Privacy policy
What is stored, where, and for how long · Updated Aug 3, 2026
What is stored
The trips you create and everything you put in them: places, ideas, itinerary days, options, expenses and their splits, transports, and the settlements between members. Your account holds a name, an email address and the profile picture your sign-in provider supplies.
Where
One Postgres database, hosted in the European Union. Nothing is copied to a third party for analytics or advertising, and there is no tracking on any page.
For how long
Until you delete it. A deleted trip is kept for 30 days so it can be recovered, then removed. Deleting your account removes your sign-in, your email address and your sessions immediately, along with any trip only you held — nobody would be left to recover it; your memberships on shared trips stay behind as anonymous guests so other people's ledgers still balance.
Who can see it
Every member of a trip can see and edit everything on that trip — there are no roles. A public link shows the itinerary and places to anyone who has the address, and never the budget. Nothing is indexed by search engines.
Getting it back
Ask for your data on the account page and you get a JSON file, built when you ask and kept nowhere afterwards.