Privacy Policy

This Privacy Policy explains what JourneyGrid collects, how we use it, and the choices you have. If you have any questions, email hello@journey-grid.com.

The short version

• We collect only what we need to run the app for you and the people you invite.
• We never sell your data.
• Payments happen on Stripe. We don't store your card number.
• You can delete your account any time and take your data with you.

1. What we collect

Account info: your name, username, email, password (hashed - we never see it in plain text).

Trip content: anything you or your group put into a trip - names, dates, addresses, notes, photos, expense entries, messages.

Preferences: your theme, notification settings, dietary flags, saved pickup address.

Usage: basic technical info (browser type, timestamps, error logs) so we can keep the app running.

2. How we use it

• Run the app for you and your trip members.
• Send transactional emails (invites, RSVPs, big trip updates).
• Send push notifications you've opted into.
• Process payments for paid plans.
• Detect abuse and troubleshoot bugs.

3. Who sees your data

Other trip members: people you invite to a trip can see your name, avatar, what you've claimed inside that trip, and notes you leave inside that trip.

Service providers: we use a small number of vendors to run the app. They only get the minimum data needed:

• Stripe - processes payments. Sees your billing details, not your trip content.
• Resend - delivers transactional email. Sees the email content and recipient address.
• Mapbox - computes carpool routes. Sees coordinates only, not names.
• OpenStreetMap Nominatim - looks up address suggestions. Sees the search text as you type.
• MongoDB Atlas - hosts our database.

We do NOT sell or rent your data to advertisers, data brokers, or anyone else.

4. Cookies and offline storage

We use one cookie for your login session and localStorage / IndexedDB to make the app work offline. No third-party tracking cookies.

5. Your rights

You can:

• See and edit your data from your profile at any time.
• Export your trips (email us and we'll help).
• Delete your account. Trips you host go into a 30-day trash bin and are then permanently removed.
• Turn off any notification category in your profile.
• Request a copy or deletion of your data at any time by emailing us.

6. Kids

JourneyGrid isn't for anyone under 13. If we learn that a child under 13 has an account, we'll delete it.

7. International users

Our servers are in the United States. If you're outside the US, using JourneyGrid means your data gets processed here.

8. Security

We use HTTPS, hashed passwords, secure cookies, and regular audits. No system is perfectly secure, but we take reasonable steps to protect what you trust us with.

9. Changes

If we make a material change to this policy, we'll email you before it takes effect and post a notice in the app.

10. Contact

Data question or request? Email hello@journey-grid.com.