Privacy, plainly stated.

Last updated: September 26, 2026

Website signups and beta invitations

When you join our early-access list, we collect your email address and whether you requested iPhone beta access. If you request beta access, we send a verification link and keep a one-time verification token in hashed form, its expiration time, invitation status, attempt count, and limited operational error information. The link expires after 48 hours. After you verify your address, we provide that email address to Apple so Apple can issue a private TestFlight invitation, and we send our beta instructions separately. We use this information for updates, invitations, security, troubleshooting, and product planning. We do not sell your personal information.

Accounts and saved information

Sign-in is provided through Supabase and your selected sign-in provider. Supabase processes your account identifier, email address, authentication information, and profile information returned by that provider. Account-backed plan activity is stored in Supabase. The beta also stores trip dates and times, optional hotels, preferences, saved plans, reviews, and reminder identifiers on your device. Local-only plans are not automatically synced to other devices.

Optional location

When you choose to use your location for nearby recommendations, the app asks for foreground location permission. Depending on your phone settings, this can be precise or approximate. We send those coordinates to our service and Google Maps Platform to find nearby places and estimate routes. We do not request background location or operate a location-history feature. You can deny permission or change it in your phone settings and continue planning by city.

Trusted-contact messages

In supported builds, you can select up to three trusted contacts using your phone’s contact picker, or enter them manually, in Account & privacy. We retain only the names and phone numbers you choose and confirm, not your entire address book or other contact details. Their names, numbers and your sharing preferences are stored for your account on this device, not uploaded to our server or included in crew shares. After your consent, you can prepare a one-time help or test message with your active itinerary and, if enabled and available, a timestamped foreground location and a Google Maps link. These location fixes are not saved by Layover Larry. The app opens your phone’s message composer; you review recipients and tap Send. Recipients may see each other’s numbers in a group conversation. Messages are handled by your messaging provider and recipients; opening the map link involves Google. Your hotel name and address are not attached. You can remove contacts and consent in Account & privacy and revoke location permission in phone settings. Account deletion removes these local settings, but cannot recall sent messages or erase recipients’ copies. Device backups may retain local data according to your device settings. This is not live tracking, automatic alerting, or an emergency service; delivery and responses are not guaranteed.

Searches and service providers

Requested searches send relevant city, hotel or starting area, dates, travel preferences, and categories to our service. Optional interests, including LGBTQ+ venue preferences, can be part of a search; they are not a requirement to use the app. We use Google Maps Platform for places, autocomplete, photos and routes, subject to the Google Maps Platform Terms and Google Privacy Policy. We use Ticketmaster for live events under its Privacy Policy. Cloudflare hosts our service under its Privacy Policy. These providers may retain operational or security records under their own terms. Our abuse-prevention database stores hashed request identifiers derived from IP addresses, counters and timestamps; it periodically removes entries older than 24 hours. Infrastructure providers may separately retain operational or security logs.

Reminders

If you enable reminders, the app asks for notification permission and schedules local notifications on your device. You can turn notifications off in your phone settings.

External bookings and affiliate links

Optional booking links open outside Layover Larry with providers such as Expedia, Ticketmaster, or Viator. Eligible links include affiliate identifiers, and we may earn a commission from qualifying bookings at no extra cost to you. The booking provider handles payment details, reservations, and information you supply under its own terms. We do not receive your payment-card details through these links. Affiliate availability does not determine the order of our place recommendations. Review the Expedia Privacy Statement, Ticketmaster Privacy Policy, and Viator Privacy Policy before providing information to those services.

Your choices and deletion

You can remove saved plans in the app and change location or notification permissions in your phone settings. In supported beta builds, Account & privacy offers account deletion. This removes your sign-in account, associated cloud activity and reviews, and that account’s saved data on the current device, including beta data you imported into that account. Other profiles and unclaimed beta data are kept, and app reminders are cancelled. Other devices are not remotely erased. If you used Sign in with Apple, Layover Larry deletes its account and data, then directs you to your Apple Account so you can manually stop using Apple ID with Layover Larry; Layover Larry does not retain the Apple access or refresh token needed to perform that separate provider revocation automatically. Deleting the app alone does not delete your account or website early-access registration. External reservations must be managed with the booking provider. Contact us to request removal from the early-access list.

Temporary deletion recovery records

To recover from an interrupted deletion, we keep a separate record in Supabase containing your account ID, a hashed recovery token, and creation, completion (when confirmed), and expiry times. It contains no email address, saved plans or reviews. This record survives account deletion so the app can check whether deletion succeeded. Status lookup expires 30 days after preparation; an hourly cleanup removes expired records, normally within an additional hour. Service outages can delay cleanup. Your phone keeps the recovery token in secure storage and local deletion/cleanup records until device cleanup succeeds. An unknown or expired result does not prove deletion; contact us if recovery cannot finish.

Retention limits

Deleting an account does not instantly erase infrastructure logs, provider records or backups, which may remain under the relevant service’s retention procedures. We have not yet verified every provider’s retention period. Deletion-recovery request limits use aggregate counters rather than storing IP addresses in the recovery records; the search-service abuse-prevention records described above are separate.

Questions

Contact crew@layoverlarry.com for privacy questions and requests.