Privacy Policy

Ghum ("we", "us") · Effective July 19, 2026

The short version: your booking documents are read on your device, not our servers. Your trip data is shared only with the people you invite. Your location is shared only with your trip group, only for active trips, and stops automatically when the trip ends. We show no ads, we sell nothing, and you can delete everything in one tap.

What we collect

Account: when you sign in with Apple, we store your user identifier and the display name you choose. You may optionally add a phone number, Venmo username, home city, and loyalty program numbers.
Trip content: itineraries, group chat messages, photos, expenses, and checklists you and your trip mates create, stored so they sync across your group.
Live location: if you enable Radar, your device location is shared with members of your active trip. Sharing is visible, per-trip, optional, and shuts off automatically at the end of a trip. You can pause it any time.
Diagnostics: anonymized crash reports (Firebase Crashlytics) to keep the app stable.

What we deliberately don't do

Booking imports are processed on your device using Apple's on-device intelligence. Screenshots, PDFs, and pages you import for extraction are not uploaded to our servers for parsing.
No advertising, no ad trackers, no sale or sharing of personal data for marketing.
Loyalty numbers are stored in private storage only your account can read — never visible to trip mates.

Who can see what

Trip content is visible only to the members of that trip. Items you mark personal are visible only to you.
Your phone number and Venmo username (if added) are visible only to members of your trips.
If you share a trip preview link, anyone with that link can see a read-only summary (trip name, destination, dates, non-personal itinerary titles). Deleting the trip deletes its preview.
If you forward a booking email to your trip's import address, its text is stored for your trip group until the import is processed, then deleted.

Services we rely on

Google Firebase (authentication, database, file storage, push notifications, crash reporting) — stores the data above on Google Cloud infrastructure.
Postmark — receives emails you choose to forward to your trip's import address.
Apple Maps — maps, venue lookups, and directions.
Open-Meteo, aviationstack, Pexels, Giphy — weather forecasts, flight status, destination imagery, and GIF search. Requests contain only the minimum needed (coordinates, flight numbers, search terms) and never your identity.

Deleting your data

Settings → Delete Account removes your profile, private data, and memberships, and fully deletes any trips you own (including photos and files). Deleting a trip deletes its content for everyone. For anything else, email us.

Children

Ghum is not directed at children under 13 (or the equivalent minimum age in your region).

Changes & contact

We'll update this page when our practices change and note the new effective date above. Questions or requests: joel@ghum.app.