Privacy Policy

Last updated October 26, 2026. Summit helps you plan lifetime bucket list items. We collect only what's needed to do that.

What we collect

• Your email address and password (the password is stored securely hashed) to run your account.
• Profile details you enter: display name, age, fitness level and home city.
• Money numbers you type in: monthly savings, amount already saved, yearly savings increase, and bucket list item costs and budgets.
• Your bucket list items and their details, and the shared plans, checklists and chat messages you create or join.
• Connections and invites, plus any reports you file and people you block.
• Your subscription status (whether Summit Pro is active and when it expires), which Apple provides to us through our payments partner RevenueCat. We never receive your card details.

Who can see it

Only you can see your money settings and saved amounts, including savings toward shared plans. People you connect with can see your display name, age, fitness level and bucket list items and shared plans you choose to show them (never costs or savings). Each item and plan has a "Who can see this" setting: Only me, All my connections, or Specific people. Active members see the plan's whole-cost breakdown, cost split, checklist and chat, but never another member's saved amounts or progress.

Cover pictures

Item titles are sent to Openverse or Wikimedia Commons to find freely licensed cover photos. Openverse searches exclude mature results; Commons results are filtered for sensitive content. Photo credits and source/license links appear with expanded photos. Uploaded photos are stored privately in Lovable Cloud and shared only with people who can view the item or plan. We do not send your uploaded photos to AI. You can choose a different picture or upload your own.

AI estimates

AI estimates are optional. Before your first estimate, edit or life plan review, we ask for explicit permission per account. Decline to enter details manually, or turn AI estimates off any time in About me to prevent future AI requests.

Our AI providers are OpenAI (GPT-6 Luna, model ID openai/gpt-6-luna, for estimates and edits) and Google (Gemini 3.8 Flash, model ID google/gemini-3.8-flash, for Pro life plan reviews; Gemini 3.1 Flash Lite Image, model ID google/gemini-3.1-flash-lite-image, for Pro cover pictures when no licensed photo is found, using only the item title), through Lovable AI. Free accounts include 5 AI estimates a month and Summit Pro includes up to 300. Identical estimates (same title, home base, travel style and days) may be reused for 30 days without a new AI request. With permission we send the item's title and notes, travel style, home base, age and fitness level to generate estimates. AI edits also include your request and current fields (cost, difficulty, days, months and priority). Pro life plan reviews include your schedule and savings summary. We never send your email or password to the AI provider.

Nothing you type is used to train the model. These requests use the provider's zero-data-retention endpoint. Results are shown as estimates you can edit in Budget breakdown and may be inaccurate.

What we don't do

We never sell or rent your personal data. We do not send your email, home city, bucket list items, chat messages or savings numbers to advertisers. The web version shows no third-party ads. Summit Pro has no ads.

Advertising on iPhone

Signed-in free iPhone accounts show one Google AdMob banner at the bottom of the screen, with the tabs and content kept above it. Interstitial ads may appear at natural breaks after every third successful AI lookup or edit, no more than once every three minutes, never on sign-in, setup, legal or subscription screens. Live ads are enabled for regular accounts; designated review accounts receive Google's test ads. AdMob may collect IP address (which can indicate approximate location), device and app information, advertising interactions such as impressions and taps, and performance or diagnostic data to deliver ads, prevent fraud and measure performance. See Google's Privacy Policy.

Before ads, iOS asks whether you allow tracking. With permission, Google can use the advertising identifier (IDFA) for ad personalization and measurement across apps and websites. If you decline or iOS restricts tracking, we request non-personalized ads and do not authorize IDFA tracking. Non-personalized ads may still use IP address, device information and limited identifiers for essential ad delivery, fraud prevention and frequency limits. We also show Google's consent choices where required and do not request ads until consent permits them.

You can change tracking permission in iPhone Settings → Privacy & Security → Tracking. Advertising privacy choices are available in About me when required in your region. Pro stops banner and interstitial ads immediately; signing out also removes the banner and prevents new ads. Existing data held by Google remains governed by Google's retention policy. Users under 18 are not asked for tracking permission and receive restricted, non-personalized ad requests.

Reports

When you report a message or a person, we store the report so our team can review it within 24 hours.

Deleting your data

Open About me and tap Delete account. This immediately and permanently removes your account, profile, bucket list items, savings buckets, the shared plans you created, your messages, checklist items, connections, invites and AI usage. Deleting your account does not cancel an Apple subscription — manage that in your Apple ID settings. Google may retain advertising data under its own policy; contact Google for related deletion requests.

Children

You must be at least 13 years old to use Summit. We ask for age before collecting email at sign-up and do not create accounts or collect email for people under 13.

Contact

Questions or requests? Email gavinthomasworrell@gmail.com.