MAJC Adventures

1. What We Collect

When you use MAJC Adventures, we collect:

• Account information: your first name, email address, and encrypted password when you register.
• Trip data: itinerary inputs (destination, dates, ages, budget, preferences), generated itineraries you choose to save, and destinations you save to your "saved for later" list (stored with their map coordinates so future trips passing nearby can include them).
• Discount categories you tell us about: on your account page you can tick which discount categories apply to you and your travelers — for example active-duty military, veteran, Gold Star family, permanent disability, first responder, healthcare worker, teacher, government employee, student, or AAA and AARP membership. Ticking any of these is entirely optional and you can change or clear them at any time. We use them for one purpose only: to show you savings you can actually use, and to take national park entrance fees out of your trip budget when you qualify for a free America the Beautiful pass. We never ask for proof, never verify these with anyone, and never share or sell them. Your itinerary never names a status: when a free national park pass takes entrance fees out of your budget, the plan says only that entry is covered by your federal park pass, which reads the same whether the pass was free or bought. Which pass, and why you hold it, appears only in the savings note on your own copy of the trip, and that note is removed before a trip is shown on a public trip page, copied by another traveler, exported to a calendar by someone you shared it with, sent to a linked MAJC app, or included in the pseudonymous research exports described in section 2. If you un-tick a category, we also clear it from the trips you have already saved. These settings are deleted with your account.
• Airlines and hotel groups you prefer: on your account page you can tick airlines you would rather fly and hotel groups you would rather stay with, or leave it blank for no preference. We use them for one purpose: to lean that way when a real option exists where your trip actually goes, and to put a preferred airline's fare first when it costs about the same. Unlike the discount categories above, this is meant to show up in your plan, so a trip you share or publish can reflect it. It is never shared or sold, you can change or clear it at any time, it is included in your data export, and it is deleted with your account.
• Planning documents you attach: on Expedition you can attach a spreadsheet, PDF, Word file, CSV or photo to a trip. To read it, the file’s contents are sent to OpenAI — an image as the image itself, a document as its extracted text. We keep only the FACTS we pull out of it (dates, places, times, costs, notes); the original file is never stored, and confirmation numbers and account numbers are deliberately not extracted. What we kept is shown in your data export and is deleted with the trip or the account.
• Email addresses you share a trip with: when you share a trip on Expedition we store the address you typed, so that person can open the trip when they sign in, and we send that address one invitation telling them you shared a trip with them and how to open it. We do not add it to any mailing list, send it marketing, or use it for anything else, and removing the share deletes it.
• Payment information: subscription status and billing history. We do not store your card number — all payment data is handled directly by Stripe.
• Usage data: basic server logs (IP address, browser type, pages visited) for security and performance monitoring, and product usage events (features used, itineraries generated, outbound booking links clicked) to understand how the Service is used.
• Itinerary feedback: when you edit or revise a generated itinerary, we record which days or lines you kept, which you changed, and what you asked to change, along with the trip's general context (destination, party ages, budget, trip length). When you add or remove packing-list items, we record those changes too, together with the kind of trip it was — travelling alone, adults only, with children, with a traveler 65 or older — so a preference learned on one kind of trip is not applied to a different one.
• What we work out about how you travel (Expedition plans): from the times and stop lengths you set yourself, the lines you add, and the changes you keep asking for, we derive a small profile of how you like a day to run — when it starts, when it ends, how much is in it — plus the items you always pack, the items you never want suggested, and a few short rules distilled from your own change requests. It is stored per kind of trip, not per account, for the reason above. You can read all of it on your account page, clear any part of it there, and it is included in your data export and deleted with your account. It is derived from your own activity in this app only; we do not buy or import data about you.
• Dietary information from MAJC Health, if you link it: if you are on the Expedition plan and you have linked a MAJC Health account that holds a Vitality plan and turned the dietary link on there, we retrieve that account's dietary profile — food allergies and other foods to avoid, dislikes, likes, and any eating-preference notes — each time you generate a trip. We use it to plan meals, snacks, and grocery stops that respect those restrictions, and we store a short summary line inside that saved trip so the itinerary still explains itself later. This information is never used for any other purpose, never shown on a trip's public page, and is removed from your saved trips as soon as you unlink MAJC Health on your account page or delete your account. If you do not link the two accounts, or your MAJC Health dietary link is off, no dietary information reaches MAJC Adventures at all.

2. How We Use Your Data

We use your data to:

• Generate and save your travel itineraries
• Manage your account and subscription
• Send transactional emails (password resets, billing receipts)
• Send planning reminders and occasional product emails, which you can stop at any time using the unsubscribe link in every such email
• Improve the Service and fix issues, including using itinerary feedback to improve the quality of generated itineraries for everyone
• Feature trips you choose to make public. When you enable a public page for a trip, that itinerary — but never your email address or account details — may be displayed on public pages, in community galleries or example collections, and in our marketing, and may show non-identifying engagement counts such as how many times it has been viewed or copied. Trips you do not make public are never displayed this way.
• Connect your account to other MAJC apps (MAJC Health, MAJC Life) if you choose to link them. Linking stores the email address of the account you linked and shares subscription-standing information (which plan level an account holds) between the apps, to unlock cross-app member benefits. If you also turn on the dietary link inside MAJC Health, that app additionally shares your dietary profile with MAJC Adventures as described in section 1. If you link MAJC Life and turn its outfit planner on there, MAJC Life may ask MAJC Adventures for one plain-text line describing today’s planned activities from a trip you are currently on, so it can suggest what to wear — activity text only, with costs removed, and never your name, email, notes, bookings or any declared discount status. Nothing is sent for an account that has not linked MAJC Life here, and nothing is sent on a day you are not travelling. Linking is optional, initiated only by you, and you can unlink at any time on your account page.

We do not use your trip data for advertising, and we never share or sell your name, your email address, your payment details or the discount categories you declare.

Do not sell or share my personal information. The pseudonymous research rows described below may be licensed to third parties, and the de-identified aggregate statistics described below may be sold outright. Some privacy laws — including the California Consumer Privacy Act — treat that as a “sale” or “share” of personal information even though the rows carry no name, email or account id, because rows from one traveler stay linked to each other. You can switch it off for your account at any time, from Research and licensing on your account page. It costs you nothing in the app: every feature works the same either way, and we never ask you to give up a right in exchange for the service.

Research and licensing. We build two different kinds of dataset out of how the Service is used, and they carry very different amounts of information about you. Both are described here in full so you can decide about them.

(a) Pseudonymous rows. Usage events, itinerary feedback (including the trip requests you make and the lines you keep, remove, retype or ask us to change), packing feedback, and the destinations you save to your someday list may be analyzed internally, and may be shared or licensed to third parties, in pseudonymous form: your name, email address, and account identifier are replaced by a code generated with a secret key we never share, so a recipient cannot look up who a row belongs to. This is not the same as anonymization. Rows from the same traveler remain linked to one another, and a row can still contain what you typed about your trip (destination, travel dates, budget, the ages of your travelers, and your own free-text description of what you wanted). Please do not include information you would not want analyzed in a trip description. Any recipient is bound by confidentiality terms that forbid attempting to re-identify anyone.

(b) De-identified aggregate statistics. We also produce summary tables — for example, how many trips were planned to a given destination in a given month, the median budget per traveler per day, and how often travelers removed a particular kind of activity. These tables contain no identifier of any kind, not even a pseudonymous code, and no free text you typed. They are grouped, and any group resting on fewer than 5 different travelers is withheld entirely rather than published. Statistics of this kind may be published, quoted, or sold outright. Even so, if you switch off research and licensing below, your activity is left out of these aggregate tables as well, not merely out of the pseudonymous rows.

What is never in either dataset, whether or not you switch anything off: your name, your email address, your payment details, the discount categories you declare, and any accessibility or health-related needs you tell us about. Those are excluded at the point the data is recorded, not removed afterwards.

3. Third-Party Services

MAJC Adventures uses the following third-party services, each governed by their own privacy policies:

• OpenAI — processes your trip description and preferences to generate itineraries. OpenAI may use API inputs to improve their models per their data usage policies.
• Google Maps — used to display route maps, driving times, and location details. Receives the places in your itinerary. Subject to Google's Privacy Policy.
• Stripe — processes all subscription payments. Stripe stores your payment method and billing information. Subject to Stripe's Privacy Policy.
• Our email provider — delivers account email (password resets, verification, receipts, billing notices) and planning reminders. Receives your email address and the contents of those messages.
• Travelpayouts — two separate uses. First, on any plan, whenever your trip involves flying, we look up recent low fares for you while your itinerary is being built. That lookup sends the three-letter code of the nearest airport to your starting location, the nearest airport to your destination when you have named one, and how many days your trip is. It does not send your name, email address, account, exact address, or the ages of your travelers. Second, as an affiliate network: when you click a booking link, it receives that click and the search details built into the link. Fares we show are prices other travelers found recently, not live quotes.
• Booking.com Partner Programme — an affiliate network: when you click one of its booking links, it receives that click and the search details built into the link, such as destination and dates. It does not receive your account.
• Have I Been Pwned — when you set a new password on a reset or on your account page, we check it against a public breached-password list using a method that sends only the first five characters of a one-way hash. Your password is never sent.
• Other MAJC apps (MAJC Health, MAJC Life) — only if you link them, and only as described in section 2 and section 1.

4. Data Storage and Security

Your data is stored on secured servers. Passwords are hashed using industry-standard algorithms and never stored in plain text. We use HTTPS for all data transmission. Despite our efforts, no system is perfectly secure — use a strong, unique password for your account.

5. Data Retention

We retain your account data for as long as your account is active. Saved trips are retained until you delete them or close your account. You can delete your account and all associated data yourself, immediately, from your Account page; if you would rather we do it, use our contact form.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and data
• Export your saved trips

Access, export, and deletion are all self-serve and immediate from your Account page — "Download my data" returns your profile, saved trips, someday list, notes, bookings, and preference signals as a file, and "Delete Account" removes all of it. For corrections or any question about these rights, use our contact form.

7. Cookies and Local Storage

We use a session cookie to keep you signed in, and a longer-lived sign-in cookie so you are not asked to log in again on every visit. Both are cleared when you sign out. Your browser also stores planner state on your own device — the form you were filling in, the map pins you dropped, and packing checkboxes you ticked — so a reload does not lose your work; that copy stays on your device. Naming a spot on the map is the exception: the coordinate you clicked, or the text in the destination box, is sent to us so we can look up what is there, and we keep a count of how many lookups your account has made so we can apply the plan's limits. We do not use tracking cookies or third-party advertising cookies.

8. Children's Privacy

MAJC Adventures is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, please have them delete it directly from their Account page — account deletion is immediate and removes all associated data. If you need assistance, use our contact form.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of significant changes via email. Continued use of the Service after changes constitutes acceptance.

10. Contact

Privacy questions or requests: Contact us here.