17 Up 17 Down is a private group trip companion app operated as a sole proprietorship based in Ontario, Canada. We can be reached at hello@17up17down.ca.
This policy explains what personal information we collect when you use our website or app, how we use it, who we share it with, and how long we keep it. We are subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
We collect only what is necessary to run your trip. This includes:
We do not collect payment card information directly. Payment processing (when implemented) will be handled by Stripe, who operate under their own privacy policy.
We do not sell your personal information. We do not use your information for advertising or profiling. We do not share your information with third parties except as described in this policy.
17 Up 17 Down uses artificial intelligence to generate trip content, including the Morning Bugle newspaper, the Radio Report, AI recipes, award citations, setlists, local intel, and quest judging. This is a core part of how the app works.
When generating this content, your name and relevant trip activity (quest results, meal ratings, submitted tips, scores) are included in prompts sent to external AI providers. This means your first name and behavioural data from your trip is processed by those providers.
All AI-generated content is satirical and fictional. It is intended to be funny and is not a factual record of events. It is shared only within your private trip group.
| Provider | What is sent | Purpose | Data retention |
|---|---|---|---|
| Anthropic Privacy policy ↗ |
Guest first names, trip activity data (scores, quest results, meal ratings, submitted tips), trip dates, location area name | Morning Bugle, Radio Report, AI recipes, award citations, quest judging, local intel, setlists | Anthropic does not use API inputs to train models. Prompts may be retained for up to 30 days for abuse monitoring per their policy. |
| ElevenLabs Privacy policy ↗ |
The text of the AI-generated Radio Report script | Converting the Bugle's radio script to audio (Gord Mackenzie's voice) | Per ElevenLabs' API policy. Text is processed to generate audio and not retained for training. |
| Nominatim / OpenStreetMap Privacy policy ↗ |
Property address or area name (text string) | Converting a location to coordinates for weather and local area features | Nominatim does not retain geocoding queries beyond standard server logs. |
Photos uploaded to the app are stored on our server (DigitalOcean, Toronto region, Canada). They are visible to all registered members of your trip group. Photos are not shared publicly and are not used to train AI models.
After your trip ends, photos remain available for 30 days via the Memories Reel. You can request deletion at any time by contacting us. When a trip is deleted by the organizer, all associated photos are removed from our servers.
All trip data is stored on servers located in Toronto, Ontario, Canada (DigitalOcean TOR1 region). We do not transfer personal data outside Canada except when it is sent to AI providers (Anthropic, ElevenLabs) for content generation as described above. Those providers are based in the United States.
We use HTTPS for all connections. Trip access is protected by group passwords set by organizers and 4-digit PINs chosen by guests.
No security system is perfect. We recommend organizers share trip links only with intended participants and use group passwords that are not publicly guessable.
Under PIPEDA, you have the right to access the personal information we hold about you, correct inaccurate information, and request deletion. To exercise any of these rights, contact us at the address below.
Because trips are group experiences with shared data, some deletion requests may affect what other trip members can see (for example, removing your name from past Bugle editions is not technically possible once the edition has been generated). We will do what is reasonably practicable.
The app supports family trips and includes a PG content mode. We do not knowingly collect personal information from children under 13 without parental consent. If a minor is participating in a trip, the adult organizer is responsible for ensuring appropriate consent has been obtained from the child's parent or guardian.
We may update this policy from time to time. When we do, the effective date at the top of this page will be updated. Continued use of the app after a policy change constitutes acceptance of the updated policy.
Privacy inquiries, access requests, and deletion requests:
We will respond within 30 days.