Privacy Policy

The short version

Your packing data belongs to your household and stays there. We don’t sell data, we don’t run ads, and we don’t send your family’s information to analytics companies. You can export your data, delete a household, or delete your account, any time.

What we collect

• Account data — your email address (and, with Google sign-in, your Google account identifier), used only to sign you in.
• Household data you create — household and profile names, item libraries, packing notes, trips, check-off history, and feedback events (e.g. “this item was never packed”). Profiles often describe family members, including children — see “Children’s information” below.
• Operational records — server logs for security-sensitive actions (sign-ups, invite redemptions, share-link views, exports) and rate-limiting counters. These logs never include profile names, item names, or children’s data.

How it’s used and who can see it

• Your household — every member of your household can see and edit its data; that’s the product.
• Trip guests — someone you invite to a single trip sees that trip’s list and its participants’ names, and nothing else.
• Share links — a read-only snapshot of one trip, visible to anyone holding the link until it expires or you revoke it.
• Community templates — only if you choose to publish: item names, categories, quantities, and tags become public. Packing notes are never included.

Access is enforced in the database itself (row-level security scoped to your household), not just in the app.

Children’s information

Household profiles may include children’s names and items (including medications). This information is visible only within your household and to trip guests you invite, is excluded from our operational logs, and is never used for marketing or shared with third-party analytics. Children don’t hold accounts; adults manage their profiles.

Service providers

• Supabase — hosts our database and authentication.
• Vercel — hosts the application.
• Open-Meteo — when you tap “suggest from weather”, the destination text you typed is sent to their free geocoding service. No account or household information goes with it.

These providers process data on our behalf to run the service — nothing more.

Cookies

We use only the cookies required to keep you signed in. No advertising or tracking cookies.

Your controls

• Export — download your household’s complete data as one JSON file from Settings.
• Household deletion — a household owner can permanently delete a household; this removes that household’s data (profiles, item libraries, trips, and history) immediately and irreversibly. It does not touch your account or any other household you belong to.
• Account deletion — from Settings you can delete your account: every household where you are the only member is erased (its profiles, item libraries, trips, and history), you are removed from any household you share with others (their data remains for them), and anything you published to the community is kept but anonymized. Your login identity is managed by a shared authentication service used by other apps, so it is governed separately; contact us below to have it removed where applicable.
• Community templates — anything you publish to the community is public and remains available to others; deleting a household does not affect it. When you delete your account it is kept but anonymized — your name and account link are removed.
• Revocation — share links, invites, and trip guests can each be revoked at any time.

Changes and contact

If this policy changes meaningfully we’ll post the update here and adjust the date above. Questions or requests: hello@schlept.app.