Trips Privacy Policy

Effective November 2, 2026

What Trips does

Trips is a travel planner for a trip and the people on it: flights, stays, day-by-day plans, saved places, shared expenses, a group contact list, packing and to-do lists, a phrasebook, a journal and emergency help.

What stays on your phone

• The name you type on "Who's using this phone".
• Your medical card (blood type, allergies, medications, conditions, emergency contact, insurance). It is never synced, shared, exported or included in backups or reports.
• Favorite phrases, recent weather and exchange rates, and the app's own files so it works offline.
• The secret keys of the trips on your phone.

What is stored on our server

When you create a trip, or open a trip link, the trip is saved to our database so every phone with the link sees the same trip. That includes what people add to it:

• the trip's name, city, dates and travelers;
• flights, stays (with addresses and confirmation numbers), plans and saved places with their map coordinates;
• expenses: amounts, what they were for, who paid and who shares them;
• the group contact list: names, roles, phone numbers, email addresses, room, arrival, diet or allergy notes and emergency contacts that people choose to enter;
• packing and to-do lists, journal entries and trip notes, each marked with the name of the person who added it.

Each trip is saved under a secret key that is part of the trip link. Our database stores only a scrambled (SHA-256) form of the key. Anyone who has the link can open and edit the trip, so share it only with the people on the trip. Because the key is part of the web address, our web host's standard request logs can include it. Items that are removed in the app are marked as removed and are still kept with the trip.

Documents

• Trip documents (boarding passes, tickets, reservations): before a file leaves your phone, the app encrypts it with a key made from the trip link. Our server stores only the encrypted file and cannot open it; anyone with the trip link can.
• My documents (for example passport, license or insurance card photos): encrypted on your phone with your passcode before they are uploaded. The passcode is never stored or sent, so we cannot open these files, and they cannot be recovered if the passcode is forgotten. To open them on another phone you enter your name and passcode.
• To slow down passcode guessing, failed attempts are counted using a scrambled form of your internet address, kept for two days.
• An encrypted copy of your documents is also kept on your phone so they open without a signal.

Location

Trips uses your phone's location only when you tap one of these buttons:

• Text my location / WhatsApp my location: puts a map link to where you are into a message that you then send yourself. It is not sent to us.
• Meet here: saves your current spot to the trip so everyone on the trip can see it (it is shown for 12 hours).
• Save where I am: fills in a place you can then save to the trip.

Reading confirmations (Import)

If you use "Import a confirmation" and tap "Read it", the text, pictures or PDFs you chose, together with the trip's name, city, dates and traveler names, are sent to our server and on to Anthropic's Claude service, which reads them and suggests items to add. We do not store what you sent. We keep a short log of each import (the time, which trip key it was for in scrambled form, the kinds of files, how much was processed and any error) to prevent abuse. Anthropic's handling of the material is covered by Anthropic's privacy policy. Don't import documents that contain card numbers or passport numbers.

Services we use

• Vercel hosts the app's web pages and keeps standard request logs, such as your internet address, browser type and the address requested.
• Supabase hosts the trip database and the import service, and keeps standard request logs.
• Anthropic reads confirmations, only when you use Import.
• Open-Meteo provides the weather and finds a new trip's city; it receives the trip city's name or map coordinates, never your own location.
• ExchangeRate-API (open.er-api.com) provides exchange rates; nothing about you is sent.
• Map, flight-status, phone, text, WhatsApp and email buttons open those apps or websites only when you tap them, and nothing is sent until you send it there.

What we don't do

We don't show ads, track you across apps or websites, build profiles, or sell or rent any information. There is no account to create.

How long we keep trips, and deleting them

• Trips are kept so you can look back at past trips; the app does not delete them on its own.
• Clearing the app's storage or uninstalling it removes everything from your phone, including the medical card.
• Each document has a Delete button. Under My documents, "Delete everywhere" removes your documents and their vault from our server; "Remove from this phone" only removes this phone's copy.
• To have a trip deleted from our server, email info@spargurtax.com with the trip's name and dates. We delete it within 30 days and tell you when it's done. Deleting a trip removes it for everyone who shares it.

Children

Trips is meant for adults and is not directed at children under 13. We do not knowingly collect information from children.

Changes to this policy

If this policy changes, the new version will be posted on this page with a new effective date.

Contact

Trips is published by William Spargur, Bonita Springs, Florida. Questions or deletion requests: info@spargurtax.com.