GetawaysPlan together. Drive narrated.

Privacy Policy

Last updated: July 7, 2026
This Privacy Policy explains how Cervoo Inc. (“Cervoo,” “we,” “us”) handles information for the Getaways website and iOS app (together, the “Services”). Getaways is a group‑trip app: friends start a trip, invite each other by link, vote on getaways and stays, and share an itinerary. If anything here is unclear, email us at hello@cervoo.com.

1. Who we are

The Services are operated by Cervoo Inc.. Our mailing address is Cervoo Inc. 44 Tehama St, San Francisco, CA 94105. You can contact us at hello@cervoo.com.

2. What this policy covers

This policy covers information we process when you:

  • Visit our marketing site or legal/support pages.
  • Email us for support, feedback, or business inquiries.
  • Use the Getaways iOS app to start or join a trip, vote on getaways and stays, build a shared itinerary, or invite others by link.

This policy does not cover third‑party websites, apps, or services that you may access through links in the Services. Those third parties have their own privacy policies.

3. Summary (privacy at a glance)

  • We don’t sell personal information. We don’t run ads and we don’t track you across other apps or websites.
  • Built for groups. Trips, stays, and itineraries are stored on our servers so everyone you invite sees the same plan. Content you add to a trip is visible to the other members of that trip.
  • AI stays on your device. Naming a trip and figuring out its destination area runs on your iPhone using Apple Intelligence. We don’t send that content to any third‑party AI service.
  • You’re in control. You choose what to share, whether to grant location, and you can delete your account at any time.

4. Information we collect

4.1 Information you provide

  • Emails and messages. If you email us, we collect the contents of your message and the contact details you provide (e.g., your email address, name, city, and any other details you include).
  • Early access interest. If you ask for early access, we may store your email and any preferences you share (for example, your city or what you’re into) so we can contact you about early access and send more relevant plan ideas.
  • Support details. If you request support, you may send device details, screenshots, or diagnostic context. Please avoid sending sensitive information you don’t want stored in email.

4.2 Information collected automatically (website)

When you visit our website, our hosting and security providers (and we) may receive basic log information such as your IP address, browser type, device type, operating system, referring/exit pages, and timestamps. This information is generally used for security, abuse prevention, and reliability monitoring.

We aim to keep tracking minimal. If we add analytics in the future, we will update this policy and—where required—provide appropriate notice and choices.

4.3 Information collected or processed in the app

Getaways is a group‑trip app. Depending on how you use it and what permissions you grant, the app may process the following categories of information:

  • Account information (hosts). If you start a trip, you sign in with Apple. We receive and store the name and email address that Apple shares based on your choices, associated with your account. Your account is hosted on our infrastructure provider, Supabase.
  • Guest sessions. If you join a trip from an invite link, you can participate as a guest without creating an account. We create an anonymous guest session so we can record your votes and show you the trip; it isn’t tied to your name or email unless you provide one.
  • Trip content. The trips, stays, and itineraries you and your group create, along with votes, the display name you enter, and related settings. This content is stored on our servers so everyone invited to a trip sees the same shared plan.
  • Stay links. When someone adds a stay by pasting a link, we read only the public link‑preview metadata that the page exposes (such as its title and preview image) to display a card. We do not scrape the page or collect prices.
  • Location data (optional). If you grant when‑in‑use location, we use it to suggest nearby starting areas for a trip and store the resulting anchor coordinates with the trip. Location is optional and you can change it anytime in iOS Settings.
  • Analytics. We collect basic product‑interaction events (such as screens viewed and features used) through Mixpanel, tied to a random per‑install identifier. This is not linked to your identity across other apps, and we don’t use it for advertising.
  • Device and app information. App version, device model, iOS version, language/region, and basic diagnostic signals to help troubleshoot issues and improve reliability.

On‑device AI. Naming your trip and resolving its destination area runs on your device using Apple Intelligence. That processing happens locally on your iPhone — we do not send your trip content to any third‑party AI service.

4.4 Information from third parties

We may receive information from third parties in limited situations—for example:

  • App stores and platform providers. If you download Getaways from an app store, the platform may provide us with aggregate information about downloads, crashes, and performance (often in de‑identified or aggregated form).
  • Sign in with Apple. When you sign in, Apple provides the name and email you choose to share (which may be a private relay address). Your use of Sign in with Apple is subject to Apple’s privacy policy.

5. How we use information

We use information for the following purposes:

  • Provide and improve the Services. To run trips, sync votes and itineraries across a group, respond to your emails, and fix bugs.
  • Personalize and tailor. For example, to suggest nearby starting areas when you grant location, and to understand which features are used so we can improve them.
  • Safety, security, and abuse prevention. To detect and prevent spam, fraud, or misuse of the Services.
  • Legal compliance. To comply with applicable laws, enforce our terms, and protect our rights and users.

6. Legal bases (for EEA/UK users)

If you are in the European Economic Area (EEA) or the United Kingdom, we process personal data only when we have a lawful basis, such as:

  • Consent (e.g., when you opt into early access communications or grant app permissions).
  • Contract (e.g., to provide the Services you request).
  • Legitimate interests (e.g., maintaining security, preventing abuse, and improving reliability), balanced against your rights.
  • Legal obligation (e.g., responding to lawful requests).

7. Sharing and disclosure

We may share information in the following situations:

  • Service providers. Vendors that help operate the Services, including Supabase (database, authentication, and hosting for accounts, trips, stays, and itineraries, in the United States), Mixpanel (product analytics), and website hosting and support tooling. They are authorized to process personal information only as needed to provide services to us.
  • Members of your trip. Content you add to a trip — including your display name, votes, stays, and itinerary items — is visible to the other people invited to that trip.
  • Apple frameworks and features you choose. Sign in with Apple, Apple Intelligence (on‑device), and your device’s share sheet process data as necessary to perform the actions you request, subject to Apple’s policies and your device settings.
  • Legal and safety. If required by law, subpoena, or court order; to protect the rights, property, or safety of Cervoo, our users, or others; or to investigate fraud or security issues.
  • Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to appropriate safeguards.

We do not sell personal information, and we do not share personal information for cross‑context behavioral advertising.

8. Cookies and tracking

The marketing site is intended to function without third‑party advertising cookies. Our hosting provider may set essential cookies or use similar technologies for security and performance (for example, to protect the site from abuse).

Your browser may offer settings to manage cookies. Note that disabling certain cookies may affect site functionality (where applicable).

Some browsers transmit “Do Not Track” (DNT) signals. Because there is no consistent industry standard for DNT, we do not currently respond to DNT signals in a special way, but we aim to keep tracking minimal regardless.

9. Data retention

We keep personal information only as long as reasonably necessary for the purposes described in this policy, such as responding to your requests, maintaining our early access list, and meeting legal obligations.

  • Account and trip data: retained while your account is active so your group can keep using shared trips. It is removed when you delete your account, as described below.
  • Support emails: retained as needed to resolve your issue and maintain an internal record of support.
  • Analytics events: retained in de‑identified, aggregated form for product improvement.
  • Website logs: retained for a limited period for security and operational purposes.

Deleting your account and data. You can delete your account in the app under Profile → Delete account, or by emailing us. Deleting your account removes your account, your trip memberships, and any trips where you are the only member. Trips that still have other members continue to exist for those members, since the content is shared.

10. Security

We use reasonable administrative, technical, and physical safeguards designed to protect information. However, no system is 100% secure, and we cannot guarantee absolute security.

Email is not an encrypted messaging system. If you choose to email us, consider the sensitivity of what you share.

11. Your choices and rights

11.1 Email preferences

You can opt out of non-essential communications by emailing us or replying “unsubscribe” to an email. We may still send administrative or transactional communications if necessary (for example, responding to a support request).

11.2 Device permissions (iOS)

You can control permissions like location access through iOS Settings. Location is optional and used only to suggest nearby starting areas; if you deny it, you can still start and join trips.

11.3 Access, deletion, and correction

You can delete your account and associated data at any time in the app under Profile → Delete account. Depending on where you live, you may also have rights to request access to, correction of, or deletion of personal information we hold about you. To make a request by email, contact hello@cervoo.com with the subject line “Privacy Request.”

We may need to verify your identity before fulfilling certain requests. Some information may be exempt from deletion under applicable law (for example, information we must keep to comply with a legal obligation).

11.4 EEA/UK rights and complaints

If you are in the EEA/UK, you may have the right to access, correct, delete, restrict, or object to our processing of your personal data, and the right to data portability. You may also withdraw consent where we rely on consent.

If you believe we have not addressed a privacy concern, you may have the right to lodge a complaint with your local data protection authority.

12. California privacy notice

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA, including the right to know, delete, correct, and opt out of certain sharing.

  • Sale/sharing: We do not sell personal information and do not share it for cross‑context behavioral advertising.
  • Sensitive personal information: We do not use sensitive personal information to infer characteristics about you.
  • Requests: Email us at hello@cervoo.com with “California Privacy Request” in the subject line.

We will not discriminate against you for exercising your privacy rights.

13. Children’s privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we’ll take appropriate steps to delete it.

14. International transfers

We are based in the United States. If you access the Services from outside the U.S., your information may be processed in the U.S. or other jurisdictions where our service providers operate.

15. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice (for example, on the website or in-app).

16. Contact us

Questions, concerns, or requests? Email hello@cervoo.com or write to Cervoo Inc. 44 Tehama St, San Francisco, CA 94105.