Privacy notice
What Strayfolk stores about you, who processes it on our behalf, how long we keep it and what you can ask us to do.
Draft — not yet in force. This notice describes how the product is built and is published for review ahead of launch. Bracketed items are placeholders. It will be finalised, dated and versioned before the app accepts sign-ups from the public.
- Who we are
- What we store
- Why we use it
- Who processes it
- Where it is stored
- How long we keep it
- Your rights
- Changes
Who we are
Strayfolk is operated by [Company details — legal name, registered address, company number] ("we"). We are the data controller for the personal data described here. Contact: hello@strayfolk.app.
What we store
Your account
- Email address and display name. If you sign in with Apple or Google, the identifier and email they give us (Apple may give a relay address).
- Sign-in records: magic-link tokens (short-lived), the devices you have signed in on, and the time of each sign-in.
- Your private forwarding address token, and an Expo push-notification token for each device that has allowed notifications.
- Your entitlement (Free, Pro, trial, trip pass) and the store or Stripe reference for it. We never see card numbers.
Your trips
- Trip name, type, dates, destination and base currency; a header photo fetched from an open image source, with its attribution.
- Plan items: what was booked, where, when, the confirmation reference, the cost, and who is sharing it. This is the content of your bookings.
- Members and their roles, invite links, and guest rows (a name only) for people who have not signed up.
- Attachments you upload (PDFs, images) and files extracted from forwarded emails.
- Places you add, the coordinates we resolve for them, and route legs between consecutive stops. We store the places on your trip, not a history of where your device has been.
Forwarded emails
- When you forward a booking, we store the raw email (headers, body and attachments) so it can be parsed and, if parsing fails, retried or checked by you. The subject, sender, size and processing status are shown in the app.
- The body is sent to Anthropic's Claude to extract the booking as structured data. Only the email you forwarded is sent; we have no access to your mailbox.
Money
- Costs, splits, payments and settlements you record in a trip: amounts, currencies, the exchange rate used, who paid and who confirmed. These are records of what you told us, not transactions — no money moves through Strayfolk and we hold no bank or card details.
Technical
- Server logs (IP address, user agent, request path and time) kept briefly for security and debugging.
- An activity log of changes to trips and ledgers, so a group can see who changed what.
- This website sets no cookies and runs no analytics. Your theme preference is kept in your browser's local storage only.
Why we use it
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Running the service you signed up for — trips, timeline, ledger, weather, maps, imports | Performance of a contract |
| Sending sign-in links, trip invitations and the notifications you have turned on | Performance of a contract |
| Billing, trials and refunds | Performance of a contract; legal obligation (tax records) |
| Keeping the service secure, preventing abuse, and fixing faults | Legitimate interests |
| Answering your support requests | Legitimate interests |
We do not sell personal data, do not use it for advertising, and do not use your content to train models.
Who processes it on our behalf
| Vendor | What they do | What they see |
|---|---|---|
| Cloudflare | DNS, this website, and routing forwarded emails to our servers | Traffic to strayfolk.app; forwarded emails in transit |
| Postmark | Sends our emails (sign-in links, invitations, alerts) | Your email address and the message content |
| Anthropic (Claude) | Extracts bookings from forwarded emails; ranks activity suggestions | The email you forwarded; the trip's destination, dates and place names |
| Geoapify | Geocoding, routing and place search | Place names and coordinates on your trip |
| Open-Meteo | Weather and snow forecasts | Destination coordinates and elevations |
| OpenFreeMap / OpenStreetMap | Map tiles shown in the app | The map areas you view |
| AeroDataBox | Live flight status | Flight number and date |
| Frankfurter | Exchange rates | Currency pairs and dates only |
| Wikimedia, Pexels, Unsplash | Trip header photos | The destination name |
| RevenueCat; Apple App Store; Google Play | Subscriptions and trip passes on iOS and Android | An anonymous app user id and purchase status |
| Stripe | Subscriptions and trip passes bought on the web | Your email address and payment details (held by Stripe, not us) |
| Expo | Delivering push notifications | Device push token and notification content |
Each vendor is bound by its own terms and, where required, a data-processing agreement. Where a vendor is outside the UK or EU, transfers rely on [transfer mechanism — e.g. UK IDTA / EU SCCs].
Where it is stored
The API, database and file storage run on servers in the UK and EU. Some vendors above, notably Anthropic, Postmark, RevenueCat, Stripe and Expo, process data in the United States.
How long we keep it
- Account and trips: for as long as your account exists. Deleting your account removes your personal data; trips shared with others remain for them with your name replaced by a placeholder.
- Forwarded emails: the raw email is kept for [retention period] after it has been imported, then deleted; the plan items created from it remain on the trip.
- Ledger records: kept for the life of the trip, because the group's balances depend on them.
- Billing records: as long as tax law requires.
- Server logs: [log retention period].
- Magic-link tokens: minutes; they are single-use.
Your rights
Under UK GDPR you can ask us to access, correct, delete or export your personal data, to restrict or object to certain processing, and to withdraw consent where we rely on it. Most of this you can do yourself: edit your profile, export a trip, or delete your account from Settings. For anything else, email hello@strayfolk.app. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
Strayfolk is not intended for children under 13, and we do not knowingly collect their data.
Changes
We will post changes here and, for anything material, tell you in the app or by email before it takes effect.
Version: draft. Effective date: [not yet in force].