Privacy

Travel Planner is a small, free, invite-only trip planner run by one person, Donald Vargo, for friends and family. It is not a business. This page says what it stores, who else sees it, and how to get a copy or delete it. Questions: donald.vargo@gmail.com.

The short version

• No ads, no analytics, no tracking, and nothing is sold or shared for marketing.
• The only cookies are the ones that keep you signed in.
• Your trips are private unless you share them. You can download everything or delete your account at any time from Account settings.

What is stored

• Your account: the name, email address and profile picture Google shares when you sign in, and whether you are a member or a viewer. There is no password.
• Your trips: everything you enter or import: stops, dates, hotels, transport, bookings, notes, and the places you add.
• Documents you upload (for example booking confirmations), plus a text copy the app makes so it can read them.
• Sharing: who you shared a trip with, and the email addresses you invited.
• AI features, if you turn them on: your OpenRouter API key (stored encrypted), your planning chats and suggestions, and a log of AI requests and replies, which is deleted after 90 days.
• Connected apps and access tokens you create, stored so they can be checked and revoked. The tokens themselves are only kept in a scrambled (hashed) form.
• A security log of actions such as creating or deleting a trip, sharing, importing and connecting apps. It records what kind of action happened and when, not your trip contents.

Who else sees it

• People you share a trip with can see that trip.
• Google handles sign-in.
• OpenRouter, and the AI model provider you pick there, receive the trip details and messages needed to answer, but only when you use an AI feature, and only with your own API key. Their own privacy policies apply to that data.
• Map and place services: place names and addresses you search for are sent to Photon (by Komoot), and sometimes to OpenStreetMap's Nominatim and Overpass services. Map images load from OpenFreeMap. These services see the search text and your connection's IP address, not your account.
• Invitation emails, if they are turned on: the email service Resend receives the invited person's email address, your name, the trip's name and the invitation link, so it can send the invitation.
• Apps you connect (for example an AI assistant using this app's MCP connector) can read or change your trips, but only within the permissions you approve.

Nobody else gets your data, unless the law requires it.

Where it is kept

On servers in the United States that the operator controls: currently a home server, and later an Amazon Web Services server. Backup copies are kept on a home storage device for up to 90 days.

Your choices

• Download your data: Account → Download my data gives you one archive with everything above. Secrets such as keys and tokens are left out.
• Delete your account: Account → Delete my account removes your account, the trips you own (with their documents), your shares, tokens and connected apps straight away. Copies in backups are deleted once those backups age out, within 90 days.
• Anything else: email donald.vargo@gmail.com, for example to correct something or ask what is stored about you.

Children

Travel Planner is not meant for children under 13.

Changes

If this page changes, the date at the top changes too. Significant changes will be mentioned to members directly.