Welcome to Airtinary! Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our application (the "Service"), including our group trip-planning tools and our social/community features (profiles, "postcards," trip media, and similar public or shared content).

In this Policy, "Airtinary," "we," "us," and "our" refer to Airtinary and its owners, operators, successors, and assigns, who are the controller responsible for your personal data as described below.

1. Information We Collect

We may collect information about you in a variety of ways. The information we may collect via the Application includes:

• Personal Data: Personally identifiable information, such as your name, username, email address, and profile picture, that you voluntarily give to us when you register with the Application or when you choose to participate in various activities related to the Application.
• Google Account Data: If you choose to log in using Google Authentication, we receive your email address, name, and profile picture from your Google account. We do not have access to your Google password.
• Travel Data: Information you enter into the app to plan your trips, including itineraries, saved locations, notes, and shared expenses.
• Photos, Videos & Other Media: Images and videos you upload to a trip's Media tab, attach to a "postcard" post, or otherwise submit through the Application, along with any caption, location tag, or hashtag you attach to them. This includes content you upload to features we introduce in the future that let you attach media to trips or posts.
• Social & Community Data: If you use social features such as public posts, profiles, followers/following lists, comments, likes, or location tags, we collect and store that information and, depending on your settings, may display it to other users or publicly.
• Usage Data: Information our servers and analytics tools (currently PostHog) automatically collect when you access the Application, such as your IP address, browser type, operating system, device identifiers, access times, and the pages or features you interact with.

2. How We Use Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Application to:

• Create and manage your account.
• Facilitate the creation and sharing of group travel itineraries.
• Store and display photos and videos you upload to a trip or a post, to the audience you choose (your trip group, your followers, or the public, depending on the feature).
• Generate personalized travel recommendations and other AI-assisted features (for example, using Google's Gemini models via Genkit, or sourcing stock travel photography via Pixabay).
• Calculate and track shared expenses within your travel groups.
• Detect, investigate, and prevent content that violates our Community Guidelines and Terms of Service (see Section 4).
• Send you emails regarding your account or activity.
• Respond to product and customer service requests.
• Measure product usage and improve the Application, using aggregated or de-identified analytics where practical.

3. Photos, Videos & Other Media You Upload

Airtinary lets you upload photos and videos to your trips and to public or followers-only posts, and we plan to expand these media features over time (for example, richer trip media galleries, media in more places across the app). The following applies to all such uploads, present and future:

• You are responsible for your uploads. You must own the content you upload or have the right to share it, and it must comply with our Community Guidelines and Terms of Service. Do not upload sexually explicit, pornographic, or other "R-rated"/adult content, or content that is violent, illegal, or infringes someone else's rights.
• Visibility depends on the feature. Media added to a trip's private Media tab is visible only to that trip's members. Media attached to a public postcard/post is visible to your followers and, depending on your account and post settings, may be publicly visible and indexable.
• Storage vs. processing. At this time, we store the media files you upload (via our hosting/storage providers) so that they can be displayed back to you and, where applicable, to other users. We do not currently run automated content analysis, facial recognition, or data-mining on the media itself beyond what is needed for basic content moderation and abuse prevention described below.
• This may change. As we add features (for example, AI-assisted photo organization, search, or trip recaps generated from your media), we may begin processing uploaded media using automated tools, including third-party AI services, to power those features. If we do, we will update this Privacy Policy and, where required by law, seek your consent before doing so.
• Moderation and safety scanning. Regardless of the above, we reserve the right to use automated screening tools and/or human review to detect content that violates our Community Guidelines — including sexually explicit imagery involving minors, non-consensual intimate imagery, and other illegal content — and to remove such content, suspend or terminate accounts, and report unlawful content (including child sexual abuse material) to the National Center for Missing & Exploited Children (NCMEC) or other appropriate authorities as required by law.

4. Social & Public Content

Airtinary includes social features that let you build a public or semi-public profile and share content with other users. If you use these features:

• Your username, profile picture, posts, captions, hashtags, tagged locations, and follower/following lists may be visible to other users of the Application, and — if you post publicly — to anyone on the internet, including through search engines.
• Other users may view, screenshot, or otherwise copy content you post publicly; we cannot control what happens to content once it has been shared publicly.
• You can report posts, comments, or accounts that violate our Community Guidelines, and we may remove content or restrict accounts in response.
• You should not post personal information about yourself or others (such as home addresses or contact details) that you don't want to be public.

5. Disclosure of Your Information

We do not sell your personal information to third parties. We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

• With Your Travel Group: Itineraries, expenses, trip media, and profile information (such as your name and profile picture) will be visible to other users you invite to your travel groups.
• Publicly, if You Choose to Post Publicly: Posts, profiles, and media you choose to share via public social features will be visible to other users and, depending on your settings, the general public.
• By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies (including our content and safety rules), or to protect the rights, property, and safety of others.
• Third-Party Service Providers: We share information with third parties that perform services on our behalf, including: Google Firebase (authentication and file storage), Google Genkit/Gemini (AI-assisted features), Google Maps (location autocomplete and mapping), Pixabay (stock travel photography), PostHog (product analytics), and the backend infrastructure that stores your trip and media data. These providers are only permitted to use your information as needed to provide their service to us.
• Business Transfers: If Airtinary is involved in a reorganization, financing, merger, acquisition, or sale of all or part of its assets, your information may be transferred as part of that transaction, subject to the continuing protections described in Section 11.

6. Data Retention & Deletion

We retain your personal data, including uploaded photos and videos, for as long as your account is active or as needed to provide the Service.

How deletion works. When you delete a photo, a post, or your entire account, the content is removed from view immediately — it stops being visible to you, to your trip group, and to anyone else. The underlying file is then moved to restricted archival storage and permanently destroyed 30 days later. During those 30 days the file is not served to anyone; it is retained only so that an accidental deletion can be reversed and so that a report about the content submitted shortly beforehand can still be investigated.

Exception for reported content. If content has been reported to us, or is subject to a legal hold or an open investigation, we retain it beyond the 30-day window until that matter is resolved. This prevents someone from destroying evidence by deleting content immediately after it is reported.

Other exceptions. We may also retain data where we are required to (for example, to comply with a legal obligation, resolve disputes, or enforce our agreements). Content you shared with others — posts other users have saved or screenshotted, or trip media other trip members have downloaded — may persist outside our systems after deletion, and we cannot recall it.

7. Data Security

We use administrative, technical, and physical security measures to help protect your personal information, including access-controlled, signed URLs for stored media so files are not publicly guessable. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

8. Children's Privacy

Airtinary is not directed to children under 13 (or the applicable minimum age in your country), and we do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. Your Data Rights

You have the right to request access to the personal data we hold about you, to request that we correct any inaccuracies, and to request the deletion of your account and associated data (including uploaded media). To exercise these rights, please contact us or use the account deletion features within the app settings.

If you are in the European Economic Area or UK (GDPR): you additionally have the right to data portability, to restrict or object to certain processing, and to lodge a complaint with your local data protection authority. Our legal bases for processing include performance of our contract with you (providing the Service), your consent (for optional features), and our legitimate interests (such as safety, security, and analytics).

If you are a California resident (CCPA/CPRA): you have the right to know what personal information we collect, to request deletion, and to opt out of any "sale" or "sharing" of your personal information. We do not sell personal information. Our use of analytics tools (such as PostHog) may be considered "sharing" under California law; you can opt out at any time using the control below.

9a. Cookies & Your Analytics Choice

Airtinary uses cookies and similar technologies that are strictly necessary to run the Service (for example, keeping you signed in). These are always active because the Service cannot function without them.

We also use optional analytics cookies (PostHog) to understand how the app is used. These are off by default and are only activated if you accept them. We do not load our analytics provider at all until you have given consent. You can change your choice at any time, and turning analytics off is exactly as easy as turning it on:

10. International Data Transfers

Our service providers may process and store data in the United States or other countries. By using the Application, you understand your information may be transferred to, stored, and processed in a country different from your own, which may have different data protection laws.

11. Data Controller & Contact

Airtinary is the controller responsible for the personal data described in this Policy. For any question about this Policy, to exercise the rights described in Section 9, or to request our current registered contact details, you can reach us at privacy@airtinary.com. We will respond within the timeframes required by applicable law.

If the ownership or operation of Airtinary changes — for example through a reorganization, financing, acquisition, or transfer of the Service or its assets — this Policy continues to apply to the personal data covered by it, and any successor or acquirer will be bound by commitments no less protective than those set out here. We will notify you of any such change that materially affects how your personal data is handled.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in order to reflect, for example, new features (such as expanded trip media or social features), changes to our practices, or other operational, legal, or regulatory reasons. We will notify you of material changes by updating the "Last updated" date of this Privacy Policy, and, where required by law, by providing additional notice.

Contact Us

If you have questions or comments about this Privacy Policy, or want to report content or exercise your data rights, please contact us at support@airtinary.com.