Privacy

Cabins & Potlucks is a free app for planning a trip with friends. We keep as little as we can: no accounts, no email addresses, no passwords, no ads and no tracking.

What we store

• What you and your group type into a trip: its name, dates, place, address, check-in times, Wi-Fi details, door code, house rules, budget and links (like a booking confirmation).
• The names people join with, which days they're there, and food preferences if someone adds them.
• Activities, meals, who's bringing what, costs, who paid whom, carpools, packing lists, polls and votes.
• A list of recent changes in each trip (for example “Sam added Firewood”), with who made them. Everyone in the trip sees it as “Since you last looked”, and notifications are made from it. We delete each change after 30 days.
• A random ID for each phone or browser, so the app knows which trips you're in. It isn't linked to your name, email or phone number.
• If you turn on notifications for a trip: the notification address your browser gives us for that phone, and which kinds of notification you want.

Food preferences are for what people like to eat, like “vegetarian” or “no mushrooms”. Please don't put health details (allergies, conditions, medicines) anywhere in a trip: the app isn't made to keep health information, and everyone in the trip can see what you type. Tell the cook about an allergy yourself.

Notifications

Notifications are off until you turn them on, one trip and one phone at a time. They show names and amounts (for example “Sam put you down for Chili” or “Sam paid you $20.00”), so they can be read on your lock screen. Turn them off on the People page, or in your phone's settings, at any time. Leaving a trip turns them off on that phone.

Who can see it

Everyone who joins a trip can see and change everything in it, except things you put on your own packing list and what you tick as packed: only you see those. Anyone with the trip link can see the trip's name, dates, place and the names of the people in it before joining, so share the link only with your group. An admin can make a new link at any time; the old one then stops working.

On your device

Your browser keeps your sign-in and a copy of the trips you've opened, so they still open with no signal. These are needed for the app to work. We don't use cookies or storage for tracking, advertising or analytics.

Services we use

• Supabase stores the trips and handles sign-in. Data is stored in the Americas.
• Vercel hosts the app. Like any web host, it briefly logs requests (including IP addresses) to keep the service running and secure.
• Cloudflare Turnstile checks that a person, not a script, is starting the app the first time on a phone. It looks at your IP address and technical details of your browser for that check only, sets no tracking cookies, and doesn't use them for ads. It never sees what's in your trips.
• If you turn on notifications, your browser's push service delivers them: Google (Chrome and Android), Apple (Safari and iPhone), Mozilla (Firefox) or Microsoft (Edge). Each notification is encrypted for your phone before it leaves us, so the push service can't read it.

If you tap a trip's address, it opens in Google Maps, which then sees that address. Links people add to a trip (like a booking) open on that site. Nothing is sent to them unless you tap.

We don't sell or share your information with anyone else, and we don't use it, or let anyone use it, to track you across other apps and websites or for advertising.

Keeping and deleting your data

Cabins & Potlucks has no accounts, so there is nothing to sign out of or close. To delete your data in the app:

• Delete a whole trip: an admin opens the trip, goes to People → Leave or delete the trip → Delete trip for everyone. Everything in it (people, plans, items, costs) is deleted for good, straight away.
• Leave a trip: People → Leave or delete the trip → Leave this trip on this phone. It's removed from your phone and its notifications stop there.
• Anyone in the trip can edit or remove what they added. Admins can remove a person who has no costs or payments.
• Records of changes, used for “Since you last looked” and notifications, are deleted after 30 days.

To see, correct or delete anything else, email findmybarber.spj@gmail.com. Tell us the trip name and your name in it. We reply within 30 days. For anything else, see Help and support.

Children

The app isn't meant for children under 13, and we don't knowingly store information about them.

Changes

If this policy changes, we'll update it here and change the date at the top.