Legal

Privacy Policy

Effective and last updated: August 14, 2026

JSG Travel Tools Inc., doing business as Allpacko ("Allpacko," "we," "us," or "our"), operates the Allpacko iOS application, website, and related services (collectively, the "Services"). This policy explains what information we collect, where it comes from, how we use and disclose it, how long we keep it, and the choices available to you.

1. Information we collect

Information you provide

• Account and profile information: your phone number, verification status, name, display name, and profile details.
• Trip and packing content: trip names, destinations, dates, travelers, packing lists, reusable bundles, assignments, to-do items, and packing progress.
• Family and invitation information: family-group details and the names and phone numbers of people you add or invite.
• Support information: the content of messages, feedback, and other information you send when you contact us.

Information collected from your device or use of the Services

• Contacts you select: if you grant Contacts access and deliberately choose a contact, we use the selected name and phone number to fill an invitation or traveler form. You can always enter this information manually.
• Device and notification information: device type, operating-system and app version, app instance or device identifiers, notification preferences, and an Apple Push Notification service token when you enable notifications.
• Usage and analytics information: screens viewed, feature interactions, app lifecycle events, timestamps, and identifiers associated with your account. In production builds, our analytics provider may capture session replay with text inputs and images masked and may collect network-performance telemetry. We do not use this information for cross-app advertising.
• Diagnostics: crashes, errors, logs, performance measurements, and diagnostic screenshots that may show the state of the app when an error occurs.
• Purchase information: product identifiers, subscription or entitlement status, and transaction-related information supplied by Apple or our subscription-management provider. We do not receive your full payment-card number.
• Website technical data: our hosting provider may process IP address, browser and device information, requested pages, timestamps, and security logs when you visit allpacko.com.

Information we do not use

Allpacko does not collect precise location through the App, display third-party advertising, sell personal information, or track you across apps and websites owned by other companies for advertising.

2. How we use information

• Provide phone authentication and maintain your account.
• Create, synchronize, and share trips, family groups, packing lists, assignments, and progress with the people you choose.
• Send requested invitations, authentication codes, and optional push notifications.
• Process purchases, restore entitlements, and provide paid features.
• Operate, secure, troubleshoot, analyze, and improve the Services.
• Respond to support requests and communicate important service or policy changes.
• Comply with law and protect the rights, safety, and integrity of users, Allpacko, and others.

3. How we disclose information

We disclose information only as needed for the purposes described above:

• People you collaborate with: names, trip details, lists, assignments, and progress are visible to the family or trip participants with whom they are shared. Phone numbers are used for authentication and invitations and are not displayed as public profile information.
• Supabase: database, authentication, storage, and backend infrastructure.
• Twilio: phone authentication and requested SMS delivery.
• Apple: TestFlight and App Store distribution, in-app purchases, and push notifications.
• RevenueCat: subscription and entitlement management.
• PostHog: product analytics and masked session replay.
• Sentry: crash reporting, diagnostics, logs, and performance monitoring.
• Vercel: website hosting, delivery, and security logging.
• Legal, safety, and business needs: when required by law; to protect users or the Services; or in connection with a merger, financing, acquisition, or sale, subject to appropriate protections.

We require service providers to process information only for contracted purposes and to protect it at least as required by applicable law and this policy. Their handling of information is also governed by their own privacy notices.

4. SMS and push notifications

We use SMS for one-time authentication codes and invitations you or another user requests. Message frequency varies; message and data rates may apply. Reply STOP to stop supported non-authentication messages and HELP for assistance. Stopping SMS can prevent phone authentication or invitations from working.

Push notifications are optional. You can change notification categories in Allpacko and revoke system permission in iOS Settings.

5. Retention and deletion

We keep account and user content while your account is active and as needed to provide the Services. Operational logs, security records, transaction records, and backups may be retained for a limited additional period when reasonably necessary for security, fraud prevention, dispute resolution, financial recordkeeping, or legal compliance. Retention periods vary by data type and purpose.

You can delete individual trips and bundles in the App where the feature is available. To request access, correction, export, or deletion of your account and personal information, visit our Privacy Choices page or email support@allpacko.com. We may need to verify that the phone number or account belongs to you. We will delete or de-identify information unless retention is required or permitted by law. Deleting an account does not necessarily remove content that another user independently owns or must retain in a shared trip record.

6. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing of, or receive a portable copy of your personal information, and to appeal a denied request. You may also withdraw permission for Contacts or notifications in iOS Settings. Withdrawing permission does not affect processing that occurred before withdrawal.

We do not sell or share personal information for cross-context behavioral advertising. To exercise a privacy right, use the methods in Section 5. We will not discriminate against you for exercising a privacy right.

7. Children

The Services are not directed to children under 13, and a person under 13 may not create an Allpacko account. A parent or guardian may create and manage a traveler profile for a dependent within their own family group. If you believe a child submitted personal information directly to us without appropriate authorization, contact us so we can investigate and delete it where required.

8. Security and international processing

We use administrative, technical, and organizational safeguards designed to protect information, including encrypted transport, authentication controls, and database access policies. No system is completely secure. Our providers may process information in the United States and other countries where privacy laws may differ from those where you live.

9. Changes to this policy

We may update this policy as the Services or law changes. We will post the revised policy here, update the date above, and provide additional notice when required.

10. Contact us

For questions or privacy requests, contact: