Privacy Policy

• Accounts are optional. You can join and use trips with no account at all — your device just gets a random ID. If you want to back up your trips across devices, you can create an optional account with your email and a one-time code (no password).
• We collect only what a trip needs: your name/phone/photo (if you add them), your trips, and — only if you turn it on — your location.
• Trip data is shared with the people who have your trip’s link. It isn’t sold, and there are no ads or third-party tracking SDKs. We keep basic first-party usage analytics on our own server to improve the app.
• You can delete your data (see Deleting your data).

You provide

• Profile — the name, phone number, and photo you optionally add so your travel group can recognize and reach you.
• Trip content — destinations, places, dates, itineraries, notes, tasks, suggestions, and expenses you enter.
• Tickets & passes — files or photos you attach are stored on your device only.
• Location — only if you tap “Share my location,” your approximate position is shared with your trip group. It is intermittent and trip-scoped; you can stop it anytime.
• Account (optional) — if you choose to back up your trips, we store your email address and a backup of your personal trip data (the trips you created and their edit keys, your trip list, profile, home currency, and personal expenses/packing/notes). You can separately opt in to occasional marketing emails; that consent is optional and you can unsubscribe anytime. We use your email only to sign you in and, if you opted in, to send those updates.

Automatically

• Device identifier — a random ID generated on your device to keep your trips and roster entry consistent. Not tied to your real identity.
• Push token — if you enable notifications, a device token so we can send trip alerts.
• Usage analytics — basic product events (for example: app opened, a trip created, the Pro screen viewed) with the app version, platform, and your device/account identifier, so we can understand how features are used and improve them. These go only to our own server — no third-party analytics services are involved.

We do not use third-party advertising or analytics SDKs, and we do not track you across other apps or websites. Our usage analytics are first-party only — collected and stored by us, never shared with ad networks or data brokers.

• To build and run your trip: curate a plan, show the map, roster, expenses, packing list, phrasebook, and safety info.
• To let your group coordinate — see who’s coming, split costs, and (if enabled) each other’s location.
• To send trip notifications you’ve opted into.

We use a few processors purely to provide features. Only the data needed for each feature is sent:

• Anthropic (Claude) — trip curation, phrase translations, place ideas, and reading a ticket/itinerary photo you choose to scan. Relevant trip text (and, for a scan, that image) is processed to generate results.
• OpenStreetMap / Nominatim and Google Geocoding — to find places you search for (your search text is sent).
• Open-Meteo — weather for the trip location.
• Esri — map tiles.
• open.er-api.com — currency exchange rates (no personal data).
• Apple Push Notification service / Firebase Cloud Messaging — to deliver notifications.
• Apple App Store / Google Play (and RevenueCat) — to process subscription purchases. We never receive your full payment details.
• Resend — to email your one-time sign-in code, and (only if you opt in) occasional updates. Your email address is sent to deliver these messages.

Shared trip data (roster, notes, tasks, suggestions, curated plans, and — if enabled — location) is stored on our server hosted in the EU (Hetzner, Germany). Much of your data — your profile, personal packing items, saved tickets, and expenses — lives on your device. If you create an optional account, your email and the backup of your personal trip data are also stored on that EU server so they can be restored on a new device. Traffic is encrypted in transit (HTTPS).

A trip is reachable by anyone who has its link (an unguessable address). Share it only with your group. People on the trip can see the shared roster (names, phone numbers, photos), notes, expenses, and, if members enable it, live location.

• On your device — removing a trip from your list, or uninstalling the app, clears the data held locally.
• Shared trip data — the trip owner can wipe a trip (roster, notes, tasks, and suggestions) for everyone.
• Your account — if you created one, you can permanently delete it and its backup anytime in the app (Account → Delete account). Deleting your account does not delete trips you’ve shared with others.
• You can also email email us to request deletion of data associated with a trip link or your account.

Geoff isn’t directed to children under 13, and we don’t knowingly collect their data.

We’ll update this page and the “last updated” date when this policy changes.

Questions or requests: email us.