Privacy Policy
Effective date: August 23, 2026
Shared Trip Planner (“we”, “our”, or “the app”) is committed to protecting your privacy. This policy explains what the iOS app stores and how it uses Apple’s services. The app is not intended for children under 13.
1. Information you store in the app
The app only processes data you enter for your own trips:
- Trips: name, destination, dates, time zones, base currency, cover, and travelers.
- Itinerary & ideas: day plans, activity proposals, votes, places, notes, links, and estimated costs.
- Reservations: type, supplier, confirmation codes, dates, contacts, and status.
- Lists & expenses: packing items, assignees, amounts, payers, split methods, and settlement notes.
- Attachments: photos, receipts, and other files you explicitly attach to a trip record.
We do not require a separate account beyond your Apple ID for iCloud. Do not store payment card numbers, passport scans you do not need, or government identity documents in the app unless you choose to attach them yourself.
2. Where data is stored
Trip data is saved on your device and, when you enable iCloud sharing, in your iCloud account using Apple’s CloudKit. Local-only trips stay on the device. Shared trips use Apple’s CloudKit sharing when you invite travel companions.
We do not run our own backend for your trip data. There are no ads or analytics SDKs in the app. Storage and sync are handled by Apple’s iCloud infrastructure under your Apple ID.
3. Photos, camera, and attachments
Camera, photo library, location, calendar, and notification access are requested only from the relevant user action (for example attaching a photo, dropping a pin, exporting to Calendar, or setting a voting reminder). Attachments sync to invited companions when sharing is enabled. Location is stored only when you select or enter a place.
4. Sharing with travel companions
When you share a trip, invited companions can view trip contents. Write access depends on the CloudKit permission you grant and the organizer/participant role in the app. Sharing uses Apple’s native CloudKit invitation flow. There is no public link. Votes, reservation codes, traveler names, and attachments stay inside the private share.
5. Third-party services in the app
The app does not embed analytics SDKs, ads, or third-party trackers. Purchases use Apple StoreKit. Sync uses Apple iCloud (CloudKit) when you choose to share. Places and maps use Apple MapKit on device; there is no developer-operated location tracking.
6. Website (if you use our marketing pages)
If you visit our public website, it may use standard tools such as Google Tag Manager or similar for aggregated traffic insight. That activity is separate from data inside the iOS app and is governed by the policies of those providers.
7. Export
You can export a confirmed itinerary as PDF or to Calendar, optionally with an ideas-and-voting appendix, and expenses as CSV. Exports are explicit user actions and may contain traveler names, reservation codes, votes, and other sensitive content. Voter names are excluded from exports unless you turn that option on.
8. Retention and deletion
Data remains on your device and, if shared, in your iCloud while you use the app. You can delete records inside the app. Owners can stop sharing a trip. Participants can leave a shared trip. To remove all app data from iCloud, use your Apple ID / iCloud settings or delete the app and associated iCloud data as described by Apple.
9. Changes
We may update this policy; the effective date at the top will change when we do. Please review this page occasionally.