Information we collect
We collect information you provide, information needed to run the service, and information from features you choose to use. You can keep a journal for yourself or invite other people to contribute.
- Account information: Google sign-in identifiers, name, email address, and profile image, along with your chosen display name, avatar, and preferences. We do not receive your Google password.
- Journal content: journal titles, covers, dates, membership and invitations, photos, videos, captions, written memories, comments, and photo-book drafts you save.
- Places and photo metadata: locations you add and capture dates, times, and coordinates available in media you select. Location metadata can reveal precise places you visited. Media files may also contain embedded metadata.
- Notifications: if you enable notifications, we store a push token and installation identifier, platform information, notification preferences, and delivery status.
- Technical and support information: information you send when contacting support and technical information needed for authentication, operation, and security. Our infrastructure providers may process IP addresses, request logs, and device or browser information when serving requests.
Device permissions and local features
Caravan requests access to photos, microphone, location information, or notifications when a feature needs it. Selecting photos does not mean your entire library is uploaded. Photo and location permissions help read the dates and places attached to selected media; Caravan does not continuously track your background location.
Optional voice transcription and supported writing assistance run on your device using Apple's frameworks. Caravan does not send voice recordings to a remote transcription or AI provider for these features. A transcript or edited memory you choose to save becomes journal content and is stored with your journal. Uploaded videos may contain audio.
Authentication credentials and local drafts or caches may be stored on your device. You can change permissions in your device settings at any time. Turning off a permission stops future access through that permission; it does not remove information already saved to a journal.
How we use information
We use information to authenticate you, save and display journals, support collaboration and invitations, organize memories by day and place, generate photo-book previews, apply preferences, deliver optional notifications, respond to support requests, and maintain the service's reliability and security.
Coordinates and dates can also be used to identify a place or retrieve weather for a journal day. We do not sell personal information or use it for targeted advertising. Caravan uses PostHog US Cloud for app reliability monitoring and product analytics. We send operation outcomes, performance measurements, counts and sizes, app and device information, sanitized errors, and opaque account and operation identifiers. We exclude journal content, media, precise locations, names, emails, invitation codes, and credentials from this telemetry. Session replay is disabled. PostHog receives ordinary network information, including IP addresses, when receiving telemetry; we disable geographic enrichment.
Where applicable law requires a legal basis, we process information to provide the service you request, pursue legitimate interests such as security and support, comply with legal obligations, or with your consent where required. You can withdraw consent for optional features without affecting processing already performed lawfully.
Retention and deletion
We retain account and journal information while it is needed to provide the service, including content you keep in active journals. You can remove content through the app where your role permits, or request account deletion in Profile → Delete account.
When deleting an account, you can transfer journals you own to another member or delete them. Account deletion removes your account and authored journal contributions, including your uploaded media, memories, and comments. A transferred shared journal can continue with other members' contributions; deleting an owned journal removes its content for all members.
Deletion uses background cleanup, so removal from storage may take time. Limited information may remain in logs or backups under provider retention cycles, or where necessary for legal obligations, security, or resolving disputes. Deletion cannot recall copies other members previously downloaded or captured.
Your choices and rights
You can update your profile and preferences, choose whom to invite, manage device permissions and notifications, remove eligible content, and delete your account. For access, correction, a copy of your information, deletion, or other privacy requests, contact us using the email below. We may need to verify your identity to protect your account and other journal members.
Depending on where you live, you may also have rights to restrict or object to processing, withdraw consent, receive portable information, or complain to a data-protection authority. We respond in accordance with applicable law. Some requests may be limited by legal requirements or other people's rights.
Security and international processing
We use safeguards such as authenticated journal membership checks, encrypted network connections, and time-limited media access URLs. Journals are not end-to-end encrypted. No service can guarantee absolute security; keep your account and invitation codes secure.
Our providers may process information in countries other than your own. Where required, we use appropriate safeguards for international transfers under applicable data-protection law.
The Caravan website
The current website provides public information, including these documents. It does not provide journal sign-in, use advertising or analytics trackers, or set application cookies. Hosting providers may process ordinary request information to deliver and secure the website. If website features or data practices change, we will update this policy.
Children's privacy
Caravan is not directed to children under 13. We do not knowingly collect personal information from children under 13, or below a higher minimum age where local law requires it. If you believe a child has provided information inappropriately, contact us so we can investigate and take appropriate action.
Changes to this policy
We may update this policy as Caravan evolves or legal requirements change. The date above identifies the latest revision. For material changes, we will provide additional notice and obtain consent where required by law.
Contact us
Caravan is operated by Creative Melon LLC. For questions about this policy or your personal information, email support@caravantogether.com.