Privacy Policy

This Privacy Policy describes how SweeneyWorldwide LLC ("Airplane Mode," "we," "us") collects, uses, and protects your information when you use the Airplane Mode trip portal service (the "Service").

Plain English summary: We collect the minimum information needed to give you a working trip portal. We do not sell your data. We do not show ads. Your payment information is handled entirely by Stripe — we never see your card. You can request your data or have it deleted at any time.

1. INFORMATION WE COLLECT

We collect:

• Account information — your name, email address, and (optionally) phone number, provided when you sign up.
• Trip information — destinations, dates, itinerary notes, hotel and food selections, packing list progress. Anything you enter into your trip portal.
• Uploaded documents — flight confirmations, hotel bookings, tickets you upload to the document scanner. Stored encrypted in our database. Visible only to you and trip members you grant access to.
• Payment confirmations — the Stripe charge ID, last 4 digits of your card, and amount. We never receive your full card number, CVV, or expiration date. Those go directly from your browser to Stripe.
• Location data — only if you explicitly enable location sharing for a trip. Used to render your position on the trip map and trigger proximity alerts. You can disable this at any time.
• Technical data — IP address, browser type, and standard request headers, used for security (bot detection, rate limiting) and for diagnosing errors.

2. HOW WE USE INFORMATION

• To provide the trip portal service (itinerary, map, packing list, AI companion).
• To process payments (via Stripe) and issue Passports.
• To send transactional emails (sign-in codes, receipts, trip ready notifications).
• To send occasional product updates (you can opt out at any time).
• To prevent abuse, fraud, and unauthorized access.
• To comply with legal obligations.

3. WHAT WE DO NOT DO

• We do not sell your personal information to anyone.
• We do not share your trip details with anyone outside the trip members you've granted access to.
• We do not show advertising or use tracking pixels for ad networks.
• We do not access your location unless you turn on location sharing for a trip.

4. THIRD-PARTY SERVICES WE USE

To provide the Service, we share specific information with these processors:

• Stripe (payments) — receives your card data directly from your browser. We receive only confirmation info from them. Stripe Privacy Policy.
• Supabase (database + authentication) — stores your account, trip data, and uploaded documents. SOC 2 Type II compliant. Supabase Privacy Policy.
• Cloudflare (network security, bot protection) — sees standard HTTP request metadata. Cloudflare Privacy Policy.
• Resend (transactional email) — delivers sign-in codes and receipts to your inbox. Resend Privacy Policy.
• Anthropic (AI travel companion) — when you chat with the AI, your message is sent to Anthropic's Claude API. Anthropic does not train models on API data. Anthropic Privacy Policy.
• Google Cloud (hero image generation, storage) — used for generated trip imagery. Google Privacy Policy.
• Railway (application hosting) — runs the application servers. Railway Privacy Policy.

5. DATA RETENTION

We retain your data as long as your account is active. If you delete your account, we delete your personal information within 30 days, except where retention is required by law (e.g., financial records for tax purposes). Trip data shared with other trip members may persist if those members continue to use the Service.

6. YOUR RIGHTS

You have the right to:

• Access — request a copy of all personal data we hold about you.
• Delete — request full deletion of your account and personal data.
• Correct — update inaccurate information.
• Export — receive your data in a machine-readable format.
• Opt out — unsubscribe from non-essential emails at any time.

Email scott@sweeneysells.com with your request. We respond within 30 days (usually within 24 hours).

7. CHILDREN

The Service is not intended for children under 13. We do not knowingly collect data from anyone under 13. If you become aware that a child has provided us with information, please contact us and we will delete it.

8. INTERNATIONAL TRANSFERS

Our servers and processors operate primarily in the United States. By using the Service, you consent to your data being processed in the US. We use Standard Contractual Clauses with our processors where required for EU data transfers.

9. CHANGES TO THIS POLICY

We may update this policy as our practices evolve. Material changes will be communicated by email to all active users at least 30 days before taking effect. The "Last updated" date at the top of this page indicates the most recent revision.

10. CONTACT US

SweeneyWorldwide LLC
Email: scott@sweeneysells.com
Phone: 707-330-2324