Privacy Policy
Last updated: June 15, 2026
AreYouInTown ("we", "us") helps you see when your travel plans overlap with friends' plans. This policy explains what we collect, why, and how you can control it. Questions? Email hello@areyouintown.com.
What we collect
- Account info: your name and email address. If you sign up with a password we store only a one-way hash of it, never the password itself. If you sign in with Google we receive your name and email from Google.
- Travel info you enter: trips (city, region, country, optional dates and notes), your home city, wishlist countries, countries and places you've already been, and who you choose to share each trip with (friends and circles).
- Connections: the friends you add and the circles (groups) you create.
- Google Calendar data (only if you connect it): see the dedicated section below.
- Forwarded booking emails (only if you use that feature): when you forward a booking confirmation to our import address, we read it to detect the trip details.
- Basic usage data: login sessions (a cookie to keep you signed in) and privacy-respecting analytics about page visits.
How we use it
- To create your trips and detect when they overlap with a friend's.
- To notify you and the matching friend about an overlap, on the site and by email.
- To show your trips and travel history to the friends you choose to share them with.
- To keep your account secure and the service running.
We do not sell your data, show you ads, or use your data to train advertising or AI models.
Google Calendar data and Limited Use
Connecting Google Calendar is optional. If you connect it, we request read-only access (the calendar.events.readonly scope) for one purpose: to scan your upcoming calendar events (roughly the next 12 months) and suggest trips you can add to AreYouInTown.
- We read event titles, locations, and dates only to detect a city and travel dates. You review every suggestion before anything is saved.
- We store a Google refresh token so we can run the scan when you ask. We do not keep a copy of your raw calendar.
- You can disconnect at any time from the Trips page; that revokes our access and removes the stored token.
- We never sell Google user data, never use it for advertising, and never use it to train generalized AI models. We do not share it with third parties except as needed to provide this feature (for example, our hosting provider) or where required by law.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Sharing and storage
Your trips are visible only to the friends and circles you choose. We use trusted service providers to run the app, including Vercel (hosting and analytics), Neon (database), and Resend (email). Data is stored on their secure infrastructure.
Keeping and deleting your data
We keep your data while your account is active. You can delete individual trips at any time. To delete your whole account and the data tied to it, email hello@areyouintown.com and we will remove it. Deleting your account removes your trips, matches, connections, and any stored Google token.
Children
AreYouInTown is not directed to children under 13, and we do not knowingly collect their data.
Changes
If we change this policy we will update the date at the top of this page. Significant changes will be communicated in the app or by email.