Privacy Policy

Ferdava is a collaborative trip planning app. If you have questions about this policy, contact us at ferdava@andripall.is.

• Account data: your name, email address, and password (hashed).
• Profile data: display name and optional profile photo.
• Trip data: trips you create or join, itineraries, places, tasks, expenses, lists, files, and meeting points.
• Usage data: standard server logs (IP address, browser type) retained for up to 30 days for security.

We do not collect advertising data, sell your data to third parties, or use third-party analytics trackers.

We use only essential cookies required to keep you signed in. We do not use advertising, tracking, or analytics cookies.

Your data is stored using Supabase (PostgreSQL). We apply row-level security so users can only access data they are authorised to see. All data in transit is encrypted with TLS.

We share your data with the following sub-processors only as needed:

• Supabase — database and file storage.
• Vercel — hosting and edge network.
• Upstash — rate-limiting (no personal data stored).

We do not share your data with any other third parties.

If you are in the European Economic Area you have the right to:

• Access — download a copy of your data from Settings → Privacy → Export my data.
• Erasure — permanently delete your account from Settings → Danger Zone.
• Rectification — update your name or email from Settings → Profile.
• Portability — your data export is provided in JSON format.
• Object — contact us if you believe we are processing your data unlawfully.

We respond to rights requests within 30 days.

We keep your data for as long as your account is active. When you delete your account, all your data and uploaded files are permanently deleted within 24 hours.

Ferdava is not directed at children under 16. We do not knowingly collect data from anyone under 16. Contact us to report an underage account and we will delete it promptly.

We will notify you of material changes by email at least 14 days before they take effect.