Privacy policy

What we store

When you sign in with Google we keep your email address and your Google account number. The name shown in the app is made from your email address. Google also sends a name and a picture; we do not keep them. When you use GitAway we keep what you put in:

• trips, plans, calendar entries and the notes on them;
• messages in the family thread;
• photos you add, with the time and place they were taken (we keep the picture and the time and place, and take the location out of the copies we show);
• phone numbers you or your family type in, for example your own or a hotel's;
• booking confirmation numbers from trips you import;
• email addresses of people you invite;
• push subscriptions, a code your phone gives us so it can get notifications;
• passkeys (Face ID sign-in). We keep only the public half; your fingerprint or face never leaves your phone; and
• server logs, which can include your email address, for example when a sign-in fails.

Who sees it

Your family sees the trips, plans, notes, messages, photos and phone numbers. Push subscriptions and passkeys are not shown to the family. What each person may change depends on their role.

The person who runs this site can read the stored data to run and fix it, and to delete it when you ask. Railway hosts it. An invite link shows the family's name and a masked email address to anyone who has the link, so share invite links only with the person they are for.

Which outside services get what

• Google sign-in tells us who you are. We send Google nothing about your trips.
• Google Fonts loads the type on every page, so Google sees your IP address.
• Railway hosts the app and everything it stores.
• Nominatim (OpenStreetMap) finds places. It gets place text only, such as a hotel name or a city.
• OSRM (router.project-osrm.org) works out drives. It gets pairs of coordinates, not names.
• OpenStreetMap map tiles (tile.openstreetmap.org) draw the map tab. They see your IP address and the area of the map you look at.
• Apple and Google push services carry the morning plan and notices of family messages and plan changes to your phone. The messages are encrypted, so they cannot read them.

Selling and ads

We do not sell your information. We do not show ads and we do not use anything you add for ads or to build a profile of you.

Cookies

One cookie keeps you signed in, for up to 30 days. We use no tracking or advertising cookies.

Getting your data deleted

Ask and we will delete your account and, if you ask, your family's trips and photos. Messages and photos you added to a family that keeps going stay with that family unless you ask us to remove them. We do this by hand and will tell you when it is done.

Email [email protected] and say which family you are in.