Privacy Policy

• There are no accounts — no email or password. Your device gets a random ID.
• We collect only what a trip needs: your name/phone/photo (if you add them), your trips, and — only if you turn it on — your location.
• Trip data is shared with the people who have your trip’s link. It isn’t sold, and there are no ads or tracking SDKs.
• You can delete your data (see Deleting your data).

You provide

• Profile — the name, phone number, and photo you optionally add so your travel group can recognize and reach you.
• Trip content — destinations, places, dates, itineraries, notes, tasks, suggestions, and expenses you enter.
• Tickets & passes — files or photos you attach are stored on your device only.
• Location — only if you tap “Share my location,” your approximate position is shared with your trip group. It is intermittent and trip-scoped; you can stop it anytime.

Automatically

• Device identifier — a random ID generated on your device to keep your trips and roster entry consistent. Not tied to your real identity.
• Push token — if you enable notifications, a device token so we can send trip alerts.

We do not use third-party advertising or analytics SDKs, and we do not track you across other apps or websites.

• To build and run your trip: curate a plan, show the map, roster, expenses, packing list, phrasebook, and safety info.
• To let your group coordinate — see who’s coming, split costs, and (if enabled) each other’s location.
• To send trip notifications you’ve opted into.

We use a few processors purely to provide features. Only the data needed for each feature is sent:

• Anthropic (Claude) — trip curation, phrase translations, place ideas, and reading a ticket/itinerary photo you choose to scan. Relevant trip text (and, for a scan, that image) is processed to generate results.
• OpenStreetMap / Nominatim and Google Geocoding — to find places you search for (your search text is sent).
• Open-Meteo — weather for the trip location.
• Esri — map tiles.
• open.er-api.com — currency exchange rates (no personal data).
• Apple Push Notification service / Firebase Cloud Messaging — to deliver notifications.
• Apple App Store / Google Play (and RevenueCat) — to process subscription purchases. We never receive your full payment details.

Shared trip data (roster, notes, tasks, suggestions, curated plans, and — if enabled — location) is stored on our server hosted in the EU (Hetzner, Germany). Much of your data — your profile, personal packing items, saved tickets, and expenses — lives on your device. Traffic is encrypted in transit (HTTPS).

A trip is reachable by anyone who has its link (an unguessable address). Share it only with your group. People on the trip can see the shared roster (names, phone numbers, photos), notes, expenses, and, if members enable it, live location.

• On your device — removing a trip from your list, or uninstalling the app, clears the data held locally.
• Shared trip data — the trip owner can wipe a trip (roster, notes, tasks, and suggestions) for everyone.
• You can also email us at codemates@gmail.com to request deletion of data associated with a trip link.

Geoff isn’t directed to children under 13, and we don’t knowingly collect their data.

We’ll update this page and the “last updated” date when this policy changes.

Questions or requests: codemates@gmail.com.