Privacy Policy

1. What we collect

We collect the minimum data needed to operate the service:

• Account information: your email address and an encrypted password hash (or third-party authentication identifier if you sign in via OAuth, when available).
• Trip inputs: destination, dates, party size, traveler profile, and passport country you enter into the brief form. We use these to generate your brief and to fetch the right government advisory and weather data. We retain generated briefs for as long as your account is active.
• Travel programs (optional): credit card programs, airline / alliance / hotel elite status, and trusted traveler memberships you choose to add to your profile. Used only to personalize your brief recommendations. Stored encrypted at rest in our database.
• Payment information: when you upgrade to Pro on the website, payment details are collected and processed by Stripe directly. In the mobile app, subscriptions and single-brief unlocks are bought through Apple or Google and reach us as purchase and subscription status only, through RevenueCat. We never see or store your full card number. We store only a Stripe customer ID and your subscription status.
• Usage data: timestamps of brief generation requests, your client IP for rate limiting (retained no longer than 24 hours), basic error logs for debugging, and, in the mobile app, crash reports and basic diagnostics.
• Community reports, approximate location, and notification token (all optional): described in section 4.

2. How we use your data

• Authenticate you and maintain your session.
• Generate trip briefs personalized to your profile and travel programs.
• Process subscription payments and manage your Pro access.
• Send transactional emails: account confirmation, password reset, subscription receipts.
• Protect the service from abuse via rate limiting and anomaly detection.
• Improve the product by analyzing aggregate, anonymized usage patterns (no individual-identifying analysis).

We do not use your data for advertising. We do not sell your data. We do not share it with third parties except as described below.

3. Third-party services

Groundwork is built on top of several third-party services. Each receives only the data necessary for its function:

• Supabase (database + authentication): stores your account, profile, brief history, and travel programs. Supabase's privacy policy: supabase.com/privacy.
• Vercel (hosting + analytics): serves the website and collects basic, anonymized request metadata. vercel.com/legal/privacy-policy.
• Stripe (payment processing): handles all credit card data, subscription billing, and webhook events. stripe.com/privacy.
• Anthropic (AI brief generation): receives your destination, dates, profile, and travel programs as part of the brief prompt. Anthropic does not retain prompt content for training. anthropic.com/legal/privacy.
• Expo (push notifications): delivers notifications to your device. It receives your device notification token and the text of the notification. expo.dev/privacy.
• RevenueCat (in-app purchases, mobile app): receives your account ID and the status of your Apple or Google purchases so we can unlock Pro and single-brief unlocks in the app. The purchases themselves are processed by Apple or Google. revenuecat.com/privacy.
• Sentry (crash reports, mobile app): receives crash reports and basic diagnostics, such as error details, device model, operating system and app version, and an anonymous installation identifier. We do not send your email address or account ID to Sentry. sentry.io/privacy.
• Open-Meteo (weather): receives the destination coordinates to return weather data. No identifying information is sent.
• Government advisory feeds: US State Department, UK FCDO, Canada Global Affairs, Australia Smartraveller, German Federal Foreign Office, Netherlands Ministry of Foreign Affairs. We fetch their public RSS, JSON, or XML feeds — no user-identifying data is sent.

4. Community reports and location (optional)

Signed-in users can share short reports about conditions nearby (for example a protest, checkpoint, closure, or safety concern) and confirm or deny reports from other users. This is optional.

• Reports and responses: when you file a report, or confirm or deny one, we store the category, your approximate location at that moment (rounded to about 110 meters), the time, and your account ID. Other users see the category, the approximate location, and the time, clearly labeled as a user report. They never see who filed or responded to a report.
• Location sharing (off by default): if you turn on location sharing in the app, we store your last known approximate location (rounded to about 110 meters) so we can send you a notification when someone nearby reports something and asks whether you can confirm it. We collect your location only while the app is open and keep only your most recent position. It is deleted after 24 hours without an update, when you turn sharing off, or when you delete your account.
• Notifications: if you allow push notifications, we store a device notification token and use it to send trip alerts and these nearby-report requests. You can turn notifications off in your device settings.
• User reports are not verified: they come from other Groundwork users and are not verified or endorsed by any government or official source. We label them that way wherever they appear.

Deleting your account deletes your reports, your responses, and any stored location.

5. Cookies and local storage

We use first-party cookies and browser local storage only as needed to keep you signed in and remember your session. We do not use third-party advertising or tracking cookies.

6. Your rights

You have the right to access, correct, export, or delete your personal data at any time. To exercise these rights:

• Access / export: contact us via the support email below and we will provide a copy of all data we hold about you within 30 days.
• Correction: most account information can be edited from your account settings. For other corrections, contact us.
• Deletion: delete your account in the mobile app, or ask us by email, as described under Delete your account below. Note that we retain certain billing records as required by tax law for the minimum statutory period.

If you are in the European Union or United Kingdom, you have additional rights under GDPR / UK GDPR including the right to object to processing and to lodge a complaint with your local data protection authority. California residents have additional rights under the CCPA.

7. Data retention

We retain account and profile data for as long as your account is active. Generated briefs are retained while the account exists so you can access your history. Billing records are retained for the statutory period (typically 7 years). Rate limiting and request logs are retained for 24 hours. Your last known location, if you turn on location sharing, is deleted after 24 hours without an update. Community reports and responses are retained while your account exists.

8. Children

Groundwork is not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, contact us and we will delete it.

9. Security

We use industry-standard encryption in transit (TLS) and at rest (Supabase / Vercel infrastructure). Passwords are hashed using bcrypt-equivalent algorithms. We do not have access to your plain-text password at any time. Despite these measures, no system is 100% secure — please use a strong unique password and notify us immediately if you suspect your account has been compromised.

10. International data transfers

Groundwork is operated from the United States. If you access the service from outside the US, your data will be transferred to and processed in the US. Where required, we rely on Standard Contractual Clauses for international data transfers.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page reflects when it was last changed. Material changes will be communicated via email to registered users at least 30 days before taking effect.

12. Contact

For questions about this policy, data requests, or to exercise your rights:

• Email: support@arrive-prepared.com
• Entity: Groundwork Travel Intelligence LLC, Connecticut, USA