Privacy Policy

This Privacy Policy explains how Gaptooth Labs LLC (“Arriv,” “we,” “us”) handles information when you use arriv.now, the Arriv mobile apps, browser extension, and related services (together, the “Service”).

By using the Service, you agree to this policy. If you do not, do not use Arriv.

1. Who we are

The Service is operated by Gaptooth Labs LLC. For privacy questions, email support@arriv.now.

2. Information we collect

We collect information in these categories:

• Account information. Email address, display name, and profile details you provide. If you sign in with Google or Apple, we receive the account identifiers those services share for that sign-in. Apple may give us a Hide My Email relay address instead of your personal email.
• Trip and content data. Trips, places, notes, lists, itineraries, votes, comments, shared links, uploaded screenshots or images, pasted text, and links you ask us to import. This is the core of the product.
• Location. On mobile, if you grant permission, we may use your device location to show nearby places. We do not sell location data.
• Usage and device data. Pages and screens viewed, feature use, approximate region derived from IP address, browser or app version, and similar diagnostics. We use PostHog for product analytics and Google Analytics 4 for marketing traffic measurement on the website. We also record clicks on booking and affiliate links, including the provider, placement, destination, category, and campaign.
• Payment information. If you subscribe to Arriv Pro on the web, Stripe processes your payment. We receive subscription status and related billing identifiers; we do not store full card numbers. In-app purchases on iOS are handled by Apple.
• Communications. Messages you send us (for example support email) and related metadata. If you subscribe to the weekly city-guides email, we store that address, the cities you pick, and when you unsubscribe or change editions.

You can use some shared trip or guide links without an account. In that case we still collect basic usage and device data for the pages you open.

3. How we use information

We use the information above to:

• Provide, maintain, and improve the Service
• Run AI features that extract places from text, links, and images, suggest itineraries, and help plan trips
• Authenticate you and secure accounts
• Process subscriptions and prevent abuse or fraud
• Understand how the product is used and fix problems
• Measure whether booking and affiliate links are useful and reconcile aggregate commission reports
• Respond to you when you contact us
• Send the weekly city-guides email you opt into, filtered to the cities you pick
• Comply with law and enforce our Terms of Service

When you submit content to AI features, that content is processed to return a result for your trip. We do not sell your trip content.

4. How we share information

We share information only as needed to run the Service:

• With people you invite. Trip members and anyone with a share link you create can see the trip content you make available on that link.
• Service providers. Infrastructure and tools that process data on our behalf, including hosting, authentication (Supabase), maps (Mapbox), analytics (PostHog and Google Analytics), payments (Stripe), email delivery, and AI model providers used to power planning features.
• Affiliate and booking partners. When you choose a booking link, the destination service, such as Stay22, Viator, or OpenTable, receives the request and the tracking parameters in that link. The partner may report aggregate clicks, completed bookings, cancellations, and commissions to us. We do not include your Arriv account id, trip contents, or a cross-company device id in those links.
• Legal and safety. When required by law, or when we believe disclosure is necessary to protect Arriv, our users, or the public.
• Business transfers. If we are involved in a merger, acquisition, or asset sale, information may transfer as part of that transaction.

We do not sell personal information. We do not currently use cross-context behavioral advertising; if that changes, we will update this policy and provide any choices required by law before enabling it.

5. Public and shared content

Guides and trip links you publish or share may be viewed by anyone with the URL. Do not put private details in content you share publicly. You can unpublish or change sharing settings in the product where those controls exist.

6. Cookies and similar technologies

We use cookies and local storage for sign-in sessions, preferences, and analytics. You can block cookies in your browser; some features may stop working if you do.

Affiliate tracking begins when you choose an affiliate link. The partner site may use its own cookies or similar technology under its privacy policy to attribute a later booking. Arriv uses campaign values for aggregate placement reporting and does not use those links for personalized advertising.

7. Data retention

We keep account and trip data while your account is active and as needed to provide the Service. You may delete trips in the product, or delete your account in Settings. You can also email support@arriv.now. We may retain limited records after deletion when required for legal, security, or billing purposes.

8. Security

We use industry-standard measures to protect information in transit and at rest. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

10. Your choices

• Update account details in the product where available
• Delete your account in Settings (web or app)
• Revoke location permission in your device settings
• Close shared links or remove collaborators from a trip
• Manage or leave the weekly city-guides email from the Manage cities or Unsubscribe link in each issue
• Use browser privacy controls, including Global Privacy Control where applicable
• Request access, correction, or deletion by emailing support@arriv.now

Depending on where you live, you may have additional rights under applicable privacy laws. We will respond to verified requests within a reasonable time.

11. International users

We are based in the United States. If you use Arriv from elsewhere, you understand that information may be processed in the United States and other countries where our providers operate.

12. Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Service after an update means you accept the revised policy.

13. Contact

Gaptooth Labs LLC
Email: support@arriv.now
Web: arriv.now

See also our Terms of Service.