Privacy Policy
Bearings ("we", "us") is a trip and accommodation planner available at app.bearingshq.app. This policy explains what we collect, why, and the choices you have. Questions: hello@bearingshq.app.
What we collect
| Data | Why |
|---|---|
| Name and email address | To create your account and identify you to people you share a plan with. |
| Password (stored only as a salted hash) | To sign you in if you use a password. We never see or store your actual password. |
| Plan content you enter: locations, dates, trips, bookings, accommodation costs, notes | To provide the service. |
| Google account name, email address and profile picture, if you sign in with Google | To create and sign in to your account. |
| Google Calendar event data, only if you choose to connect your calendar | To show your existing commitments alongside your plan. See "Google user data" below. |
| Technical data such as IP address and browser type, in short-lived server logs | Security, debugging and abuse prevention. |
Google user data
If you connect Google Calendar, Bearings requests read-only access to your calendar events. We use that data only to display those events inside your own Bearings plan and to help you spot clashes with your travel. We do not use it for advertising, we do not sell it, and we do not allow humans to read it except where you ask for support, where required for security or abuse investigations, or where required by law.
Bearings's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect Google Calendar at any time in Bearings settings, and you can also revoke access at myaccount.google.com/permissions. When you disconnect, we delete the stored Google tokens and any calendar data we cached.
Who sees your data
Only you and the people you invite to a plan can see that plan. We do not sell your personal data or share it for advertising.
We use the following service providers to run Bearings, each only to process data on our behalf:
- Cloudflare: hosting and our database, located in Western Europe.
- Resend: sending emails such as invitations.
- Google: sign-in and, if you enable it, Calendar.
Cookies
We use a single essential session cookie to keep you signed in, and local browser storage for interface preferences. We do not use advertising or analytics cookies.
Retention and deletion
We keep your data while your account is open. You can delete plans you own in the app, and you can ask us to delete your account and all associated data by emailing hello@bearingshq.app. We will act on requests within 30 days.
Your rights
If you are in the UK or EEA you have the right to access, correct, delete, export or restrict the use of your personal data, and to object to processing. Contact us to exercise these rights. You may also complain to the Information Commissioner's Office (ico.org.uk).
Security
Data is encrypted in transit (HTTPS) and stored with Cloudflare. No system is perfectly secure, but we take reasonable measures to protect your data.
Children
Bearings is not intended for anyone under 16.
Changes
If we change this policy materially we will update the date above and, where appropriate, notify you in the app or by email.