Privacy Policy

Last updated 2026-10-04

Jravel ("we", "us") is a travel app for Jewish travelers at https://jravel.app. This policy explains what we collect, why, and the choices you have. We designed Jravel to work with as little personal data as possible: you can browse places, Shabbat times and city guides without an account.

What we collect

• Account data. If you create an account: your email address and a password hash. If you sign in with Google we receive your Google account identifier, email address and basic profile from Google; we store the identifier and email only. We never see your Google password.
• Content you post. Trips you choose to share, minyan posts, confirmations and corrections about places, reviews, messages in flight communities and group chats, and business claims. Your name or alias appears next to content you post.
• Location. Only when you turn on a feature that needs it (the map around you, the travelers map, flight communities). For presence and matching we store a coarse position (about 1 km) rather than your exact coordinates. Manual city mode never uses GPS.
• Ask Jravel conversations. Questions you send to the AI assistant are processed by our AI provider (Anthropic) to produce an answer. We send the question, the relevant place data and your trip context; we do not send your email or account identifier.
• Notifications. If you enable push notifications we store the browser subscription needed to deliver them. You can turn them off at any time in your browser or in the app.
• Usage analytics. Aggregated, daily counts of product events (for example "trip created"). These counters contain no user identifiers, IP addresses or free text.
• Technical logs. Our hosting provider (Render) keeps short-lived request logs for security and reliability.

What we do not do

• We do not sell personal data and do not run third-party advertising trackers.
• We do not share your phone number or exact location with other travelers automatically. Connections are mutual and opt-in; you can block or report anyone.
• We do not use your messages or trips to train AI models.

Why we process data

To run the service you asked for (your account, trips, notifications), to keep the community safe (abuse prevention, rate limiting, moderation), to improve the product using aggregate statistics, and to meet legal obligations. For users in the EU/EEA and UK the legal bases are performance of a contract, our legitimate interests in running a safe service, and your consent where we ask for it (location, notifications).

Who we share data with

Service providers that process data on our behalf and under contract: Render (hosting and database), Resend (transactional email such as verification and password reset), Anthropic (AI answers), and Google (only if you choose Google sign-in). Place information shown in the app comes from public sources such as OpenStreetMap and Wikidata and from businesses and travelers who submit it; it is not personal data about you.

How long we keep data

Account data is kept while your account exists. When you delete your account, your profile, sessions and the content you posted are deleted or anonymised. Email delivery logs and security logs are kept for a limited period and then removed. Aggregate analytics contain no personal data and are kept indefinitely.

Your rights and choices

• Delete your account at any time from the Me screen ("Delete my account").
• Access, correct or export your data, or object to processing, by contacting us at the contact details shown in the app.
• Withdraw location or notification permissions in your device or browser settings.
• If you are in the EU/EEA or UK you may also complain to your local data-protection authority.

Children

Jravel is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

Security

Data is encrypted in transit (HTTPS). Passwords are stored as salted hashes. Access to production systems is limited to the operator. No system is perfectly secure; if we learn of a breach affecting you we will notify you as required by law.

International transfers

Our servers and providers may be located outside your country, including in the United States and the European Union. Where required we rely on standard contractual safeguards.

Changes

We will post any changes on this page and update the date above. Material changes will be announced in the app.

Contact

Questions about privacy: the contact details shown in the app.