Effective: October 30, 2026
Ojee Labs built Caravan as a free app for coordinating group trips on iPhone and Android: a live map of the group, meeting points, a shared itinerary, a shared photo album and a group chat. This Privacy Policy explains what data is collected when you use the app, who can see it, how it is used, and your rights with respect to it. Caravan has no ads, and we do not sell your data.
Who We Are
Caravan is developed and published by Ojee Labs. For any privacy-related questions or requests, you can reach us at:
- Email: support@ojeelabs.com
- Website: ojeelabs.com
Data We Collect
Your account
- Sign-in — Your email address and password, or your Google or Apple account, handled by Firebase Authentication (by Google). If you sign in with Apple and choose to hide your email, we receive Apple's private relay address instead. We never see your password.
- Profile — The name you use in Caravan and, if you add one, a profile photo. With Google, your Google name and photo are used to start with; with Apple, the name Apple shares the first time you sign in. You can change your name and photo in Settings.
- Notification token — If you allow notifications, a push token for your device, so we can send you trip notifications through the Expo push service.
Your trips
Everything below is stored with the trip (a “Caravan”) it belongs to, and is visible only to that trip's members, as described.
- Trip details — Title, description, image, dates, the list of members and their roles, and the trip's join code. Visible to the trip's members.
- Invitations — When an organizer invites someone, the invitee's email address is stored with the invitation so it can appear in their Invitations list once they sign in with that email.
- Itinerary items and Rendezvous points — Titles, times, addresses or map locations, and who each one is visible to. Visible to the members it is shared with.
- Photos — Each photo you add is stored twice: a smaller preview shown in the album, and the original file, which members can export. Originals are stored as your phone saved them, and may include metadata your camera recorded, such as when and where the photo was taken. Tags on a photo (who is in it, which moment it is from) are stored with it. Photos are visible to all members of the trip.
- Chat messages, comments and reactions — What you write in the trip's group chat and in comment threads, your emoji reactions, and read receipts showing which members have seen a message. Chat and photo comments are visible to all members; comments on an itinerary item or Rendezvous point are visible to the members who can see that item.
Your location
- Live location — Caravan shares your precise location with a trip only if you turn on location sharing for that trip. It is off until you turn it on, and it is shared only while the trip is in progress, including in the background so the group can find you when the app is closed. Your latest location is stored with the trip and visible only to its members.
- When it stops — Sharing stops, and your stored location is deleted, when you turn sharing off, the trip ends, you leave or are removed from the trip, or you sign out.
- Address search — When you search for an address in Caravan, what you type is sent to Google Places (or, if Places is unavailable, OpenStreetMap's Nominatim service), along with your approximate current area so results near you come first.
- We do not keep a history of where you have been. Only your latest location is stored, and only while you share it.
Analytics
- Usage events — Summary events collected via PostHog, such as when a trip is created, an invitation is sent or accepted, the map or chat is opened, a meeting point is created, or a photo is added or exported. Events are linked to your account ID only, and include no names, email addresses, message text, photos, addresses, place names or locations.
- No location in analytics — PostHog's IP-based location lookup is turned off, so analytics never include where you are, not even your country.
- Device information — Device model, operating system and version, app version, and language. Used to find bugs and prioritize compatibility fixes.
Data Stored Only on Your Device
The following stays on your device and is never sent to us:
- Whether you've seen the intro slides and in-app tips
- Which trips your device is currently sharing location with, so sharing can continue in the background
Permissions
- Location — Asked for only when you turn on location sharing for a trip. “Always” access lets the group find you while the app is in the background; you can choose “While Using” or turn it off at any time in your phone's settings.
- Camera and photo library — Used only when you take or choose a photo for a trip, your profile, or a trip image.
- Notifications — Used for trip notifications such as invitations, meeting-point alarms, new chat messages and comments. You can turn them off for one trip, for your whole account in Settings, or in your phone's settings.
Data We Do Not Collect
- Your contacts or calendar
- Your advertising identifier (IDFA or Android advertising ID). We do not track you across other apps or websites.
- Your microphone
- A history of your movements
- Payment card details or financial information
- Any data from other apps on your device
Who Can See Your Data
Trip content is shared with the other members of that trip, as described above. Organizers can remove members and delete content in their trip. If you are removed from a trip, or a trip is deleted, you lose access to it. Nobody outside a trip can see its content, and Caravan has no public profiles or search.
Third-Party Services
The app uses the following third-party services, each of which has its own privacy policy:
- Google Firebase — sign-in, the database and file storage that hold your account and trips, and the servers that send notifications. Governed by Firebase's privacy and security information and Google's Privacy Policy.
- Google Sign-In and Sign in with Apple — if you choose to sign in with them. Governed by Google's Privacy Policy and Apple's Privacy Policy.
- Google Maps and Google Places — maps on Android and address search. Governed by Google's Privacy Policy. On iPhone, maps are provided by Apple Maps under Apple's Privacy Policy.
- OpenStreetMap Nominatim — address search when Google Places is unavailable. Governed by the OpenStreetMap Foundation's Privacy Policy.
- Expo — delivery of push notifications to your device. Governed by Expo's Privacy Policy.
- PostHog — usage analytics. Governed by PostHog's Privacy Policy.
We do not sell your data to any third party. We do not show ads or share your data with advertisers.
Data Retention and Deletion
- Your location is deleted as soon as you stop sharing it (see above).
- Trip content stays with the trip as part of the group's record of it, including after the trip ends, until an organizer deletes it or deletes the trip. Deleting a trip deletes its details, members, itinerary, meeting points, photos, chat and comments.
- Deleting your account — You can delete your account at any time in Settings. This removes you from every trip, deletes trips where you are the only member, and deletes your profile, profile photo, pending invitations and sign-in. Photos, messages and comments you added to trips with other members stay in those trips under the name you posted them with, as part of the group's record. If you used Sign in with Apple, Caravan's access to your Apple ID is revoked. If you are the only organizer of a trip with other members, you'll be asked to make someone else an organizer, or delete the trip, first.
- Analytics events are retained for up to 24 months and then deleted.
Children's Privacy
Caravan is not directed to children under 13, and we do not knowingly collect personal information from them. Caravan includes chat and location sharing between members of a trip, so children should use it only with a parent or guardian's involvement. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.
Your Rights
Depending on where you live, you may have rights over your personal data under laws such as the GDPR (European Union and United Kingdom) or the CCPA (California). You may:
- Access, correct, or get a copy of the personal data associated with your account
- Delete your account, in Settings or by contacting us
- Ask us to delete specific content you added to a trip
- Withdraw consent to location sharing or notifications at any time, in the app or in your phone's settings
- Opt out of analytics by contacting us
To exercise any of these rights, contact us at support@ojeelabs.com from the email address on your account.
Security
We use industry-standard practices to protect your data. All data is sent over encrypted HTTPS connections. Access to trips is enforced by security rules on our servers, so only a trip's members can read its content, and only the people allowed to change something can change it.
Changes to This Policy
If we make material changes to this Privacy Policy, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of the app after changes are posted constitutes your acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy or how your data is handled, please reach out:
- Email: support@ojeelabs.com
- Website: ojeelabs.com