At Awaybook, we are committed to protecting your privacy. Our approach is guided by the following key principles:

• We are the first users of our application, and we treat your data with the same care and respect as we treat our own.
• We only collect and use data that is necessary for the Application's features and functions.
• We commit to being clear and honest about how we collect, use, and protect your data.

These principles underpin every aspect of our data handling practices, as detailed in the policy below.

---

This privacy policy applies to the Awaybook app (hereby referred to as "Application") for mobile devices that was created by Away Studio LLC (hereby referred to as "we", "us" or "our") as a Freemium service. This service is intended for use "AS IS".

Information Collection and Use

The Application collects information when you download and use it. It may include:

• Pages visited in the Application, including the time and date of your visit
• General information about the operating system you use on your mobile device

We want to assure you that data is collected solely for improving the Application's functionality and user experience. We don't and will never sell your data.

Hotel Stay Data

Your hotel stay data is central to the Awaybook experience. We handle this information with the utmost care and transparency:

• Your saved travel log is stored on your device and synced through CloudKit. Separate server copies are created when you use Friends, Calendar Sync, or Smart Import, as described below.
• We use Apple's CloudKit for secure synchronization across your devices. For information on how Apple handles this data, please refer to Apple's Privacy Policy.
• We process the stay details you submit through Calendar Sync and Smart Import, and the limited details you choose to share through Friends.
• We may collect data (e.g., "a hotel stay of brand X was added") to improve the app.

This approach ensures your data remains under your control while allowing for seamless use across your devices.

Friends and Shared Stays

Friends is an optional social feature that lets you share selected stay details with people you add as friends. This is the only situation in which we make your information available to other users. It is turned off by default, and we handle this data with strict controls:

• Opt-In Sharing: Sharing is entirely off until you explicitly enable it. Until then, no stay data is uploaded for Friends. When enabled, a limited projection of your stays is stored on our servers. This is a separate copy from your private, on-device travel log.
• What Your Friends CAN See: Dates; hotel name, brand, and chain; city and country; number of nights; your profile name and picture.
• What Your Friends CANNOT See: Cost, points, free-night usage, or earning details; personal notes; booking confirmation codes; room number, type, or view; loyalty tier or status; photos. These fields are excluded from Friends uploads. Content you separately submit to Smart Import or Calendar Sync may contain them.
• Retention and Deletion Control:
  • You can hide any individual stay from friends, or turn off all sharing at any time.
  • Turning off all sharing disables visibility to your friends, but these shared-stay projections are only permanently deleted from our servers when you delete your account. If you want them deleted permanently sooner, please contact us at frontdesk@awaybook.app.
  • Removing a friend instantly ends access and deletes the connection between you in both directions.
  • Revoking access is forward-looking: it stops future access, but information a friend has already seen cannot be recalled.

If you do not use Friends, no stay data is uploaded for Friends. Calendar Sync and Smart Import have separate data flows described below.

Calendar Data

When you turn on Calendar Sync, Awaybook accesses your device's calendars to detect hotel stays:

• Events that are clearly not hotel stays (meetings, flights, birthdays, medical appointments, and so on) are filtered out on your device and never sent to our servers.
• For the remaining events, only event title, location, dates, notes, any URL attached to the event, time zone, and calendar name are sent to our servers for stay detection. We never send attendee lists, organizer information, or your email address.
• Stay detection is powered by a third-party AI provider (Google Gemini). Google’s data-use and retention provisions are described in the Google Gemini API Terms of Service.
• Detected stays are saved to your account's import inbox for your review. You choose which stays to add to your travel log.
• Your calendar data is never sold or used for any purpose other than detecting hotel stays.

User Uploaded Files

When you choose a file, photo, screenshot, or copied text and tap Start Import, Awaybook uses it to detect hotel stays:

• The content you select and its file name are securely sent to our servers with your account information. This includes any personal information contained in the content you choose to upload.
• Stay detection is powered by a third-party AI provider (Google Gemini), which receives your images, PDFs, or text from your files. For saved emails, we process the subject and message body; attachments must be imported separately. For information on Google’s handling of this data, see the Google Gemini API Terms of Service.
• We do not keep your original upload after processing it.
• Detected stay details and source file names are saved to your account’s import inbox for review. These may include dates, confirmation numbers, costs, loyalty information, and notes. You choose which stays to save or update in your travel log.
• Saving, updating, or skipping a stay does not delete its server record. These records are not automatically deleted. Account deletion includes cleanup of your import inbox. You can also request deletion by emailing frontdesk@awaybook.app.
• Import activity logs include your account ID, file format, processing counts, and error categories, but not uploaded content, file names, or detected booking details. These logs are kept separately under our hosting service’s retention settings.

See the Smart Import FAQ for import instructions.

Photos

We respect the privacy and security of your personal photos:

• Photos are displayed locally on your device using Apple's on-device API.
• Browsing your photo library does not upload your photos. An image you explicitly submit to Smart Import is uploaded and processed as described above.
• Photos you do not submit to Smart Import remain on your device and are not accessible to us through that feature.

Precise Location Data

The Application may use precise location data only when you choose to search for nearby hotels. Here's how we handle this information:

• Precise location is accessed only with your explicit permission for hotel searches
• We do not permanently store precise location data
• This data may be temporarily present in server logs for up to 30 days
• Precise location information cannot be associated with individual users

We may use the information you provided to contact you from time to time to provide you with important information, required notices and marketing promotions.

For a better experience, while using the Application, we may require you to provide us with certain personally identifiable information. The information that we request will be retained by us and used as described in this privacy policy.

Third Party Access

We use aggregated analytics to improve the Application. Separately, Calendar Sync and Smart Import transmit the content described above to service providers for processing. We may share your information with third parties in the ways that are described in this privacy statement.

Please note that the Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:

• Google Analytics for Firebase
• Firebase Crashlytics
• Google Gemini API

We may disclose User Provided and Automatically Collected Information:

• as required by law, such as to comply with a subpoena, or similar legal process;
• when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
• with our trusted services providers who work on our behalf, do not have an independent use of the information we disclose to them, and have agreed to adhere to the rules set forth in this privacy statement.

Opt-Out Rights

Uninstalling the Application stops it from submitting new data from that installation, but does not delete data already stored on our servers or by service providers. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.

Data Retention Policy

We will retain User Provided data for as long as you use the Application and for a reasonable time thereafter. If you'd like us to delete User Provided Data that you have provided via the Application, please contact us at frontdesk@awaybook.app and we will respond in a reasonable time.

Children

We do not use the Application to knowingly solicit data from or market to children under the age of 13.

The Application does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13 years of age. In the case we discover that a child under 13 has provided personal information, we will immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us (frontdesk@awaybook.app) so that we will be able to take the necessary actions.

Security

We are concerned about safeguarding the confidentiality of your information. We provide physical, electronic, and procedural safeguards to protect information we process and maintain.

Changes

This Privacy Policy may be updated from time to time for any reason. We will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

This privacy policy is effective as of 2026-09-06

Your Consent

By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact us via email at frontdesk@awaybook.app.