Privacy policy

What we collect

• What you type: trip prompts, chat messages, group names and home cities, dates, budgets, notes, and answers to capy's questions. Please don't include sensitive details (like health information) you don't want stored.
• Your plans: the trips capy makes and the changes you make to them.
• Account: a random account id kept in a cookie, and your email address if you sign in.
• Usage: when a shared link is opened and which group the viewer picked, which booking buttons are clicked (the option and partner, not who you are), and errors.
• Feedback: what you write in Send feedback, the page it was sent from, your browser type, and a contact if you give one.
• Technical data: your IP address and browser details, which our hosting provider logs, and which we use briefly for rate limits and security.
• Product events: our servers record a few key events (a plan was made, shared, opened, or a booking button clicked) with a random account id, so we can see whether capy works. No cookies are involved.
• Browser analytics (only if you allow them): pages viewed and clicks. If we turn on screen recordings of sessions, they show only the layout and where you tapped: all text (trip and group names included), everything you type and every photo are hidden.

We don't collect payment details, passport numbers or precise location.

How we use it

• To make, check, edit and show your plans, and to let the people you share with see them.
• To sign you in and keep your trips together.
• To keep capy safe and working: preventing abuse, setting limits, fixing bugs.
• To improve capy, from feedback and (if you allow it) analytics.
• To reply when you contact us.

We don't use your data to train AI models, and our AI provider doesn't either under its commercial terms. We don't make decisions about you that have legal or similar effects by automated means.

Who we share it with

We share data only with providers that help us run capy, under contracts that limit what they can do with it, and with people you choose to share a trip with. The kinds of providers we use:

If you'd like the names of the companies we use, ask us (see Contact) and we'll tell you.

When you click a booking button, you go to the partner's site (such as an airline, Stay22 or Viator) with a tracking code that tells them capy sent you. We don't send them your name, email or plan. What happens there is covered by their privacy policy.

We may also share data if the law requires it, to protect people's safety or capy's rights, or as part of a sale or merger of capy (with this policy still applying).

Cookies and storage

• Session cookie (needed): keeps your trips and sign-in. It's secure, can't be read by scripts, and lasts a year from your last visit.
• Browser storage (needed for features you use): which bookings you've ticked, which group you picked on a shared trip, what changed since your last visit, and a cache of photos.
• Analytics (optional): PostHog cookies and storage, only after you allow analytics.

On trip pages, maps load from Google (or Esri in test builds) and photos from Wikipedia. These services receive your IP address to send the map or photo, under their own privacy policies.

Analytics, Do Not Track and Global Privacy Control

Browser analytics are off until you allow them, and you can change your mind here at any time. If your browser sends a Global Privacy Control signal, we treat it as a “no” and don't start analytics. Browsers' older “Do Not Track” setting has no common standard; we don't track you across other websites either way, and we don't let others do so on capy.

How long we keep it

• Trips and chat: until you delete the trip or your account. Without signing in, a browser's trips are deleted a year after its last visit to capy: by then its cookie has expired and nobody can manage them. A trip with a view link goes too, and the link then shows friends that it was turned off. A trip someone else can still edit through its edit link isn't deleted: it passes to them, with its chat and links.
• Account and email: until you ask us to delete them. A browser that never signed in: a year after its last visit, as above.
• Sign-in links: expire after 15 minutes, and the record (with your email) is deleted a day later.
• IP addresses used for rate limits: 2 days.
• Feedback, click and share-open records: up to 24 months, then deleted or made anonymous.
• Hosting logs: as set by our hosting provider, typically days to weeks.

Your rights

Wherever you live, you can ask us to:

• tell you what we hold about you and send you a copy (including in a machine-readable format);
• correct it;
• delete it, including your account and all your trips;
• stop or limit some uses, such as analytics.

You can do the most common ones yourself: delete a trip from its page, or go to My trips → Your data to download everything as a file or delete your account and all its trips. For anything else, email [contact email] from the address you signed in with (or tell us which trips are yours). We'll reply within 30 days, and won't charge you or treat you differently for asking.

California residents

The California Consumer Privacy Act gives you the rights above (to know, delete and correct) and the right to opt out of the “sale” or “sharing” of personal information. capy doesn't sell or share personal information as those terms are defined, and doesn't use it for cross-context behavioural advertising. In the last 12 months we collected the categories listed under What we collect (identifiers, internet activity, and the content you provide) for the purposes under How we use it. You can use an authorised agent to make a request; we may need to confirm it's really from you.

People in the EU and UK

[Company legal name] is the controller of your data. Our legal bases are: contract (making and sharing your plans, signing you in), legitimate interests (security, abuse limits, understanding booking clicks and share opens, improving capy from feedback), and consent (analytics, which you can withdraw at any time). You also have the rights to object and to data portability, and to complain to your data protection authority.

Where data is stored

capy is run from the United States, and most of our providers store data there. When data moves from the EU, UK or elsewhere to the US, we rely on our providers' data processing terms, including the European Commission's standard contractual clauses or the EU-US Data Privacy Framework where a provider is certified.

Children

capy isn't meant for anyone under 16, and we don't knowingly collect data from children under 13. If you think a child has used capy, contact us and we'll delete their data.

Security

We use encrypted connections, secure cookies, single-use sign-in links, limits on requests and access controls on our systems. No service is perfectly secure; if something happens that affects your data, we'll tell you and the authorities as the law requires. To report a security problem, email [contact email].

Changes

We'll update this policy as capy changes and change the date at the top. For important changes we'll tell you in the app or by email before they apply.

Contact

[Company legal name], [Postal address], California, USA. Email: [contact email].