Privacy policy

TripStow is a travel app at tripstow.com. For anything about your data, email hello@tripstow.com. TripStow is responsible (the "controller") for the personal data described here.

We store what you give us, and what we work out from it, so the app can do its job:

• Your account: email address, name if you give one, username, home airport and your settings.
• Forwarded emails: the sender, recipient, subject and text of each email you forward, so you can see what was found in it. The text is deleted 30 days after the email arrives; the plans it created, and its subject, sender and date, stay in your inbox. Attachments (PDFs, calendar invites and wallet passes) are read to find booking details; the files are not kept, and the text read from them is deleted with the email's.
• Your trips and plans: flights, stays, trains, cruises and other bookings, with times, places, seats, booking references, notes, and any times you add.
• Imported flight logs, and a record of each import so it can be undone.
• Loyalty programmes: membership numbers (encrypted with AES-256-GCM and shown masked), tiers, balances and expiry dates.
• Travel documents: only the type, expiry date and last four characters. We never store a full passport or document number.
• Travel partners and planners you add, by email address, and what you have shared with them.
• Push notification subscriptions for the devices you switch on, and a secret token for your calendar feed.
• A record of each AI reading of an email (which model, how much text, and the cost), used for the free allowance and spending limits.

Every email is checked before it is read. Email to your private forwarding address is accepted from any sender unless it fails DMARC; email to plans@tripstow.com is only accepted from an address you have confirmed, and only if it passes SPF or DKIM. We send a summary of what was added to you, the account owner, never to whoever forwarded the email.

Standard scanning is TripStow's own rules-based reader, which runs on our servers. Enhanced trip email scanning sends the email to Anthropic, which runs the Claude AI models, to read the booking details. Before sending, we remove footers, unsubscribe and legal blocks and adverts, and cap the text at 20,000 characters. Free accounts use enhanced scanning only when the standard reader is unsure, up to 10 times a month; Pro accounts use it on every email.

We use these services to run TripStow. Each only receives what it needs for its job.

• Supabase: our database and sign-in. Stores your account and everything listed above.
• Vercel: hosts the website and app, and runs our scheduled tasks.
• Cloudflare: receives email sent to plans@tripstow.com and your forwarding address and passes it to TripStow. Also our domain and DNS provider.
• Anthropic: reads forwarded emails when enhanced trip email scanning is used.
• Resend: sends the emails TripStow sends you (summaries, reminders, alerts and sign-in links).
• AeroDataBox: live flight data for Pro. We send flight numbers and dates, never your name or booking details.
• Push services run by browser and phone makers (such as Google, Apple and Mozilla): deliver push notifications to the devices you switch on.
• Photon by Komoot, using OpenStreetMap data: when you search for an address while adding a plan, the text you type is sent to it to find matching places.
• Planespotters.net and Wikimedia: aircraft, ship and destination photos. We look photos up by aircraft registration, ship or place name, not by anything about you; your browser loads the images from them.
• Stripe (planned): will take payments for Pro once paid subscriptions open. Card details will go to Stripe, not to TripStow.

Your trips are private by default. Nothing you add is public unless you choose to share it, and future trips are never public.

• Public profile and leaderboard: only if you switch on a public profile. They show past-travel totals and your country list, never upcoming trips.
• Share cards: images you choose to make and share. Past travel only.
• Community figures on our public flight, route and airport pages: anonymised aggregates of past flights, only from flights at least a week old and only once at least 3 different travellers have flown a flight or route. No single booking is ever published.
• Travel partners see only the trips you share with them, never your stats, Wallet, documents, emails or unfiled plans.

TripStow uses only essential cookies, to keep you signed in. We do not use advertising or analytics cookies, so there is no cookie banner. If that changes, this policy will say so first.

The text of a forwarded email is deleted automatically 30 days after it arrives. Everything else is kept for as long as you have an account, so your travel history stays complete. You can delete it at any time: Settings has "Delete travel data" (all trips, plans, imports and forwarded emails, keeping your account) and "Delete account" (your account and everything in it).

You can ask to see, correct, export or delete your personal data, or object to how we use it. Settings lets you export everything as a CSV file and delete your data yourself. For anything else, email us.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).

Every table in our database uses row level security, so each account can only reach its own data. Loyalty numbers are encrypted. We never ask for, or store, passwords to your airline, hotel or other accounts.

We will update the date at the top of this page when the policy changes, and tell you by email about any significant change.