Privacy Policy

The short version

Your packing data belongs to your household and stays there. We don’t sell it, and we don’t use it to target advertising. You can export your data, delete a household, or delete your account, any time.

What we collect

• Account data — your email address (and, with Google sign-in, your Google account identifier), used only to sign you in.
• Household data you create — household and profile names, item libraries, packing notes, trips, check-off history, and feedback events (e.g. “this item was never packed”). Profiles often describe family members, including children — see “Children’s information” below.
• Operational records — server logs for security-sensitive actions (sign-ups, invite redemptions, share-link views, exports) and rate-limiting counters. These logs never include profile names, item names, or children’s data.

How it’s used and who can see it

• Your household — every member of your household can see and edit its data; that’s the product.
• Trip guests — someone you invite to a single trip sees that trip’s list and its participants’ names, and nothing else.
• Share links — a read-only snapshot of one trip, visible to anyone holding the link until it expires or you revoke it.
• Community templates — only if you choose to publish: item names, categories, quantities, and tags become public. Packing notes are never included.

Access is enforced in the database itself (row-level security scoped to your household), not just in the app.

Children’s information

Household profiles may include children’s names and items (including medications). This information is visible only within your household and to trip guests you invite, is excluded from our operational logs, is never used to target advertising, and is never shared with advertisers or third-party analytics. Children don’t hold accounts; adults manage their profiles.

Service providers

• Supabase — hosts our database and authentication.
• Vercel — hosts the application.
• Open-Meteo — when you tap “suggest from weather”, the destination text you typed is sent to their free geocoding service. No account or household information goes with it.

These providers process data on our behalf to run the service — nothing more.

Advertising

Schlept doesn’t show ads today. We may introduce advertising — most likely on our public pages — and if we do, we’ll update this policy before it goes live. Any advertising will be placement-based: it won’t be targeted using your household’s profiles, items, trips, or children’s information, and we won’t share that data with advertisers.

Cookies

We use only the cookies required to keep you signed in. We don’t set advertising or tracking cookies today; if advertising ever introduces any, we’ll describe them here first.

Your controls

• Export — download your household’s complete data as one JSON file from Settings.
• Household deletion — a household owner can permanently delete a household; this removes that household’s data (profiles, item libraries, trips, and history) immediately and irreversibly. It does not touch your account or any other household you belong to.
• Account deletion — from Settings you can delete your account: every household where you are the only member is erased (its profiles, item libraries, trips, and history), you are removed from any household you share with others (their data remains for them), and anything you published to the community is kept but anonymized. Your login identity is managed by a shared authentication service used by other apps, so it is governed separately; contact us below to have it removed where applicable.
• Community templates — anything you publish to the community is public while it stays published. You can unpublish or delete it any time from Settings → Community templates; households that already imported it keep their own copy. Deleting a household does not affect what you published. When you delete your account it is kept but anonymized — your name and account link are removed.
• Revocation — share links, invites, and trip guests can each be revoked at any time.

Changes and contact

If this policy changes meaningfully we’ll post the update here and adjust the date above. Questions or requests: contact@schlept.com.