This Privacy Notice for flock describes how and why we collect, store, use, and share your personal information when you use our services. Questions? Contact us at tripwithflock@gmail.com.
We collect personal information you voluntarily provide when you register or use our Services, including names, email addresses, usernames, and passwords. We do not store payment card details — all payment data is handled securely by Stripe. See stripe.com/privacy.
We process your information to create and manage your account, deliver our trip planning services, fulfil payments and credits, enable communication between group members, and respond to support requests.
We process your information based on performance of a contract, your consent, and legal obligations. If you are in the EU, UK, or Canada, you may withdraw consent at any time by contacting us.
We do not sell your personal information. Your display name is visible to other members within your trip groups. We share data with service providers Stripe (payments) and Anthropic (AI features) under written contracts, and may share in connection with a business transfer or legal requirement.
We use cookies to maintain the security of your session and keep you logged in. We do not use cookies for advertising or tracking. You can set your browser to reject cookies, though this may affect certain features.
flock uses AI features powered by Anthropic (Claude) for itinerary generation, destination briefs, and packing list analysis. When you use these features, your inputs (such as destination name, group size, dietary preferences and stated interests) are processed by Anthropic to produce the response. We do not share personally identifiable information beyond what is necessary to fulfil your request, and we instruct the model to treat user inputs as data, not commands. Anthropic does not train its models on data sent through the API.
If you subscribe to Seasonal or Pro, billing is handled by Stripe. flock receives a Stripe customer ID, your current subscription status (active, canceled, past_due), the billing cycle (monthly or annual), and the next billing period end. We do not store your payment card details — these are held by Stripe under their PCI-compliant infrastructure. Paid plans include a 7-day free trial. Your card is authorised at sign-up but not charged until the trial ends; if you do not cancel before then, the plan auto-renews and billing begins. You can cancel any time from your profile; access continues until the end of the current paid period. When you delete your account, your Stripe subscription is cancelled and all subscription metadata stored by flock is deleted.
When a trip admin invites someone by email through flock, we look up whether a flock account exists for that email so we can route the invite to the right user. The invited email address is stored against the invite record until the invite is accepted, declined, or the invite is deleted. We do not contact invited emails outside the flock app and we do not use these addresses for marketing.
We retain your personal information for as long as you have an active account. When you delete your account, all your data is permanently deleted. We may retain limited information where required by law.
We use industry-standard security infrastructure to protect your data. However, no electronic transmission over the Internet can be guaranteed 100% secure. You should only access our Services within a secure environment.
We do not knowingly collect data from children under 18. By using our Services, you confirm that you are at least 18 years old. Contact us at tripwithflock@gmail.com if you become aware of any such data.
You may access, correct, or delete your personal information at any time via your profile settings. To delete your account and all associated data, use the delete account option in your profile. For any other data requests, email tripwithflock@gmail.com. If you are in the EEA or UK and believe we are unlawfully processing your data, you may complain to your local data protection authority.
We do not currently respond to Do-Not-Track browser signals as no uniform standard has been finalised.
If you are a US resident, you may have rights including the right to know, access, correct, and delete your personal information. We do not sell personal information. To exercise your rights, email tripwithflock@gmail.com.
We process personal information in accordance with GDPR (EU/UK), PIPEDA (Canada), Australia's Privacy Act 1988, New Zealand's Privacy Act 2020, and South Africa's POPIA. Contact your local data protection authority if you believe we are unlawfully processing your information.
We may update this Privacy Notice from time to time. The date at the top of this page reflects the most recent update.
flock — Data Protection Officer
tripwithflock@gmail.com