Privacy Policy

Last updated: September 23, 2026

Who We Are

Away Team is published by C65 LLC. This policy covers the Away Team iPhone app and this website. Questions about it go to support@awayteamapp.com.

What We Collect

Your account. You sign in with Google, with Apple, or with an email address and password, through Firebase Authentication (a Google service). We keep your email address, your name, and the user ID Firebase assigns you. If you sign in with Apple and choose Hide My Email, Apple gives us a private relay address instead of your own, and that relay address is the only one we see. We do not read or keep a profile picture from any sign-in provider.

Your trips. The trips you create — their days, places, activities, bookings, checklist items and notes — are content you give us. Every trip belongs to an account and syncs, so every trip is stored on our servers as well as on your iPhone. That is what lets you sign in on another device and find your trips, and what lets the people you invite to a shared trip see it and keep it up to date.

We do not read your contacts. When you invite someone, the app lets you pick an address from your contacts, and only the address you pick is sent to us.

How We Use It

We use your account details to sign you in, to show your name to the people on your trips, and to send the account mail and invitations described below. We use your trips for one thing: keeping them in sync between your devices and the people you have invited.

Where Your Data Lives

• Firebase Authentication (Google) holds your sign-in record: your email address, your name, your user ID, and a hash of your password if you use one.
• Cloudflare R2 holds each trip's contents — its days, activities, bookings, checklist, and notes.
• Cloudflare D1 holds who is on each trip and which role they have, your name and email address, and each trip's invitations.

Sign-In Providers

Signing in uses Google's Firebase Authentication SDK, and Google Sign-In if you choose Google. These SDKs run inside the app and may collect device identifiers, and usage and diagnostic data, for Google's own purposes, under Google's privacy policy. If you choose Apple, Sign in with Apple is handled by Apple under Apple's privacy policy.

Place Search

When you search for a place to add to a trip, the text you type is sent to Apple Maps, which answers the search. Apple receives the search text under Apple's privacy policy.

Weather

Each day of a trip shows the forecast for where you will be. To get it, the app sends Open-Meteo the latitude and longitude of that day's place — never your own position. The app does not ask for location permission and never reads where your device is.

Email

Trip invitations and reports are sent through Resend, our email provider, from notify.awayteamapp.com. Account mail — confirming your email address, resetting your password, and changing your email address — is sent by Firebase Authentication (a Google service), from our address at accounts.awayteamapp.com.

When you invite someone by email, we store the address you invited with the trip's record of that invitation, including after it is accepted or revoked, until the trip is deleted. We store a one-way fingerprint of the invitation code, never the code itself.

Support and Reports

When you email support, we use your message and your address to answer you, and we keep them in our support mailbox for as long as we need to handle what you asked about.

You can report a problem with a shared trip, or with someone on it, from Report a problem in the trip's ⋯ menu or on its Share sheet. You write the report in the app, and our server sends it by email through Resend, from notify.awayteamapp.com:

• By default it goes to the trip's owner, with a copy to Away Team support.
• If you choose Away Team only, it goes to Away Team support alone, and the trip's owner is not told. If you own the trip, or its owner has no email address on file with us, it goes to Away Team support alone.
• The report carries what you write, your display name (or, if you have not set one, “a member of this trip”), your role on the trip, your account ID, and the trip's name and ID. Your email address is not included in the report. Replies go to Away Team support, not to you or the owner.

We keep no copy of what you write on our own servers. It is in the email, in the mailboxes it was sent to — the trip owner's, if you chose them, and our support mailbox, where we hold it for as long as we need to handle the report — and, for a limited time, in the logs of Resend, our email provider. To enforce a limit on how many reports can be sent, our server records that a report was sent — your account ID and the time, nothing else — and deletes that record within three days. If you delete your account first, the record loses your account ID and is deleted on the same schedule.

The Mailing List

If you join the waitlist on our home page, we store the email address you give us with Resend and use it for one thing: telling you about Away Team. We do not sell it, share it, or use it to build a profile of you, and joining the list creates no account.

The form is protected by Cloudflare Turnstile, which checks that a person rather than a script is submitting it. Turnstile receives your IP address for that check; we do not store it.

Every message we send carries an unsubscribe link, and unsubscribing removes your address from the list. You can also ask us to remove it at any time — see delete your account or data.

Deleting Your Account

Delete your account in the app, under Settings → Delete account, or follow the steps at /delete-account. Deletion happens immediately:

• Your sign-in record is deleted.
• Every trip you own that nobody else is on is deleted from our servers.
• A shared trip you own passes to the person who joined it earliest, so the people still on it keep it.
• Your membership of every shared trip is removed.
• The record that you sent a report, if any, loses your account ID. Reports you sent stay in our support mailbox for as long as we need them to handle the report, and in the trip owner's mailbox if you sent them there; we cannot recall a delivered report.
• Invitations sent to you that you have not accepted are removed, if your email address is verified.

Invitations stay with the trip they belong to, including after they are accepted or revoked, until the trip is deleted. So an invitation you sent, or one you accepted, keeps its address on that trip until the trip is deleted, even after your account is gone.

Deleting a trip removes it from our servers immediately, for everyone on it. Trip data on this iPhone is removed when you delete your account in the app or delete the app itself.

What We Don't Do

We do not sell your personal information. We run no analytics or advertising of our own in the app or on this site, we do not track you across other companies' apps or websites, and we do not share your data with data brokers or advertisers. The sign-in SDKs described above are Google's and Apple's, and collect under their own policies.

Contact

Questions about this policy? Email us at support@awayteamapp.com.