Privacy policy
Your data,
packed light.
SpikSpak is a group trip planner. We collect what the app needs to plan trips with your crew, and nothing for advertising.
The short version
- We don't sell your data or show you ads.
- There are no analytics or advertising trackers on spikspak.com.
- Your location is used only while the app is open, and only to show maps and places near you.
- Email hello@spikspak.com and we'll delete your data.
What we collect
| Data | Why |
|---|---|
| Waitlist email | To invite you to the private beta. That's the only thing we use it for. |
| Account details (name, email, password) | To sign you in. Passwords are handled by Firebase Authentication. We never see them. |
| Trip content (itineraries, activities, lists, expenses, invites) | So you and the people you invite can plan the trip together. It's shared only with members of that trip. |
| Files you upload (tickets, boarding passes, documents) | To keep them with the trip they belong to. |
| Your location, while the app is open and only if you allow it | To center the map and find places near you. |
| Flight and stay searches | To show fares and places to stay. Booking isn't live during the beta. When it is, passenger names and details will go to the airline to create the booking. |
| Profile photo, if you add one | To show who's who on a trip. Other signed-in SpikSpak users can see it. |
Who helps us run SpikSpak
We use a few providers to run the service. Each one gets only what it needs to do its job:
- Google Firebase: hosting, sign-in, database, file storage and server functions.
- Mapbox: maps, directions and place search. It receives map locations and search text.
- Duffel: flight and stay search. It receives your searches and, once booking is live, passenger details.
- SendGrid: account and trip emails. It receives your email address and the email's content.
- Uber, Lyft, Google Maps and Apple Maps: when you tap a ride or directions button, we open their app with the destination filled in. From then on, their privacy policy applies.
When you visit the site
Like any website, spikspak.com is served by a hosting provider (Google Firebase) that keeps standard request logs, including your IP address and browser type, for up to 30 days. The pages load fonts from Google Fonts and code libraries from cdnjs and unpkg, and those services also see your IP address. We don't use cookies for tracking.
How long we keep it
We keep your account and trips until you delete them or ask us to. Waitlist emails are kept until the beta invite goes out, or until you ask us to remove yours. To slow down abuse, the waitlist form keeps a hashed copy of the sender's network address, which is deleted automatically within about two days.
Your choices
- Access, fix or delete your data: email hello@spikspak.com from the address on your account and we'll handle it.
- Location: turn it off at any time in your phone's settings. The app still works without it.
- Leave a trip: trip owners can remove people from their trips. If you want to be removed, ask the owner or email us.
Children
SpikSpak isn't meant for children under 13, and we don't knowingly collect their data.
Changes
If this policy changes in a way that matters, we'll update this page and tell account holders by email.
Contact
Questions? Email hello@spikspak.com.
Last updated 19 October 2026