Privacy Policy

Overview

Itinrary ("we," "our," or "us") is an app for sharing a trip with a private group of people you choose. This policy explains what data we collect, how we use it, and how we protect it. The short version: your trips are private to the people you invite, we do not sell your data, and we do not track your location in the background.

Information We Collect

Account Information

When you create an account, we collect your email address, display name, and authentication credentials. If you sign in with Google or Apple, we receive your name and email address from that provider. If you use Sign in with Apple and choose to hide your email, Apple gives us a private relay address instead of your real one.

Trip Content

We store what you put in a trip: the trip name and dates, your updates and their captions, and the photos, videos, and voice notes you attach. We also store comments and reactions posted to a trip, and any postcards you create.

Location

An update can carry a place, and it does not have to. When you compose one, Itinrary can read your device's location once to work out what is near you. This happens only while you are writing an update, and only if you grant location permission.

We send those coordinates to Geoapify, who return a list of nearby places for you to choose from. Nothing is filled in for you. You pick a place from the list or type one yourself, and you can do that without granting location permission at all.

We do not track your location in the background.

We do not read your location when you are not composing an update, and we do not keep a continuous history of where you have been.

What we store on an update is the place you chose, its coordinates, and where your device was when you posted if that was somewhere different. Those coordinates draw the pin on your trip's map and fetch the local weather snapshot.

Contacts

When you choose to invite someone using your device's contact picker, we access the name and email address of the contact you select so we can send that invitation. We only access the specific contact you pick. We never read or upload your address book.

Postcard recipients

When you send a postcard, you give us the email address and optional name of each recipient so we can deliver it. Recipients do not need an Itinrary account. We use these addresses to send that postcard and nothing else, and we do not add recipients to any mailing list.

People following a trip

People who open a shared trip link can view the trip without creating an account. We assign an anonymous session identifier so they can be recognized across visits and so their comments and reactions stay attached to them. If someone creates an account, we collect their email address.

Usage data and session recording

We collect analytics about how the app is used, including page views, feature usage, and device type. We also use session recordings, which capture interactions such as taps, scrolls, and navigation to help us find and fix problems. Text you type, including your email, your name, and your trip content, is masked and is not captured in recordings, and passwords are never captured. If you would like us to disable session recording for your account, contact us at hello@itinrary.com.

How We Use Your Information

To run the core service: storing your trip and showing it to the people you invited
To notify the people following a trip when you post a new update, and to notify you about comments and reactions on your trip
To send trip invitations and postcards to the addresses you provide
To send you occasional messages about your trip, such as a reminder before it starts or a recap after it ends
To show a map pin and a weather snapshot on each update
To process payments
To improve and maintain the app through analytics
To reply to you when you contact us

Who Can See Your Data

A trip is visible to the people you share its link with, and to anyone they forward that link to. Trips are not public, not searchable, and not listed anywhere. We do not sell or rent your data, and we do not share it with third parties for marketing.

You stay in control of a trip. You can remove people, rotate the share link, delete individual updates, or delete the whole trip at any time.

A postcard is the one exception you can opt into. If you choose to share a postcard publicly, that postcard becomes viewable by anyone with its link, while the trip it came from stays private.

Third-Party Services

We use the following services to operate Itinrary:

Google Firebase: authentication, database, file storage, and push notifications
Apple: Sign in with Apple, and in-app purchases on iOS
Google Play: in-app purchases on Android
RevenueCat: processing and validation of in-app purchases in the iOS and Android apps
Stripe: payment processing on the web
Mux: hosting and streaming of videos you upload to your trips
SendGrid: transactional email, including invitations, postcards, and account email
PostHog: analytics and session recording
Cloudflare: hosting for our website and routing for our email
Geoapify: map tiles, and the list of nearby places we offer when you add a location to an update
OpenStreetMap: turning coordinates into a place name
OpenWeatherMap: the weather snapshot shown on an update

Each of these services has its own privacy policy governing how it handles data. We encourage you to review them.

Data Retention

Your trips are yours to keep. We do not expire or auto delete them, because looking back at a finished trip is the point of the app. A trip stays until you delete it or delete your account.

When you delete a trip, it and its updates, photos, videos, voice notes, and comments are removed for everyone who was following it.

When you delete your account, deletion runs immediately and cannot be undone. Your account, your trips, and their files are removed at that point.

We keep encrypted daily backups of our database for 30 days for disaster recovery. Deleted content can persist in those backups until they age out, after which it is gone. Payment records are retained by Stripe, Apple, and Google as their own terms and applicable tax law require.

Data Security

We use industry standard measures to protect your data, including encrypted connections (TLS), database security rules that restrict access to authorized users, and secure authentication. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Remove people from your trips, or rotate a trip's share link, at any time
Decline or revoke location permission and still use the app
Opt out of marketing email while still receiving account and trip email
Delete your account entirely

To exercise any of these rights, contact us at hello@itinrary.com.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

European Residents (GDPR)

If you are in the European Economic Area, we process your data on two bases. We rely on performance of our contract with you to run the service you signed up for, which covers storing your trip and showing it to the people you invited. We rely on your consent for anything optional, which covers device location, contact picker access, and marketing email. You can withdraw consent at any time in your device settings or your account settings without losing access to the app.

You have the right to access, correct, export, or delete your data, and the right to lodge a complaint with your local data protection authority.

Children's Privacy

Itinrary is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it promptly. If you believe a child under 13 has given us personal information, contact us at hello@itinrary.com.

Changes to This Policy

We may update this policy from time to time. We will tell you about significant changes by posting a notice in the app or sending an email. Continuing to use the app after changes are posted means you accept the updated policy.

Contact Us

If you have questions about this policy or our data practices, reach us at:

Email: hello@itinrary.com
Website: itinrary.com