PRIVACY, IN PLAIN LANGUAGE
Privacy Policy
We collect only what is needed to keep your private household packing space working. We do not sell personal information, show ads, or use your packing data to train AI.
Effective July 28, 2026
Who we are
Everyone’s Packed is a private packing-list collaboration service provided by James Peerless (“we,” “us,” or “our”). This policy explains the information used by our mobile and web apps, website, and synchronization service.
Information you choose to add
Packing content, including trip and template names, destinations, dates, groups, items, quantities, notes, and checked status.
A display name for each connected device and changes made by that device.
Information you include when you contact support.
We do not request your contacts, device location, photos, camera, microphone, health data, advertising identifier, or social-media account. A destination you type is packing content, not device-location tracking.
Information created to run the service
Random installation, household, device, invitation, recovery, operation, and billing identifiers.
Household membership, ownership, synchronization revision, entitlement, and trip-credit state.
Store purchase information needed to verify and restore access, such as pseudonymous customer, product, transaction, refund, and entitlement records.
Limited security and reliability information such as request time, route, response status, and rate-limit events.
You do not need to provide a name, email address, phone number, or password to create a packing space.
How we use information
Save, synchronize, recover, and display your packing space.
Let invited devices collaborate and let an owner manage access.
Apply the included trip allowance and verify one-time purchases.
Prevent duplicate operations, fraud, abuse, and unauthorized access.
Respond to support requests and diagnose reliability or security problems.
Service providers
Cloudflare delivers the website and API, processes encrypted HTTPS and WebSocket traffic, and stores synchronized household data in Durable Objects.
RevenueCat processes pseudonymous customer and storefront transaction information used to provide and analyze purchase functionality.
Apple and Google process purchases made through their stores under their own privacy policies.
We do not authorize these providers to use packing content for advertising or unrelated AI training.
People you invite
A connected device can see and change the current and future lists, trips, templates, and packing progress in that household space. Invite only people you trust. The owner can disconnect devices or transfer ownership, but the service cannot erase copies someone already made outside the app.
Retention and deletion
Active packing content and access records remain while the household space exists.
When an owner deletes a space, its active cloud lists, device grants, invitations, and recovery material are deleted, and connected devices are instructed to clear their downloaded copy.
A member who leaves has that device’s access revoked and its downloaded shared library cleared. The household space remains for everyone else.
Local-only data remains on that installation until it is erased or the app is removed, subject to platform behavior.
Short-lived operational and security logs may be retained for up to 30 days. Support correspondence may be retained for up to 24 months.
Apple, Google, RevenueCat, and we may retain transaction records as needed for restore, refunds, fraud prevention, accounting, and legal compliance. Deleting a packing space is not a storefront refund.
Your choices and rights
The app lets owners delete the whole cloud space, members leave and clear their downloaded copy, local-only users erase device data, and owners disconnect another device. You can also request help without reinstalling the app on our Data Deletion page.
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing. Because spaces are anonymous, we may need a safe way to verify control without asking you to email a device credential, invitation token, or recovery secret.
Security
We use encrypted transport, per-device credentials, hashed server-side secrets, short-lived invitations, access revocation, rate limits, and service-side purchase verification. No system can guarantee absolute security. Keep invitation and recovery links private.
Children and international processing
Everyone’s Packed is a general-audience organizational tool and is not directed to children under 13. We do not knowingly collect a child’s contact details. Service providers may process information in the United States and other countries using contractual and legal safeguards appropriate to the service.
Changes and contact
We may update this policy as the product or law changes. We will post the new effective date here and provide any notice or consent required by law.
privacy@everyonespacked.com