Awaii – Privacy Policy
Last updated: 2026-01-02
Awaii (“Awaii”, “we”, “us”) is a travel planning and collaboration app operated by Gunnar Erickson. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how it is used, and the rights you have under applicable data protection laws.
1. Who We Are
Data Controller: Gunnar Erickson (Awaii)
Contact: support@awaii.app
Jurisdiction: European Union
2. Information We Collect
2.1 Account & Profile Information
- Email address
- User ID (internal identifier)
- Display name and optional username
- Profile photo (optional)
- Locale, country, and time zone (optional)
2.2 Guest Mode Information
You may use Awaii without creating an account. In this case, we create a pseudonymous guest profile.
- Guest profile ID
- Display name
- Pseudonymous device identifier (hashed)
Guest profiles do not require an email address and can later be linked to a full account.
2.3 Trip & Collaboration Data
- Trips you create or join
- Trip members and roles
- Ideas, notes, plans, and itinerary content
- Expenses and shared cost data (if enabled)
2.4 Files & Media
- Photos and files you upload to trips
- File metadata (size, type, upload time)
2.5 Share & Join Links
- Secure, hashed join tokens
- Link roles, limits, and expiration settings
We never store plaintext invite tokens.
2.6 Location & Places Data
- Locations and places you search for or add to trips
- Map coordinates associated with trip content
We do not track your background location.
2.7 Cover Photos (Unsplash)
Awaii allows you to select optional cover photos provided by Unsplash. When browsing or selecting a cover photo, image identifiers and request metadata may be processed by Unsplash in accordance with their privacy policy.
We do not send your Awaii account information to Unsplash.
2.8 Technical & Security Data
- IP address and request metadata (server logs)
- Device and app version information
3. How We Use Your Data
- Provide and operate the Awaii app
- Enable trip planning and collaboration
- Authenticate users and manage permissions
- Sync data across devices
- Prevent abuse and secure the platform
- Provide customer support
We do not sell personal data and do not use advertising trackers.
4. Legal Bases for Processing (GDPR)
- Contract: to provide the app and its features
- Legitimate interest: security, abuse prevention, and service improvement
- Consent: where required (e.g. optional features)
5. Data Sharing & Sub-Processors
5.1 Supabase
Used for authentication, database storage, file storage, and backend infrastructure. Primary data storage is located in the EU (Stockholm region).
5.2 Mapbox
Used to render maps and display trip locations. Map interactions are not linked to your Awaii account identity.
5.3 Google Places API
Used to search and display place information (e.g. names, addresses, websites). No account or profile data is shared.
5.4 Unsplash
Unsplash is used to provide optional cover photos for trips. Unsplash may receive technical request information (such as IP address) when images are loaded. No Awaii account or profile data is shared.
All providers act as data processors under contractual agreements and standard contractual clauses where applicable.
6. International Data Transfers
Core user data is stored in the European Union. Some third-party APIs (Mapbox, Google) may process limited data outside the EU under appropriate safeguards.
7. Data Retention
- Account and trip data: until you delete it
- Guest profiles: deleted after a period of inactivity or when linked to an account
- Join links: until revoked or expired
- Files and media: until deleted by you
- Logs: retained according to provider defaults
8. Your Rights
Depending on your location, you may have the right to:
- Access your data
- Correct inaccurate data
- Delete your data
- Export your data
- Withdraw consent for optional features
Requests can be made at support@awaii.app.
9. Children’s Privacy
Awaii is not intended for children under 13 (or under 16 in the EU). We do not knowingly collect personal data from children.
10. Security
We use industry-standard security measures including encryption in transit, access controls, and row-level security. No system is perfectly secure, but we take reasonable steps to protect your data.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The “Last updated” date above reflects the latest version.
12. Contact
Email: support@awaii.app
Website: https://awaii.app