A packing list doesn't sound private, but it says when you'll be away, who's going, and what your kids are called. So here are the rules of the place, in plain words.
Every read and write is checked against trip membership in the database itself, not just in the interface. The one deliberate exception: an invite link shows the trip's name, dates and first names, so a friend can see what they're joining before telling us anything. Treat an invite link like a spare key — share it with the people coming, not the group chat of a thousand.
No marketing, no newsletters, no “we miss you”. The people on your trips never see it either — they see the name you give, nothing more.
Only a trip needs a name. Dates can be as vague as “2027”, the location can be “somewhere in the Peaks”, and people can be on a trip as just a first name — an account is only needed when someone wants to tick things off themselves.
There are no advertising or analytics scripts on any page — nothing watching how you use it, nothing following you afterwards. The only information here is what you typed into a list.
Remove an item and it's gone. Delete a trip and its lists, items, claims, meals and notes go with it, immediately — not hidden, not archived, gone. (We ask you to confirm first, for exactly that reason.)
Everything is stored in a Postgres database hosted by Supabase, and nowhere else. We don't sell it, share it or move it — there is no “trusted third parties” paragraph because there aren't any.
Every trip has an Export link on its details page — everything on it, as a file you keep. And your account page has a real “delete my account”, not a support ticket — with one honest limit: if you own a trip other people have already joined, we ask you to hand it off or delete it first, so closing your account can't take their plans down with it.