Privacy Policy

• Your email address, to send you one-time sign-in codes and identify your account.
• Your name, if you add one to your profile.
• Your profile photo, if you add one. It stays on your phone; we never upload it.
• What you add: trips (names, places and dates), budgets, plans, reservations, purchases you enter yourself, and your choices about purchases (for example, whether one counts toward a trip).
• Bank account and purchase data, if you connect a bank. Through Plaid, for the accounts and cards you choose: the bank’s name, account names and the last digits of account numbers, and transactions (merchant, amount, date, pending status, the merchant’s location and category). Access is read-only. We never see your bank username or password.
• Live tracking records: which of your trips has live tracking and how it was covered (your free first trip, a plan, or an offer), so a trip is never charged twice.
• Technical records. Our servers see your IP address and basic request details (time, action, app version), which we use to run the service and limit abuse, such as too many sign-in attempts. When your bank tells us new purchases are ready, we keep a short record of that notice with no purchase details.
• Support requests: your messages and email address, and, if an account deletion needs our help, a reference for that request and what was done.

If you join the waitlist, we keep your email address and, if you tell us, the month of your next trip and whether you’d like to test the app early, to tell you when Leeway is ready and share occasional updates. Every update has a one-click unsubscribe link. If you use the Contact form, we keep your name, email and message so we can reply. This website uses no analytics, advertising or tracking cookies.

No advertising identifiers, analytics or tracking tools, precise location, contacts or browsing history. If you turn on the app lock, Face ID or your passcode is checked by your iPhone; we never receive biometric data.

• To sign you in and keep your account secure.
• To calculate your trip budget and Free to Spend, and to sort purchases on your chosen cards into the right trip. When we can’t tell whether a purchase belongs to a trip, we ask you, and your answer always wins.
• To keep your bank purchases up to date.
• To answer you when you contact us, and to tell waitlist members when the app is ready.

We don’t sell your personal information, share it for cross-context behavioral advertising, or use it to build a profile of you for anyone else.

We share information only with service providers that run parts of Leeway for us, and only what they need:

• Plaid connects your bank. You give your bank login to Plaid directly, and Plaid handles your data under the Plaid End User Privacy Policy.
• Supabase hosts our database and handles sign-in.
• Vercel hosts our servers and this website.
• Resend sends sign-in codes and our emails, and stores the waitlist.
• Apple processes any purchase you make in the app; we never see your payment details.

Your data is stored in the United States. We may also disclose information if the law requires it, or to protect the safety of our users or the service. If Leeway is ever sold or merged, your information would move with it under this policy, and we would tell you first.

So the app opens quickly and works offline, it keeps an encrypted copy of your latest trip data on your phone. The key and your sign-in session are kept in the iPhone Keychain, and both are removed when you sign out or delete your account.

• Account data is kept until you delete your account.
• Deleting your account removes your trips, budgets, plans, purchases and choices, and disconnects every bank through Plaid (which also deletes our stored bank access).
• If a deletion needed our help, we keep a minimal record of that request (no trip or purchase data) for 90 days after its last entry. A request with no activity expires after 30 days.
• Records of bank notices are deleted after 30 days. Our hosting providers keep request logs, including IP addresses, for their standard period.
• Waitlist emails are kept until you unsubscribe or ask us to delete them.
• Our providers’ backups may hold deleted data for their standard backup period before it is overwritten.

• Delete your account anytime in the app: Profile → Delete my account.
• Disconnect a bank anytime in the app: Profile → Banks & cards → your bank → Disconnect.
• Export your purchases as a spreadsheet: Profile → Export my purchases.
• Access, correct or delete your information, or leave the waitlist, by emailing support@leewaytrip.com. We answer within 30 days and may need to confirm the request comes from you.

Some US states (including California and Utah) give residents rights to know, access, correct, delete and get a copy of their personal information, and to opt out of its sale or use for targeted advertising. We don’t sell personal information or use it for targeted advertising, and we honor the other requests for everyone, wherever they live. We won’t treat you differently for using these rights.

If you are in the European Economic Area or the UK, we use your information to provide the service you asked for (contract), to keep it secure and improve it (legitimate interests), and to email the waitlist (your consent, which you can withdraw anytime). You can also object to or restrict our use of your data, and complain to your local data protection authority. Your data is processed in the United States.

Browser “Do Not Track” signals: we don’t track you across sites, so there is nothing for them to turn off.

Leeway is not for children under 13, and we don’t knowingly collect their information. If you believe a child has given us information, contact us and we will delete it.

Information travels over encrypted connections. Bank access tokens are encrypted on our servers and never sent to your phone. Each account can read only its own data. No system is perfectly secure, but we work to protect your information and limit who can reach it, and we will tell you if a breach affects you, as the law requires.

If we change this policy, we will update the date at the top, and we will tell you in the app or by email before a significant change takes effect.

Logan West. Email support@leewaytrip.com.