PRIVACY, IN PLAIN LANGUAGE
Privacy Policy
We collect only what is needed to run your private household. We do not sell personal information, show ads, or use your packing data to train AI.
Effective July 31, 2026
Who we are
Everyone’s Packed is a private packing-list collaboration service provided by James Peerless (“we,” “us,” or “our”). This policy explains the information used by our mobile and web apps, website, and synchronization service.
Information you choose to add
Packing content, including trip and template names, destinations, dates, groups, items, quantities, notes, and checked status.
A display name for each connected device and changes made by that device.
Information you include when you contact support.
If you choose Describe this trip, a short voice recording, its transcript, and relevant household names/types and recent destinations/dates used to understand that description.
We do not request your contacts, device location, photos, camera, health data, advertising identifier, or social-media account. Microphone access is requested only when you choose the optional voice trip feature. A destination you type or speak is packing content, not device-location tracking.
Information created to run the service
Random installation, household, device, invitation, recovery, operation, and billing identifiers.
Household membership, ownership, synchronization revision, entitlement, and trip-credit state.
Store purchase information needed to verify and restore access, such as pseudonymous customer, product, transaction, refund, and entitlement records.
Limited security and reliability information such as request time, route, response status, and rate-limit events.
You do not need to provide a name, email address, phone number, or password to create a household.
How we use information
Save, synchronize, recover, and display your household packing content.
Let invited devices collaborate and let an owner manage access.
Apply the included trip allowance and verify one-time purchases.
Prevent duplicate operations, fraud, abuse, and unauthorized access.
Respond to support requests and diagnose reliability or security problems.
Transcribe an optional trip description and turn it into an editable destination, date, and traveler draft.
Service providers
Cloudflare delivers the website and API, processes encrypted HTTPS and WebSocket traffic, and stores synchronized household data in Durable Objects.
Cloudflare Workers AI processes an optional voice recording for cloud transcription when you explicitly choose that fallback. It also processes the transcript with relevant household names and recent destinations to create the editable trip draft.
RevenueCat processes pseudonymous customer and storefront transaction information used to provide and analyze purchase functionality.
Apple and Google process purchases made through their stores under their own privacy policies.
Before any transcript or household context is sent to Cloudflare Workers AI, the app names the provider, explains exactly what will be shared and why, and asks for your permission. Cloud recording has an additional confirmation before recording begins.
We do not authorize these providers to use packing content for advertising or unrelated AI training.
People you invite
A connected device can see and change the current and future lists, trips, templates, and packing progress in that household. Invite only people you trust. The owner can disconnect devices or transfer ownership, but the service cannot erase copies someone already made outside the app.
Retention and deletion
Active packing content and access records remain while the household exists.
When an owner deletes a household, its active cloud lists, device grants, invitations, and recovery material are deleted, and connected devices are instructed to clear their downloaded copy.
A member who leaves has that device’s access revoked and its downloaded shared library cleared. The household remains for everyone else.
Local-only data remains on that installation until it is erased or the app is removed, subject to platform behavior.
Voice recordings are temporary. Local dictation keeps audio on the device. A cloud-fallback recording is used for that transcription request, is not saved in the household, and its temporary device copy is deleted afterward. We do not separately retain the transcript; details you approve become ordinary trip and household content.
Short-lived operational and security logs may be retained for up to 30 days. Support correspondence may be retained for up to 24 months.
Apple, Google, RevenueCat, and we may retain transaction records as needed for restore, refunds, fraud prevention, accounting, and legal compliance. Deleting a household is not a storefront refund.
Your choices and rights
The app lets owners delete the household and its synchronized data, members leave and clear their downloaded copy, local-only users erase device data, and owners disconnect another device. You can also request help without reinstalling the app on our Data Deletion page.
Voice setup is optional. You can decline the Cloudflare Workers AI permission and type the same trip details yourself. If you allow it, you can withdraw that permission under Settings at any time. The next voice setup asks again before sharing any transcript or household context.
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing. Because households do not use identifying accounts, we may need a safe way to verify control without asking you to email a device credential, invitation token, or recovery secret.
Security
We use encrypted transport, per-device credentials, hashed server-side secrets, short-lived invitations, access revocation, rate limits, and service-side purchase verification. No system can guarantee absolute security. Keep invitation and recovery links private.
Children and international processing
Everyone’s Packed is a general-audience organizational tool and is not directed to children under 13. We do not knowingly collect a child’s contact details. Service providers may process information in the United States and other countries using contractual and legal safeguards appropriate to the service.
Changes and contact
We may update this policy as the product or law changes. We will post the new effective date here and provide any notice or consent required by law.
privacy@everyonespacked.com