Archie Mobile App — Privacy Policy

Last updated October 2026

Overview

Archie is a personal travel-companion app. This policy describes what information Archie collects, how it’s used, and who it’s shared with.

Information we collect

Account information you provide: name, email, a password (see “Security” below), and optionally phone, address, birthday, and a profile photo.

Trip information: destination, dates, confirmation numbers, and similar details from a booking confirmation you paste or forward, or — only if you turn on “Add trips by email” — from an email you forward to a shared inbound address.

Search queries you type into Recommendations/Explore, tied to your account.

Ask assistant conversation history, tied to your account.

Your device’s live location, only at the moment you use Near Me or ask the assistant a location-aware question.

Expenses and budgets you enter or scan, and an emergency contact’s name, phone number and relationship if you add one.

Places you save, travel goals, notes and journal entries.

A push token for your device, if you allow notifications.

Two more kinds of location, both described below: a live location you choose to share with a Travel Connection, and the spot where you park, which stays on your phone.

How we use it

Your stated interests, food preferences, and allergies re-rank recommendations toward what you’ll likely enjoy — nothing is ever hidden because of them, just reordered, and allergy-flagged dining is excluded outright. Trip details drive weather, packing lists, and day-by-day itinerary content. Questions you ask the assistant are answered using your trip’s real data. Search queries are logged purely to learn what travelers wish Archie covered better — never to change what your own search shows you.

Who we share it with

Each of the following receives only what it needs to answer one specific request — a city name or coordinates, not your name, email, or account details — except where noted:

• Anthropic (Claude) — for the Ask assistant’s answers, for generating a destination’s curated recommendations, and for reading receipts you scan. Your question and relevant trip context, or the receipt photo, are sent to produce that one answer.
• Open-Meteo — weather forecasts, by city name/coordinates only.
• OpenStreetMap (via the Overpass API) and Geoapify — dining, shopping, and landmark lookups, by coordinates only.
• Wikipedia — city facts and landmark photos, by place name only.
• Unsplash — destination photos, by city name only.
• Google (Gmail API) — only if you turn on “Add trips by email”: a forwarded booking email is received at a shared inbound address Archie controls (not your personal inbox), matched to your account by its sender address. Gmail is also used to send you a password-reset code when you request one.
• Google (Sign-In) — only if you choose “Sign in with Google”: your name, email, and Google account ID are shared to create or verify your account.
• Google (Calendar) — only if you connect Google Calendar in Settings: your trip dates and confirmed reservation details are written to a calendar Archie creates inside your own Google account. Archie never reads your existing calendar.
• Vapi and ElevenLabs — only if you tap “Call to reserve”: Archie places a real, disclosed AI phone call to the restaurant on your behalf. To place the call we send the restaurant’s name and phone number, your name, and the reservation details you provide. If the restaurant asks to hold the table, the call can give your phone number or email, and it can mention allergies you have saved. If the restaurant asks for a card, Archie never gives one: it calls your phone and connects you to the restaurant so you can give it yourself, and your phone number is sent to Vapi to do that. The call recording and transcript are stored by Vapi and used to determine the outcome.
• Expo and Google (Firebase Cloud Messaging): only if you allow notifications. Your device’s push token and the text of each notification are sent through these services to deliver it.
• Viator — bookable-tour search results, by city name and your stated interests; no account details are shared.
• RevenueCat — manages in-app purchases and subscriptions. Your purchase history and a device-linked subscriber ID are shared to keep your premium access in sync across devices.
• Sentry — crash and error reports, to help us fix bugs. These can occasionally include technical details about what the app was doing when the error occurred, never your password.

We do not sell your data, and we do not share it for advertising or marketing. Archie doesn’t use any third-party analytics or ad-tracking SDKs.

International data transfers

Archie is operated from the United States, and some of the third parties listed above (Anthropic, Google) are also based in the United States. If you’re located outside the US, the information described in this policy may be transferred to, stored, and processed in the United States, where data protection laws may differ from those where you live. Where required, we rely on appropriate safeguards for these transfers, such as standard contractual clauses with our service providers.

Location

Your device’s location is used live, for the single request that asked for it (a Near Me lookup, or a location-aware question to the assistant) — it is not stored after that request completes. The two exceptions, a live location you choose to share with a Travel Connection and the parked car’s location in Parking Locator (which stays on your phone), are described below.

Parking Locator (background location)

If you tap “Mark my spot,” Archie saves your parked car’s location on your phone only. If you also allow location access all the time, Archie sets one 50 meter geofence around that spot using your phone’s geofencing service, so it can clear your parking reminder when you walk back to your car. This does not record where you go. The parked spot is never sent to our servers, and the geofence is removed when it fires or when you tap “I’m back at my car.” You can turn off background location in your phone’s settings at any time, and clearing the reminder by hand keeps working.

Travel Connections

If you connect with another traveler and choose to share your live location with them, your name and current location are sent to our servers and shown to that traveler until the share expires or you stop it. You choose each share. We use it for nothing else.

Voice input

If you tap the microphone in Ask, your phone’s speech recognition service turns your voice into text. Archie receives only the text. We do not receive or store your audio.

Notifications

If you allow notifications, we store a push token for your device and send notifications through Expo’s push service and Google’s Firebase Cloud Messaging. Those services receive the token and the text of the notification.

Photos

If you choose to add a profile picture, a trip photo, or a photo of a port of call, or to scan a receipt, the app can access your camera or photo library. Photos you add are stored with your account; we never access your camera roll except when you actively choose to pick or take a photo. A receipt you scan is sent to Anthropic to read the merchant, date and amount. The receipt photo is deleted a week after your trip ends; the merchant, date and amount stay with your expenses.

Hosting

Our servers run on Google Cloud, and your account data is stored in a database hosted by Supabase. Both act as our service providers.

Biometric lock

If you enable Face ID/fingerprint lock, the actual biometric data is handled entirely by your device’s own operating system — Archie never sees or stores it. Archie only stores the on/off preference itself, on your device.

Data retention and deletion

Deleting your account (available any time from Profile > Personal Information, right in the app) removes your profile, trips, Ask conversation history, search history, and any pending password-reset codes. This happens immediately and is not reversible. Recordings and transcripts of any AI phone calls Archie placed on your behalf are retained by Vapi under its own retention policy and are not automatically deleted alongside your account — contact us if you need one removed.

You can also ask us to delete your account from outside the app at https://my.archie.travel/delete-account. We confirm the request with a code sent to your email, and the deletion takes effect after 14 days. To delete specific data without deleting your account, see https://my.archie.travel/data-deletion.

Your rights under GDPR (EEA and UK residents)

If you’re located in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) — and the UK’s own equivalent, UK GDPR — gives you rights over your personal information beyond account deletion, and Archie acts as the data controller for the account information described above.

Our legal basis for processing depends on what we’re doing with it: creating and running your account, parsing your trip details, and generating recommendations and Ask assistant answers are all necessary to perform our contract with you. Anything optional — “Add trips by email,” biometric lock, adding a profile photo, background location, sharing your live location — is based on your consent, which you can withdraw at any time by turning that feature off. Logging search queries (see “How we use it” above) is based on our legitimate interest in improving what Archie covers, which never overrides your own privacy rights.

You have the right to: access the personal information we hold about you; correct it if it’s inaccurate; request it be deleted; restrict or object to certain processing; receive a copy of your data in a portable format; and withdraw consent for anything based on consent, at any time. To exercise any of these rights, contact us at the email below — we handle these requests by hand and will respond within 30 days. If you’re not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Security

Your password is hashed (bcrypt) before storage — Archie never stores it in plain text and cannot look it up, only verify a match. Data in transit between the app and our servers is encrypted.

Children’s privacy

Archie is not directed at children under 13, and we do not knowingly collect information from them.

Changes to this policy

If what Archie collects or how it’s used changes meaningfully, this page will be updated and the “last updated” date above will change.

Contact

Questions about this policy or your data: privacy@archie.travel