Last updated 14 October 2026
Privacy Policy
- Caravan helps friends plan a trip together. To do that, we keep your account details, the trips you join and the answers you give.
- Some answers, like your spending limit and daily routine, stay private to you. Caravan uses them for group suggestions without saying whose they are.
- We don’t sell your data, show ads or use tracking cookies.
- You can delete your account in Settings, and email support@trycaravan.io for a copy of your data or any other request.
Who runs Caravan
Caravan, at trycaravan.io, is run by the Caravan team. We decide how your personal data is used, so we are responsible for it.
We are registering a company to run Caravan. When it exists, this policy will name it, and it will take over this responsibility.
Contact us about privacy at support@trycaravan.io.
What we collect
When you create an account
- Your email address and password. Our sign-in provider stores your password only in scrambled (hashed) form.
- Your first name, as it appears on your trips.
- Your confirmation that you’re 18 or older and that the account is for you, with the time you confirmed.
- If you use Sign in with Google: the email address and name your Google account shares with us.
When you plan a trip
- Trip details: where you’re going, dates or number of nights, travel style, budget per person and currency.
- Who’s on the trip: travellers’ names, and the email addresses or join codes used to invite them. Only invite people who are happy to be invited.
- Your private answers: your spending limit; your daily routine, such as when you sleep, when and how long you shower, and whether you snore or sleep lightly; and room preferences, such as who you’d share with, who you’d rather not share with, and how you describe yourself for room matching.
- Flights you add: flight numbers, airports and times.
- Things you add for the group: finds (labels and links), votes on ideas, expenses (amounts and notes), booking references and messages.
- Searches: airports, dates, number of travellers, currency and market for flight and hotel searches.
- Dietary needs, if you share them. They can reveal your religion or health, so we use them only to plan your trip, and you can remove them at any time.
- Feedback you send us, and contact details if you choose to include them.
Automatically
- Cookies that keep you signed in and remember what you’re doing. See the Cookie Policy.
- Your IP address, used briefly to protect sign-in and invitations from abuse. Where we keep it to limit repeated attempts, we store a one-way scrambled version, not the address itself.
- Basic server records: which page or action was requested, when, and whether it worked. They don’t include what you write.
What we don’t collect
- Payment card details. Caravan doesn’t take payments.
- Passport numbers, your date of birth or your precise location.
- Advertising or analytics tracking. We don’t use either.
How we use it, and why
| What we do | Why we’re allowed to |
|---|---|
| Run your account and your trips: sign-in, invitations, sharing plans with your group, searches and suggestions | It’s needed to provide the service you asked for |
| Use your private answers to suggest plans and rooms that work for the group | It’s needed to provide the service. For dietary needs, your explicit consent, which you can withdraw by removing them |
| Keep Caravan safe: limits on repeated attempts, preventing abuse, security records | Our legitimate interest in protecting you, other travellers and Caravan |
| Reply to feedback and requests | Our legitimate interest in helping you, or your consent where you ask us to contact you |
| Meet legal obligations | When the law requires it |
We don’t sell your personal data, use it for advertising, or use it to make automated decisions that have legal or similarly significant effects on you.
Who can see what on a trip
- Private to you: your spending limit, routine and room preferences, and which ideas you cut. Other travellers don’t see them. Caravan’s planning service, including the AI model described below, uses them to make suggestions for the whole group without saying whose they are.
- Shared with the trip: your name, the flights you add, finds, expenses and booking references are visible to the people on that trip.
- The organiser can invite and remove people, change the trip and delete it for everyone.
AI suggestions
Caravan uses Qwen, an AI model provided by Alibaba Cloud, to suggest ideas and plan days. We send it trip details such as destinations, dates, group size, budget range, room counts, a summary of the group’s preferences (for example, dietary needs) and the labels of finds people add. We don’t send names or email addresses.
Alibaba Cloud processes this for us in Singapore. AI suggestions can be wrong, so check them before you rely on them.
Service providers
We use these providers to run Caravan. They handle personal data only to provide their service to us.
| Provider | What they do | Data involved |
|---|---|---|
| Supabase | Database and sign-in | Account and trip data |
| Railway | Hosts the Caravan website and background services | Data passing through Caravan |
| Alibaba Cloud (Qwen) | AI suggestions | Trip details, without names or email addresses |
| SearchAPI | Flight and hotel search results from Google Flights and Booking.com | Airports, dates, number of travellers, currency and market |
| Sign in with Google, if you use it | Your Google account email and name | |
| Resend | Sends invitation emails, when email is switched on | The recipient’s email, the organiser’s name, the trip name and the invitation link |
| Booking.com and Wikimedia | Host some photos your browser loads directly | Your IP address and browser details, as with any website |
When you follow a link to an airline, travel site or hotel, you leave Caravan, and that site’s own privacy policy applies.
International transfers
Our providers may store or process your data outside your country, including in the United States and Singapore. Where the law requires it, we put safeguards in place with them, such as contractual commitments to protect your data.
How long we keep it
- Your account: until you delete it.
- Private trip answers: deleted automatically 90 days after you give them. Routine answers you choose to reuse expire after 90 days too.
- Trip content: kept while the trip exists. When an organiser deletes a trip, it disappears for everyone straight away. We keep the deleted trip’s records for security and to handle disputes. Email us if you want your part erased sooner.
- Security and audit records: these note that an action happened, not what you wrote. We keep them as long as we need them to keep Caravan secure.
- Feedback: until you delete your account, unless you ask us to delete it sooner.
Your rights
Depending on where you live, for example under the GDPR in the UK or EU or the PDPA in Singapore or Thailand, you can:
- ask for a copy of your personal data, including in a format you can take elsewhere;
- correct data that’s wrong;
- delete your data;
- object to or limit how we use it;
- withdraw consent you’ve given;
- complain to your data protection authority, such as Singapore’s Personal Data Protection Commission or the UK Information Commissioner’s Office.
How to use them
- Change your name and answers in Caravan at any time.
- Delete your account in Settings, under Delete account. If you organise a trip, hand it over to someone else first. If Caravan can’t delete your account itself, for example because a trip has reached the booking stage, email us and we’ll help.
- For a copy of your data, or anything else, email support@trycaravan.io. We’ll reply within 30 days.
Children
Caravan is for adults. You must be 18 or older to create an account or join a trip, and we don’t knowingly collect data from anyone younger. If you think a child is using Caravan, email us and we’ll delete the account.
Security
We encrypt data in transit, limit each person to the trips they belong to, and store passwords only in hashed form. No service can be perfectly secure. If a breach affects your data, we’ll tell you and the authorities as the law requires.
Changes to this policy
When we change this policy, we update the date at the top. If a change matters, we’ll tell you in Caravan or by email before it takes effect.
Contact
Email support@trycaravan.io with any question or request about your personal data.