Shared Journeys is an app for planning and running a trip with the people you are travelling with. It is operated by Locker One Ventures, LLC. This policy explains what we collect, why, who can see it, and how to get it removed.
We hold more sensitive information than most apps, because a trip organizer often needs it: passport details for bookings, allergies for a group dinner, an emergency contact. We have tried to say plainly what that means rather than hide it in a list.
Who holds your information
Locker One Ventures, LLC acts as the controller of your personal information. You can reach us at privacy@sharedjourneys.co.
A trip organizer is separate from us. When an organizer invites you to a trip, they decide what the trip asks you for and they can see what you provide. We provide the software; they run the trip.
What we collect
Your account
- Name, email address and phone number
- A password, stored only as a salted hash that cannot be reversed
- If you use Sign in with Apple or Google, the identifier they give us and the email address they share
Your profile
- Profile and cover photos, and a short bio if you write one
- Home address, date of birth and home time zone
- Display preferences: distance, temperature, time format and translation languages
Travel information, which is sensitive
- Passport number, expiry date and a photo of your passport page, if you add them
- Flight details, including confirmation numbers and any confirmation document you upload
- Dietary restrictions and medical needs, which may reveal information about your health
- An emergency contact: their name, relationship to you and phone number
- Whether a traveler is a minor, where an organizer records that
Payment handles
If you choose to add them, we store your Venmo, PayPal, Zelle or Apple Cash handle so other travelers can settle up with you. These are handles, not payment credentials. We never see or store card numbers, bank details or balances, and no money moves through Shared Journeys. Settling up happens directly between you and the other person in their own payment app.
Trip content
What you and others put into a trip: itinerary days and activities, accommodation and transport details, documents, packing lists, photos and their comments, group and direct messages, announcements, waiver signatures, expenses and how they split, notes and game scores.
Technical information
- A session cookie that keeps you signed in, and a cookie remembering which trip you last opened
- If you turn on notifications, a device token so we can send them
- Ordinary server logs, including IP address and the time of a request, kept for security and debugging
We do not use advertising trackers, we do not build advertising profiles, and we do not sell personal information.
Who can see what
This is the part worth reading closely.
- Trip organizers can see the profile and travel information of people on their trip, including passport details, dietary restrictions, medical needs and emergency contacts. That is the point of collecting them.
- Other travelers on your trip can see your name, photo and the parts of your profile you choose to share. They cannot see your passport details, your medical needs or your emergency contact.
- Anyone with a share link an organizer creates can see that trip's itinerary. It does not include traveler profiles or any of the sensitive fields.
- We can access data where we need to in order to run the service, investigate a problem you report, or comply with the law.
Services we use
We use other companies to run parts of the service. They receive only what they need to do their job, and they are not permitted to use it for anything else.
- Railway and Neon, hosting and the database
- Cloudflare R2, storage for photos, documents and passport images
- Amazon SES, sending email such as invitations and reminders
- Twilio, sending text messages where you have given us a number
- Apple and Google, Sign in with Apple, Google sign in, and delivery of push notifications
- Google Maps Platform, maps, place search and place photos
- Open-Meteo, weather for a trip location. It receives coordinates, not who you are
- FlightAware, flight status. It receives a flight number, not who is on it
- Frankfurter, currency conversion rates. It receives no personal information
- Anthropic and OpenAI, reading booking confirmations and receipts you upload so the details fill themselves in, and generating trip artwork. Content sent for this purpose is not used to train their models.
Where your information is held
Our servers and storage are in the United States. If you are using the app from elsewhere, including the European Economic Area or the United Kingdom, your information is transferred to and processed in the United States. Where that transfer requires a safeguard, we rely on the European Commission's standard contractual clauses with our providers.
How long we keep it
- Your account and profile are kept while your account exists
- Trip content is kept while the trip exists, so travelers keep their record of it
- Server logs are kept for up to 90 days
- When you delete your account, see below
Deleting your account
You can delete your account from inside the app: open More, then Profile, and choose Delete my account at the bottom. It is immediate and it is not reversible.
Deleting removes your profile, your passport and flight details, photos you uploaded, your messages, and your place on every trip. If you organize a trip, you will be asked to hand it over or delete it first, so that a group does not lose an itinerary they are travelling on. You can also write to privacy@sharedjourneys.co and we will do it for you.
Your rights
Depending on where you live, you may have the right to ask for a copy of your information, to correct it, to delete it, to limit how we use it, or to object to a use. You can exercise most of these in the app directly, and for anything else write to privacy@sharedjourneys.co. We will respond within 30 days.
We do not sell personal information and we do not share it for cross context behavioural advertising, as those terms are used in California law. If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority.
Children
Shared Journeys is not directed to children under 13 and we do not knowingly let under 13s create their own account. An organizer, who is usually a parent, may add a child to a trip as a traveler. If you believe a child has created an account, write to privacy@sharedjourneys.co and we will remove it.
Security
Traffic is encrypted in transit with HTTPS. Passwords are stored as salted hashes. Files such as passport photos are kept in private storage and reached only through short lived links issued to someone entitled to see them. No system is perfectly secure, and we will tell affected people without undue delay if a breach puts their information at risk.
Changes
If we change this policy we will update the date at the top, and for a significant change we will tell you in the app or by email before it takes effect.
Contact
Locker One Ventures, LLC
privacy@sharedjourneys.co