YonwardPrivacy Policy
Yonward is a trip planner. This policy explains what we collect, why, and the choices you have. In short: we keep what you put in Yonward so it can sync to your devices and the people you share trips with — and nothing else. No ads, no tracking, no selling your data.
What we collect
- Account: your email address and name, and your password stored only as a secure one-way hash.
- Trip content you add: trips, plans, places, notes, times, bookings, expenses, guest invitations, and the documents and photos you attach.
- Technical data needed to run the service: server logs that include IP addresses, kept for up to 14 days for security and abuse prevention.
What stays on your device
- Calendar events, if you allow access, are shown in your itinerary and never uploaded.
- Files and screenshots you import are read on your device; only what you save to a trip is uploaded.
- We don't collect your location.
How we use it
Only to provide Yonward: to store your trips, sync them across your devices and with the people you share them with, and to keep the service secure. We don't use your data for advertising, we don't track you across other apps or websites, we don't use third-party analytics or ad software, and we never sell or share your data for marketing.
Who we share it with
- People you choose: guests you invite and anyone with a share link you create.
- AI assistants you connect: if you connect an assistant (such as Claude or ChatGPT) to Yonward, it can read — and, if you allow, change — the trips you can see, under the same permissions you have on each trip. It receives only what it asks for while connected; its own provider's privacy policy covers what it does with that.
- Service providers that run Yonward on our behalf: Railway (servers, database and file storage, United States) and Cloudflare (domain and network delivery).
- When required by law.
Keeping and deleting your data
We keep your data while your account exists. You can delete your account at any time in the app (Settings → Account → Delete Account) or on the web at yonward.app/delete-account.
- Your account and every trip you own are deleted immediately, for everyone they're shared with. Stored files are normally removed within an hour.
- Things you added to trips someone else owns (plans, expenses, documents) stay part of their trip, with your name removed.
- For each connected assistant we keep which actions it used and when (not what it read or wrote) for 90 days, so you can review its activity. Disconnecting it in Settings → Connected Assistants or on the web under Account stops its access immediately.
- We keep daily backups of the database for up to 7 days, so deleted data can remain in a backup until it expires. A deleted account stays deleted even if we restore a backup. If we ever have to restore one, changes made after it was taken (including changes to who can see a trip) could be lost, and recently deleted trips or files could reappear (a file may then need to be attached again). For your security, a restore also signs everyone out and ends every assistant connection, share link, pending invite and calendar subscription, so none of those revoked after the backup comes back, and a password you changed after the backup normally stays changed (one changed in the last few minutes before a failure could revert).
Security
Data is encrypted in transit (HTTPS). Passwords are hashed, never stored in readable form, and access to systems is limited.
Children
Yonward isn't directed at children under 13, and we don't knowingly collect their data.
Changes
We'll post any changes here with a new date. Material changes will also be noted in the app.
Contact
Questions or requests: support@yonward.app.