Privacy policy

Effective 2026-10-31

Caravan holds the travel details you put in it so the people on your trip can see them. That is the whole purpose. There is no advertising in Caravan, no tracking, and nothing here is sold. We keep anonymous usage counts in our own database, never linked to you.

What we collect

Only what the app needs to work.

• Your account. Your email address. If you sign in with Apple or with Google, that sign-in hands us your name as well as your email address, and we store the name as your profile name when you do not already have one set.
• Your profile. Your name, your phone number and your home airport. Your name is shown to the other people on your trips.
• Your trips. The trip name, the destination, the dates, the cover you pick, and who is on the trip with you.
• A cover photo you upload. If you organize a trip and pick your own photo as its cover, the photo is stored with the trip. It is shown on the trip and on its invite page, so anyone holding the trip’s link or the photo’s own address can see it. Its address is random and cannot be listed.
• Your travel. Each flight, drive, train, bus or other way you add: times and time zones, airports and stations, airline and flight number, the confirmation number if you enter one, seats you offer, your plan for getting from the airport, and the meeting point you write.
• Rides. A ride you offer, with its seats, or a ride you ask for. When you ask for a ride from home, the home address you enter is stored with the ask and shown only to the person who drives you.
• Where you are staying. The places you add for a trip, such as a hotel or a house, their names and addresses, and who is staying at each one.
• The trip’s address. If an organizer adds one, the name and street address of the trip’s place, so a ride can say where it is going.
• A screenshot you choose to import. When you pick a booking screenshot, that image is read from your photo library and sent for parsing, then dropped. See who we share it with, below.
• Push registration. If you turn notifications on, we store the push token your phone issues, with the platform and the Caravan version, so an alert can reach that device.
• Notification records. Your notification preferences, and a record of what was sent to you so that an alert is not sent twice.
• Crash reports. If the app crashes, a crash report with the device model, iOS version, app version and the technical details of the failure is sent to Sentry so we can fix it. A report is also sent when the app hits a problem it recovers from, such as a screen that shows a Try again banner because it could not load, and a session is recorded each time you bring the app to the front so we can count how many sessions end without a crash. Each report can carry a short trail from just before it, including the network requests the app made. Email addresses, phone numbers and your name are removed from that trail. The report carries an account id, and not your name, email or phone.
• Anonymous usage counts. We keep anonymous usage counts in our own database, never linked to you, so we can see where people get stuck, such as how many invite links are opened and how many end in a join. Each count is a short event name, like “trip joined” or “flight added”, with a few fixed values: a yes or no, a number, a number of seconds, or a word from a list we wrote, such as “flight”. It never holds your name, email, phone, trips, travel, places or anything you typed. It carries the Caravan version, a random number the app makes up when it is first installed and another for each launch. Neither is your account, and nothing on our side connects them to you; deleting the app forgets them. The invite web page keeps the same kind of count, with a random number stored in your browser, and says only whether you are on an iPhone, Android, a computer or something else. These counts stay with Supabase, our database host, and go to nobody else.

What we do not collect

• No analytics service and no profile of you. Caravan sends nothing about how you use it to an analytics or advertising company. The anonymous usage counts above go only to our own database, and nothing in them says who you are. Crash reports leave the app by themselves when it crashes, when something in it fails, or as the session record that counts crash-free sessions. The Detour record described below leaves when the app starts.
• No advertising identifier, no tracking across apps or sites, and no ads.
• No device location. Caravan never asks for location permission. An airport or a place in the app is one you chose from a list, not one we measured.
• No camera. Caravan reads a photo you pick and never opens the camera.
• No contacts, no calendar, no microphone.

Why we collect it

To run the app, and for nothing else: to sign you in, to show your travel to the people on your trips, to keep flight times current, and to send the alerts you asked for. We do not profile you, and we do not use your travel to advertise to you.

Who we share it with

Your travel details, your rides and where you are staying are visible to the other members of the trips you join, except a home address you give for a ride, which only your driver sees. That is the point of the app, and it is the only person to person sharing Caravan does, with one exception the organizer controls: a view-only summary link to the trip’s travel board. Anyone holding that link can see the trip’s name and dates, the members’ names, and their arrivals and departures, without the app. It does not show confirmation numbers or addresses, and the organizer can turn it off at any time. Beyond that, these are the companies that process data on Caravan’s behalf.

• Supabase hosts Caravan’s database, its sign-in and its server functions. Everything listed above is stored there.
• Anthropic reads a booking screenshot you choose to import. The image goes to Anthropic’s API together with your trip’s destination and dates, so that what it reads can be checked against them, and the travel details come back for you to review before anything is saved. Caravan does not store the image.
• Apple delivers push notifications to your iPhone, and handles Sign in with Apple if you use it.
• Expo operates the push service Caravan sends alerts through on their way to Apple.
• Google handles Sign in with Google if you use it.
• Sentry receives the crash reports described above, so a crash that happens to you can be fixed for everyone. It keeps them for up to 90 days.
• Resend delivers the email about your account: confirming your address, resetting your password, changing your email, and a notice when an account detail changes. It receives the address the message is sent to and the message itself, which can include a one-time link or a code.
• Detour matches an invite link that was opened before Caravan was installed. The first time you open the app on an iPhone, it reads the clipboard once and sends that text, with the phone’s model and maker, the system version, the screen size, the language, the time zone, a user agent and the time, so it can match the link. When the app starts, it also sends a record that it opened, with a device identifier Detour creates.
• AviationStack supplies flight status. Caravan sends it a flight number. It is not told who you are.
• OpenRouteService estimates drive times. Caravan sends it two points on a map. It is not told who you are.
• Google Fonts serves the Inter typeface on the home, invite, privacy, terms and support pages. Your browser requests the font files from Google.

We do not sell your data and we do not share it for advertising. We will hand data over if the law requires it.

Where it is held

Caravan’s database and server functions are hosted by Supabase. Your data may be processed in the United States and in the other countries where the companies named above operate.

How long we keep it

Your account and what is attached to it is kept while the account exists. A screenshot you import is not kept at all: it is read, parsed and dropped. When you delete your account, your profile, your travel plans and your notification records go with it, and each trip you organize either passes to another member or is deleted. A cover photo you uploaded can stay in storage after its trip is deleted, under its random address, until we clear it out; write to us and we will remove it sooner. Anonymous usage counts are deleted after 180 days. They are not tied to your account, so they are not part of it and deleting it does not find them. Anything the law requires us to keep, such as a record that an account was deleted, may outlive the account.

Your choices

• Delete your account. Profile, then Settings, then Delete account. It is permanent, it happens immediately, and it removes your sign-in along with your data. A trip you organize is handed to the member who joined first, or deleted if there is nobody else on it.
• Turn notifications off. Profile, then Settings, then Notifications, where each kind of alert has its own switch. You can also turn Caravan off entirely in the iOS Settings app.
• Turn off a summary link. If you organize a trip, use Turn off summary link where you shared the view-only summary. It stops working at once.
• Correct your details. Profile, then Personal info, for your name, your phone and your home airport.
• Ask us. Write to support@trycaravan.app for a copy of your data, or for help removing something.

Children

Caravan is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has an account, write to us and we will remove it.

Changes to this policy

If this policy changes in a way that matters, we will change the effective date at the top of this page, and for a meaningful change we will say so in the app.

Contact

Write to support@trycaravan.app.