Last updated: May 16, 2026
Your privacy is the entire point of bail.out This policy explains exactly what we collect, what we don't, and why.
iCloud identifier. When you sign in with Apple, bail.out receives an anonymous iCloud user identifier provided by Apple. We use this only to link the plans you create or are invited to. We never see your name, email, or Apple ID.
Plan content. Event names, dates, optional locations, and the phone numbers of guests you invite are stored in our Apple CloudKit database so they can sync across your devices and reach invitees.
Votes. When you cast a vote, the choice is stored as a record in CloudKit so the count can be aggregated. The app only ever queries the count. Even with raw database access, votes are not tied to displayed user identities in the UI.
Local notification preferences. If you grant notification permission, the app schedules local reminders on your device. No server-side notification data is stored.
Contacts. Used only to populate the invite picker. The picker reads contact names and phone numbers on your device. We do not upload your contacts. Only the phone numbers of guests you actually select get sent to CloudKit so the invitees' apps can find the event.
Notifications. Used for event reminders and to alert you when a plan you're part of changes (e.g., gets cancelled).
iCloud. Required. bail.out uses Apple's CloudKit to sync plans across devices and to deliver real-time updates.
This is the core design promise of bail.out and we take it seriously:
When a plan uses location voting (guests vote on which venue to go to), those votes are intentionally visible. Everyone in the plan can see who voted for which location. This is by design — picking a restaurant is a preference, not a secret. Location votes are stored in CloudKit and attributed to your display name.
You can delete any plan you created from the home screen (long-press → Delete). This permanently removes the event, guest list, and all associated votes from our CloudKit database — no action needed on our end.
For plans you were invited to but did not create, your phone number and anonymous vote count may remain in those records. To remove that data, email bail.out.app.official@gmail.com with the subject "Delete my account" and we will remove your records within 7 days.
bail.out is not directed at children under 13. We don't knowingly collect data from anyone under that age.
If we make material changes, we'll update the "Last updated" date and notify users in-app on next launch.
Questions, concerns, or deletion requests: bail.out.app.official@gmail.com