Privacy Policy

• We collect what is needed to run your group's trip: your account, the trip content your group adds, and — only if you allow it — your location.
• Trip content is visible only to the members of that trip. Your AI conversations and private documents are visible only to you.
• We do not sell personal data, we do not show ads and we do not use your data to profile you for marketing.
• Some data is processed by service providers that run the Service for us (for example Google Firebase, Vercel and OpenAI).
• You can delete your data in the app at any time: leave a trip and delete your data in it, delete a whole trip you organize, or delete your entire account.

Account information. When you sign in with Google or Apple, we receive:

• your name, email address and profile photo (if you have one);
• a unique account identifier from the sign-in provider;
• if you use Sign in with Apple and choose to hide your email, a private relay address instead of your real email.

Trip content. Information you and your group add to a trip, including:

• trip details: name, destinations, dates, accommodation and itinerary;
• participants and families: names, roles, and — when the organizer adds them — ages or age groups of travelers, including children;
• places, schedule events, polls and votes, notes and comments;
• expenses: amounts, currencies, who paid and how costs are split;
• documents and files you upload, such as tickets, booking confirmations and photos. These may contain personal details such as names, booking references or passport numbers that appear on the document;
• forwarded booking confirmations that you ask us to import.

Location (optional). Only if you grant permission on your device:

• Your precise location is used while the app is open to show you on the map and to find places near you. It is processed on your device and is not stored on our servers.
• If you choose to share your live location with the group, your position is stored for the duration you select (for example 1 hour, 4 hours or until the end of the day), is visible to the members of that trip only, and is deleted automatically when sharing ends. You can stop sharing at any time.
• We never collect location in the background when the app is closed.

Technical and usage information:

• basic server logs (such as IP address, device and browser type, time and the page or request) kept by our hosting providers for security and troubleshooting;
• counters of how many AI conversations and imports each trip used in a month, to apply the free-plan limits;
• your language preference.

We use personal data only for the following purposes:

• To provide the Service — creating your account, running the trips you belong to, showing trip content to its members, syncing between devices, sending reminders and trip updates, and operating the AI assistant and booking import. Legal basis: performance of our contract with you (the Terms of Use).
• To keep the Service secure and working — preventing abuse, enforcing usage limits, debugging and protecting our users. Legal basis: our legitimate interests in a safe, reliable service.
• To use your location, send push notifications and process sensitive details you choose to upload — only with your consent, which you can withdraw at any time in your device settings or in the app.
• To comply with the law — responding to lawful requests and keeping records we are required to keep. Legal basis: legal obligation.
• To communicate with you about the Service, for example important changes to these terms. We do not send marketing messages without your consent.

• Everything added to a trip — schedule, places, polls, expenses, the participant list, shared documents and live location you chose to share — is visible to all members of that trip.
• Your conversations with the AI assistant and documents you mark as private are visible only to you.
• The trip organizer and trip admins can invite and remove participants and edit trip details.
• Anyone who has a valid invite link can join the trip. Share invite links only with people you want in your group.

• Google Cloud / Firebase (Google LLC) — database, file storage, authentication and push notifications.
• Vercel Inc. — hosting of the website and app servers.
• OpenAI, L.L.C. — generating AI assistant replies and reading booking confirmations you ask us to import. Content you send to the assistant is shared for this purpose only. Under OpenAI's API terms, this data is not used to train their models and is retained by them for a limited period for abuse monitoring.
• Google Maps Platform (Google LLC) — place search, place details and photos, maps and directions. Searches are sent without your account details.
• Firecrawl — reading public web pages (such as a restaurant's website) when you add or enrich a place from a link. Only the link or place name is sent.
• Apple Inc. and Google LLC — Sign in with Apple and Sign in with Google, and push-notification delivery on their devices.
• Open Exchange Rates (open.er-api.com) — currency exchange rates. No personal data is sent.

• Account and trip data are kept for as long as your account or the trip exists.
• Shared live location is deleted automatically when the sharing period you chose ends.
• Invite links expire automatically; child-device links are valid for 24 hours.
• When you delete data in the app (see section 9), it is removed from our live database and file storage immediately. Copies may remain in our providers' encrypted backups and logs for up to 30 days before they are overwritten.
• We may keep limited information longer when the law requires it or to resolve a dispute.

• Leave a trip and delete your data in it (Trip settings → Leave trip and delete my data): removes you from the trip and permanently deletes your AI conversations, documents and files you uploaded, booking imports, live location, notification devices and poll votes in that trip.
• Delete a trip (trip organizer only — Trip settings → Delete trip permanently): permanently deletes the entire trip for all participants, including its schedule, places, polls, expenses, documents, photos, AI conversations, participant list and invite links.
• Delete your account (My account → Delete account): permanently deletes your profile, sign-in account and all of your data in every trip, as described above. Trips you organize are handed over to another adult participant so the group doesn't lose its plan; a trip with no other participants is deleted entirely.
• Remove a participant (trip organizer or admin): deletes that person's personal data in the trip in the same way.

Depending on where you live — including under the Israeli Privacy Protection Law, 5741-1981, and the EU and UK General Data Protection Regulation (GDPR) — you may have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate data (most of it you can edit directly in the app);
• delete your data (available in the app, see section 9);
• restrict or object to certain processing, including processing based on our legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing that already took place;
• lodge a complaint with a supervisory authority — in Israel, the Privacy Protection Authority; in the EU or UK, your local data-protection authority.