The short version
PackingGO has no accounts, no ads and no tracking, and we do not sell your data. Your trips, packing lists and templates stay on your device and, if iCloud sync is on, in your own iCloud (CloudKit private database). We run no server that holds your trips and cannot read them. To build weather-aware lists, the app sends your trip destinations and dates to Apple's weather service (WeatherKit). Anonymous usage analytics and crash reports are optional and off until you turn them on.
1. Who we are
PackingGO is made by an independent developer ("we", "us"); the developer's name is shown as the seller on PackingGO's App Store page. We are the controller for the limited data described in sections 4 and 5. Contact for anything about privacy: info@familygo.app. Website: https://familygo.app.
2. What stays on your device and in your iCloud
PackingGO stores what you enter: trips, destinations, dates, travellers (names and age groups), packing lists, custom items, templates, reminder settings and your settings. This lives in an on-device database in the app's container and never reaches us.
- iCloud sync. Sync is on by default and you can switch it off in Settings, iCloud & backups. When it is on, the data is stored in your private CloudKit database in your own iCloud account so your devices stay in step. Apple operates iCloud under its own terms and privacy policy. We have no access to it. iCloud sync uses silent system notifications from Apple to tell your devices that data changed; they carry no content from us.
- Automatic backups. The app saves up to 10 weekly backup files on your device. We do not upload them. They contain your trips and lists.
- Export and sharing. You can export lists as text, PDF, a
.packinggotrip file, or a JSON backup and CSV. Where the file goes is your choice (Messages, Files, AirDrop and so on). We never receive it. Anyone you send it to will see what is in it. - Recently deleted. Deleted trips and lists are kept for 30 days on your device before they are removed for good.
3. Permissions and Apple services
- WeatherKit. To pick weather-appropriate items, the app sends the coordinates of each trip destination and your trip dates to Apple WeatherKit and receives forecasts, or typical climate for trips further away. The request goes from your device to Apple. It does not use your current location, and we never see it. A background check about every 6 hours or more refreshes forecasts for upcoming trips using the same data. Weather data is provided by Apple Weather. Results are cached on your device and removed by Delete all data.
- Place search. The text you type as a destination is sent to Apple Maps search (MapKit) to find matching cities and regions.
- Apple Intelligence (on-device). On devices that support it and have it turned on, the app asks Apple's on-device language model to review a generated list and suggest additions or removals, marked as suggestions. The prompt contains trip facts (places, month, nights, age groups, transport, luggage, activities) and a weather summary, but not traveller names or your own custom item text. This runs on your device and is not sent to us or anyone else. Otherwise the app uses its fixed rules only.
- Notifications. Packing reminders for your trips, a forecast-change notice, and a reminder 48 hours before a free trial ends. They are local notifications scheduled on your device, may include a trip name or item names, and we do not receive them. You can turn them off in iOS Settings.
- Background app refresh: to check forecasts for upcoming trips.
PackingGO does not request your location, camera, photos, contacts, calendar, microphone or Face ID. Weather and suggestions are best-effort and can be wrong or unavailable.
4. What reaches us, and only if you allow it
On first run you are asked whether to share anonymous usage analytics and crash reports. Both start off. You can change them any time in Settings, Privacy.
- Usage analytics (Firebase Analytics, Google). If on, the app sends event names such as onboarding step viewed, paywall viewed, trial started, purchase completed, trip created, list generated, template saved and export used. Parameters are fixed values and coarse buckets, for example item count "20-39", number of travellers "3-4", or the export format. We never send destinations, dates, item names, your own text or traveller names.
- Crash reports (Firebase Crashlytics, Google). If on, a crash sends the technical crash log, device model, iOS version, app version and a random installation identifier. Never your records or anything you wrote.
- Identifiers. Firebase assigns a random app-instance identifier, not your name, e-mail or Apple ID. It is not linked to your identity, and we have no accounts to link it to. Google sees technical data such as your IP address on any request. The app does not use Apple's advertising identifier (IDFA) or ask for tracking permission, and Google ad storage and ad personalisation are off.
- Remote Config (only with usage analytics on). If you have turned on usage analytics, the app also fetches fixes to the item catalogue, quantity and weather thresholds, paywall switches and a switch for the on-device suggestions from Google Firebase Remote Config. The request carries a random Firebase installation ID, the app version and the device language, and nothing about you or your entries. If usage analytics is off, the app does not make this request and uses the settings and catalogue built into it. Turning analytics off stops the fetching. Values are validated, and anything invalid is ignored in favour of the data built into the app.
Why and legal basis (GDPR / UK GDPR). To fix crashes and see which parts of the app are used. The basis is your consent (Art. 6(1)(a)), which you can withdraw at any time.
Who processes it for us: Google (Google Ireland Ltd and Google LLC), for Firebase Analytics, Crashlytics and Remote Config, under Google's data processing terms. It processes the data only on our instructions.
5. What reaches us without a choice
Purchases. Purchases are sold and billed by Apple. We never see your card or Apple Account details. The app checks your subscription status on your device through StoreKit. We receive no personal data from Apple about you. Apple's own privacy policy applies to your payment and Apple Account.
E-mails you send us. If you write to info@familygo.app, we use your message and address to answer you. Legal basis: our legitimate interest in answering (Art. 6(1)(f)).
6. How long we keep it
- Your app data: we hold none. It stays on your device and in your iCloud until you delete it.
- Firebase Analytics event data: 2 months, then deleted.
- Crashlytics crash reports: 90 days.
- Support e-mails: deleted 12 months after the conversation ends, unless the law requires longer.
7. International transfers
Google may process data in the United States. Transfers are covered by the EU-US Data Privacy Framework (Google is certified) and the European Commission's Standard Contractual Clauses. Apple handles iCloud, App Store and Apple Maps data under its own policies.
8. Your choices and rights
- Change your consent at any time in Settings (Privacy). Turning a choice off stops sending at once.
- Export your lists and a full backup in the app.
- Delete everything in Settings, iCloud & backups, Delete all data. It erases your trips, lists and templates, the weather cache and pending reminders, can also remove the on-device backups, and with iCloud sync on the deletion syncs to your private iCloud database. It also resets the analytics identifiers, so nothing sent later can be joined to anything sent before. Deleting the app removes the data on the device; iCloud data can be removed in iOS Settings, your name, iCloud, Manage Storage.
- Your rights under GDPR and UK GDPR: access, rectification, erasure, restriction, objection, data portability, and withdrawing consent without affecting what was done before. Your records are on your device and in your iCloud, so you control them directly in the app. We hold no records linked to you, and analytics identifiers are random and not linked to your identity, so we usually can't find data about you. Turning analytics off and Delete all data reset them. You can write to info@familygo.app and we will help where we reasonably can, within one month.
- Complaints: you can complain to the data protection authority where you live or work.
- US residents (including California): we do not sell or share personal information and do not use it for targeted advertising. You can use the rights above in any US state.
- Legal bases for running the app: the app runs on your device, so we mostly don't process that data as a controller. Where we do, the basis is performing our contract with you and our legitimate interest in providing a working app.
9. Children
The app is not directed to children under 13 (under 16 in the EEA where that age applies). We do not knowingly collect data from children. Parents may add children as travellers on a list; only a name you type and an age group are stored, on your device and in your iCloud.
10. Changes
If we change this policy, we update the date at the top and, for changes that affect what is sent, ask again in the app before anything new is sent. The current version is at https://familygo.app/packinggo/privacy/.
Changes: 9 November 2026: first version.