personal data. You may also withdraw consent and complain to the UK Information Commissioner’s Office, an EU or EEA supervisory authority, or another applicable regulator. Contact david@logamjournal.com to exercise a right.

11. Cookies and browser storage

Clerk may use essential cookies and browser storage for authentication, sessions, account security, and sign-in flows. Google Analytics may use non-essential cookies or similar technologies for aggregated usage telemetry and performance metrics; where local law requires consent, this tracking is used only after consent. Logam may also use temporary browser storage for interface state or guest drafts.

12. Children’s privacy

Logam is not directed to children under 13. If local law sets a higher age, including 16 in some jurisdictions, that higher age applies. Anyone below the applicable age should use Logam only with a parent or guardian’s approval where required.

13. Changes to this Privacy Policy

We may update this Policy as Logam, our providers, or privacy requirements change. We will update the last updated date and take reasonable steps to bring material changes to your attention. This first version is effective and last updated on August 31, 2026. Questions can be sent to david@logamjournal.com.