Privacy Policy

At Arrive Ready, we build software designed to help long-haul travelers protect their sleep, health, and itineraries. We value your trust and are committed to handling your personal, travel, and sleep data with the highest standards of integrity and security.

1. Information We Collect

To generate and sync your personalized circadian jetlag plans, we collect the minimum required data to make the service function:

• Account & Identity Data: Your email address, collected during login authentication or free preview steps. This is used to authenticate your access, send transaction receipts, manage support questions, and check your refund eligibility.
• Travel & Itinerary Data: Flight numbers, airline carriers, departure/arrival airports, times, and dates for up to 10 flight segments. This data is required for our rules engine and AI calendar generation to map timezone shifts, layovers, and travel durations.
• Sleep & Wellness Profiles: Your baseline sleep patterns (usual bedtime and wake time), normal sleep quality, plane sleep abilities, and optional preferences (caffeine sensitivity, optional melatonin usage, electrolyte usage, and arrival commitments).
• Payment Details: All payments are processed securely through Stripe. Arrive Ready does not collect, access, or store your credit card numbers or raw billing credentials.

2. How We Use Your Information

We use the data we collect solely to provide and improve our circadian planning services:

• To construct and display your detailed sleep, light, nap, and caffeine schedule.
• To sync and update events natively in your connected Google Calendar or hosted ICS feed.
• To process single-trip transactions and execute our 14-day trip-saver refund guarantee.
• To allow you to recalculate your schedule in real time if your flights are delayed or plans change.

3. Data Sharing & Third-Party Services

We do not sell, rent, or lease your personal data to advertisers, brokers, or third parties. We share data only with third-party service providers (subprocessors) that perform core operational infrastructure tasks under strict confidentiality requirements:

• Google Firebase: Used for secure user account authentication, database hosting (Firestore), and secure app hosting.
• Stripe: Used to process payments and handle billing.
• Google Gemini API: Used to generate plain-text calendar event descriptions and custom science insights from your flight segments. Data sent to the Gemini API is processed under enterprise safety and confidentiality agreements and is not used to train public models. Direct account identifiers (such as your email address and user ID) are stripped before sending itinerary and sleep preference parameters to the model.

4. Hosted Calendar Feeds & Public URLs

If you choose to subscribe to your schedule via our hosted webcal calendar link (`.ics` feed), your calendar app periodically requests updates using a unique, random feed token. Because calendar subscription protocols operate via tokenized URL access without traditional browser login cookies, anyone possessing your exact feed link can view your itinerary schedule updates. You should treat your subscription feed link as private and avoid sharing it publicly.

5. Security, Retention, & Deletion

We use industry-standard encryption protocols (HTTPS in transit, Firestore encryption at rest) to secure your information.

We retain your trip itinerary and sleep preferences in your account to allow for same-trip replans. You may delete your account and request complete scrubbing of your personal information and itineraries at any time directly through your Traveler Dashboard settings or by emailing us at support@arriveready.app.

6. International Data Transfers

Arrive Ready operates from infrastructure hosted primarily in the United States by Google Cloud / Firebase and Stripe. If you access the service from outside the United States (including the European Economic Area, United Kingdom, or Switzerland), your data is transferred to, stored, and processed in the U.S. under appropriate legal safeguards, including Standard Contractual Clauses (SCCs) and enterprise data processing addenda.

7. Your Privacy Rights (GDPR & CCPA/CPRA)

Depending on your location, you may have specific statutory rights regarding your personal information:

• Right to Access & Portability: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate personal data.
• Right to Deletion (Scrubbing): Request complete erasure of your account, flight records, and preferences.
• Right to Restrict or Object to Processing: Object to or restrict processing of your data under specific conditions.
• No Sale or Sharing of Personal Data: Arrive Ready does not sell, rent, or share your personal data with third parties for cross-context behavioral advertising.

To exercise any of these rights, email us at support@arriveready.app. EU/UK residents also have the right to lodge a complaint with their local Data Protection Authority (DPA).

8. Children's Privacy

Our service is designed for adult travelers. We do not knowingly collect, request, or retain personal information from individuals under the age of 16. If we learn we have collected such data, we will delete it immediately.

9. Updates to This Policy

We may occasionally update this Privacy Policy. When we make changes, we will update the "Last updated" date at the top of this page. Your continued use of the service after an update constitutes acceptance of the revised policy.

10. Contact Support

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact our team at support@arriveready.app.