JayFamTrips is a private family trip planning application. This Privacy Policy explains how we collect, use, store, and protect information when you use JayFamTrips and related services. By using JayFamTrips, you agree to the practices described here. JayFamTrips is a closed, invitation-only application. We do not serve advertisements and we do not sell your personal data.
When you create an account we collect your full name, display name, email address, optional profile photo, optional date of birth, and authentication credentials managed through Firebase Authentication (Google, Apple, or email and password).
Profile records (non-authenticated users)Administrators may create profile records for individuals who do not need app access — such as children. These profiles contain only a display name, optional photo, and optional date of birth. They have no login credentials and cannot access the application.
Trip and itinerary contentWe store trip details, activities, meals, flights, expenses, packing lists, polls, ideas, and chat messages that you and other trip members create within the application.
Usage informationWe collect limited technical data necessary to operate the service including IP addresses, browser type, device type, and session timestamps.
Google Calendar integrationIf you connect your Google Calendar, we store an encrypted OAuth refresh token and a mapping of JayFamTrips event IDs to Google Calendar event IDs. We use this solely to sync trip events to your calendar on your behalf.
Apple Calendar integrationIf you use the Apple Calendar subscription feature, we generate a private tokenized .ics feed URL. We do not collect or store any Apple ID credentials.
We use the information we collect exclusively to provide the JayFamTrips service:
We do not use your information for advertising, profiling, or any purpose unrelated to providing the service.
JayFamTrips's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Scope of accessWe request only the calendar.events scope, used to create, update, and delete calendar events corresponding to your JayFamTrips trip activities and meals. We do not read your existing calendar events or access any other Google service.
You may disconnect Google Calendar at any time from Settings, or revoke access at myaccount.google.com/permissions. Upon disconnection your refresh token is deleted from our servers immediately.
We do not sell, rent, or trade your personal information. We share it only in these limited circumstances:
With other trip membersYour display name, profile photo, and trip participation are visible to other authenticated members of trips you belong to. This is the core collaborative function of the app.
With service providersWe use Firebase Authentication and Storage (Google LLC), Neon (database hosting), Vercel (app hosting), and OpenWeatherMap (weather data) to operate the service. Each processes data only as necessary for their function. We do not share your data with advertising networks, data brokers, or analytics companies.
Legal requirementsWe may disclose information if required by law or to protect the safety of any person.
We retain your information while your account is active. Google Calendar tokens are deleted immediately upon disconnection. You may request account deletion at any time by contacting us — your data will be removed within 30 days.
All data is transmitted over HTTPS. Authentication is handled by Firebase — we do not store passwords. Google Calendar tokens are stored encrypted. JayFamTrips is invitation-only, so all access is controlled by administrators.
Administrators may create non-authenticated profile records for children. These profiles have no login credentials and cannot access the application. Parents and guardians who are administrators are responsible for determining whether it is appropriate for a child to have an authenticated account. By creating or approving an account for a child, the parent or guardian consents to the collection of that child's information as described in this policy. Parents may request deletion of a child's profile or account at any time.
You may update your display name and profile photo at any time from Settings. You may disconnect calendar integrations at any time. You may request a copy of your data or deletion of your account by contacting us. We will respond within 30 days.
We may update this policy from time to time. Material changes will be communicated through the in-app notification system and reflected in the "Last Updated" date above.