Privacy Policy

Tester signups: We collect your name, Google Play account email, Android device confirmation, testing availability, and the date you sign up to organize the app test you joined. Future app testing emails require a separate optional opt-in; we record that choice, its date, and its wording. Signup information is kept until you withdraw or ask us to remove it. To withdraw, unsubscribe, or request deletion, email info@iroxannestudio.com. AI content reports include the description you submit, the page, and your account identity so the app owner can review the reported output. Deletion requests are stored in an owner-only queue with verification and completion records; limited request records may be retained to document compliance. Account deletion is processed after ownership verification and includes a review of uploaded files, billing, and connected services.

The Services are intended solely for users located within the United States.

We do not intentionally market or direct the Services to individuals located outside the United States.

By using the Services, you represent that you are located in the United States at the time of account creation.

Temporary access while traveling internationally does not change the intended U.S.-only scope of the Services.

Service providers process information as needed to operate their services, subject to their applicable privacy and security terms.

We collect information necessary to operate the Services.

We use personal information to:

• Provide and maintain the Services.

• Process subscriptions and payments.

• Enable AI-powered functionality.

• Deliver notifications.

• Improve system performance and security.

• Provide customer support.

• Prevent fraud and abuse.

• Comply with legal obligations.

We do not sell personal information.

Certain features use artificial intelligence services provided by OpenAI.

When you use AI-enabled features, the content you submit is sent to OpenAI for processing. This includes trip details, AI concierge messages, and photos of tickets, boarding passes, bookings, or receipts you choose to scan. Some features also use web search results.

The AI concierge calls you by the nickname you set in Settings, or "Traveler" if you leave it blank. Your account name and sign-in details are not sent to OpenAI.

Scanned images are stored privately. During a scan, the image is sent to OpenAI only to read its details. We save only the details extracted from them, not the images.

Trip cover illustrations are created by OpenAI from the destination name only.

OpenAI does not use content submitted through our app to train its models.

• AI-generated outputs are stored within user accounts for functionality.

• AI-generated content may be inaccurate or incomplete.

We do not use user content to independently train proprietary AI systems.

Web Payments (Stripe):

• Payments processed via web are handled by Stripe.

• We do not store full payment card numbers.

• Stripe processes payment information under its own privacy policy.

• We receive limited subscription and transaction metadata necessary to manage subscriptions.

App Store Versions:

• Purchases are not available inside the Apple App Store or Google Play versions of the app. Subscriptions are managed on the web through Stripe, and access carries over to your signed-in account.

• We do not receive or store full card information.

• We may receive subscription status and transaction identifiers.

We share personal information only with service providers necessary to operate the Services, including:

• Stripe (payment processing)

• Google (place search, hotel information, and weather forecasts; receives the destinations, places, and locations you search)

• OpenStreetMap Nominatim (converts approximate coordinates into a city name)

• U.S. National Weather Service (forecasts for U.S. locations; receives approximate coordinates)

• OpenAI (AI features)

• Apple or Google (if applicable)

• Trip collaborators you invite (they can see the trip content, comments, votes, and messages shared within that trip)

• Hosting and infrastructure providers. Our hosting provider, Base44, stores and processes app data under its own terms.

We may also disclose personal information:

• If required by law.

• In response to subpoenas, court orders, or governmental requests.

• To protect rights, property, or safety.

• In connection with a merger, acquisition, or asset sale.

We do not sell or rent personal information.

Booked! Now What? accesses Google user data only when you choose to sign in with Google.

Data we access:

• Google Sign-In: your name, email address, and profile photo.

How we use it:

• Sign-In data is used only to create and identify your account and to show your name and photo in the app.

• Booked! Now What? does not connect to your Google Calendar. To add a trip to a calendar, you create a standard calendar file in the app and open it in the calendar app you choose.

Storage:

• Your name, email address, and profile photo are stored with your account.

Sharing:

• We do not sell Google user data or use it for advertising.

• We do not share, transfer, or disclose Google user data to third parties, except to our hosting and infrastructure providers as needed to operate these features, or when required by law.

• Google user data, including your name, is not sent to AI providers, and we do not use it to train AI models.

Limited Use:

• Booked! Now What?'s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Your control:

• You can remove Booked! Now What?'s access at any time at myaccount.google.com/permissions. Entries you added to a calendar from a calendar file stay there until you delete them.

• You can delete your account to remove stored data, or contact info@iroxannestudio.com.

We retain personal information while accounts remain active.

Upon account deletion:

• Account records are removed from active systems.

• Shared content may remain accessible to authorized users.

• Financial records may be retained as required by law.

• Backup systems may retain residual copies for a limited period.

We implement reasonable safeguards, including:

• HTTPS encryption.

• Encrypted storage at rest.

• Role-based access control.

• Secure authentication procedures.

No system is completely secure.

If you are a California resident, you may have rights to:

• Request disclosure of personal information categories collected.

• Access personal information.

• Request deletion (subject to exceptions).

• Request correction of inaccurate information.

• Be free from discrimination for exercising rights.

We do not sell personal information.

Requests may be submitted to: info@iroxannestudio.com

We will respond within 45 days of a verified request.

We do not share personal information for cross-context behavioral advertising.

We do not use third-party advertising trackers.

The Services are not directed to individuals under eighteen (18) years of age.

We do not knowingly collect personal information directly from minors without parental authority.

The Services may reference or link to third-party vendors (for example, travel providers or booking sites).

We are not responsible for the privacy practices of third parties.

Users should review third-party privacy policies before engaging with external services.

In the event of a confirmed data breach involving personal information, we will:

• Investigate promptly.

• Take reasonable mitigation measures.

• Notify affected users without unreasonable delay as required by U.S. law.

• Notify regulatory authorities where legally required.

We may update this Privacy Policy periodically.

Material changes will be posted with an updated effective date.

Continued use of the Services constitutes acceptance of revised terms.

For privacy inquiries, contact us at: info@iroxannestudio.com

Mailing address:

10612 Providence Rd STE D - PMB 747

Charlotte, NC 28277