Privacy policy

Last updated: TODO(owner): date it takes effect

Who we are

TripPlanner is run by TODO(owner): name of the person or company responsible for your data. You can contact us at TODO(owner): contact email address.

What we store, and why

Your account

Your email address, so we know which account is yours. You sign in with a link we email you, or with Google — we never have a password for you. If you use Google, we also get your name and profile picture, and show them to the people you share trips with.

Your trips

Everything you put into a trip: places and where they are, notes, tags, days, times, travel details, calendar entries, hotel stays and car or bike bookings, including any booking references you type in. Only you and the people you invite to a trip can see it.

People you invite

When you share a trip, you give us the other person's email address. We email them an invitation, which also sets up an account for them so they can open the trip.

Who has a trip open

While you have a shared trip open, the other people on that trip can see that you are looking at it.

Reports you send us

If you report a problem or ask for a feature, we store what you write, together with details about your device that help us find the problem: your browser, screen size, language, time zone, the page you were on and the version of TripPlanner.

Access keys

If you create an access key, we store only a scrambled fingerprint of it, never the key itself. That is why we can show it to you only once.

What stays in your browser

Your browser keeps you signed in, remembers which trip you had open and how you like things displayed. This is needed for TripPlanner to work, so we do not ask first. We do not use advertising or tracking of any kind.

If you used TripPlanner before accounts existed, your old trips may still be stored in that browser. Clearing your browser's data for this site removes them.

Who else handles your data

We use these companies to run TripPlanner. Each handles only what it needs for its part:

• Supabase stores your account and your trips.
• Google provides the map, place search and travel times, so the places you search for and the journeys you plan are sent to Google. If you sign in with Google, Google also confirms who you are. See Google's privacy policy.
• Render hosts this website.
• Notion receives copies of the problem reports and feature requests you send us.
• TODO(owner): the service that sends sign-in and invitation emails.

TODO(owner): which countries your data is stored in, and the safeguards for any transfer outside the UK / EU.

How long we keep it

We keep your trips until you delete them. Problem reports are kept until we remove them. TODO(owner): decide how long accounts, trips and reports are kept.

Your rights

You can delete any trip you own from inside TripPlanner. To see a copy of what we hold about you, correct it, or delete your account, email us at TODO(owner): contact email address — there is no button for deleting an account yet.

TODO(owner): the legal basis for each use above, and the rights and complaint route that apply where you are based.

Changes to this policy

If we change this policy, we will update the date at the top of this page.