In short: we use the bookings and documents you send us to build your trips, and nothing else. We never sell your data, and booking contents are never shared with advertisers. You can delete your account and its data at any time.
1. Who we are
DocuTrip (the mobile apps, the web app and travelup.world) is operated by [OPERATOR LEGAL NAME], [OPERATOR COUNTRY] ("we", "us"). We are the controller of the personal data described here. Questions or requests: privacy@travelup.world.
2. What we collect
Account
- Your name and email address, and your Google or Apple account ID if you sign in with Google or Apple. With Sign in with Apple you can hide your email: we then receive an Apple relay address, and Apple forwards our emails to you.
- For email and password accounts, a one-way hash of your password (we never store the password itself).
- The personal forwarding address we create for you.
What you send us
- Emails you forward to your DocuTrip address: sender, subject, body and attachments. If you set up automatic forwarding, we receive every email that rule forwards, so we recommend forwarding only travel confirmations.
- Documents, photos, screenshots and links you share into the app.
- Booking details we extract from them, such as traveller names, dates, times, addresses, confirmation numbers, seats, prices, barcodes, loyalty numbers and, if they appear in your documents, ID or passport numbers.
- Content you create: trips, plans, notes, checklists, expenses, insurance policies, loyalty programs and messages to the AI trip planner.
- Voice recordings, only when you tap the microphone. The clip is sent to our server to be turned into text.
- People you invite: the email addresses of trip or expense group members you invite.
Collected automatically
- Technical logs: IP address, request times, the app action and any error. Kept for 90 days, for security and to fix problems.
- Advertising identifiers (IDFA on iOS, advertising ID on Android), device and usage data collected by Google AdMob to show ads (see section 5).
We do not access your email inbox, contacts or device location. Camera, photo library, microphone and calendar access is used only for the feature you start, and only after you allow it.
3. How we use it
| Purpose | Data | Legal basis (EU/UK) |
|---|---|---|
| Create your account and sign you in | Account | Contract |
| Read your bookings and organize your trips, plans, expenses and documents | What you send us | Contract |
| Share a trip or expense group with the people you invite | Trip and group content, invitee emails | Contract |
| Send account emails (for example email confirmation) | Email address | Contract |
| Keep the service secure, prevent abuse and fix errors | Logs, account | Legitimate interests |
| Show ads, and personalized ads where you allow them | Advertising identifiers, device data | Consent (legitimate interests for non-personalized ads where allowed) |
| Meet legal obligations | As required | Legal obligation |
We do not use your bookings or documents to profile you for advertising, and we do not sell your personal data.
4. AI processing
To read your bookings, we send the content of forwarded emails and shared documents to OpenAI through its business API. It handles text extraction, PDF reading, the trip planner, voice transcription and web search, and processes this data only to return the result to us. OpenAI does not use API data to train its models by default. AI can make mistakes, so always check important details with your airline, hotel or other provider.
5. Advertising
The free app shows ads from Google AdMob, clearly labelled "Sponsored". AdMob may collect your advertising identifier, IP address and device and usage data, under Google's policy. We never pass booking contents, documents or messages to ad networks.
- EU, EEA, UK and Switzerland: we ask for your consent through Google's consent form before personalized ads. You can change your choice any time in Profile → Ad privacy choices.
- iOS: we ask for tracking permission (App Tracking Transparency). If you decline, you still see ads, but they are not personalized using your IDFA.
- Android: you can reset or delete your advertising ID in your device's Google settings.
6. Partner offers
We may show offers from travel partners (for example tours, eSIMs, car rental or insurance) and earn a commission if you book through them. When you open an offer, the partner learns that you came from DocuTrip and receives only the destination and dates needed to show the offer. What you then do on the partner's site is covered by the partner's own privacy policy.
7. Who we share data with
We share personal data only with:
- People you share with: members of your trips and expense groups see the content of those trips and groups.
- Service providers that run DocuTrip for us, under contracts that limit their use of the data:
| Provider | What for | Location |
|---|---|---|
| Railway | Server hosting | United States |
| Neon | Database and file storage | United States |
| Twilio SendGrid | Receiving forwarded emails, sending account emails | United States |
| OpenAI | AI text extraction, PDF reading, trip planner, voice transcription, web search | United States |
| Apple | Sign in with Apple | United States |
| Sign-in, maps and place search (addresses and place names only), AdMob ads | United States and worldwide | |
| Ticketmaster | Event suggestions (city and dates only) | United States |
| Pexels | Destination photos (destination name only) | Germany |
| Cloudflare | Website hosting | Worldwide |
We may also disclose data when the law requires it, to protect our users or our rights, or as part of a merger or sale of the business (you would be told first).
8. International transfers
Our providers process data outside your country, including in the United States. Where the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses.
9. How long we keep it
- Your account content, including forwarded emails and attachments, stays until you delete it or your account.
- When you delete your account, we delete its data within 30 days. Backups roll over within a further 30 days.
- Technical logs are deleted after 90 days.
- We keep data longer only where the law requires it.
10. Security
Data is encrypted in transit. Attachments are stored in a private bucket and opened only through short-lived links. On your phone, your sign-in token is kept in the device's secure storage, and you can lock the app with Face ID or fingerprint. No system is perfectly secure, and we will notify you and the authorities of a breach where the law requires it.
11. Your rights
Depending on where you live (for example under the GDPR, UK GDPR, California's CCPA/CPRA or Israel's Privacy Protection Law), you can ask to access, correct, delete or export your data, object to or restrict how we use it, and withdraw consent at any time. You can delete your data yourself in the app, or see how to delete your account.
Email privacy@travelup.world from your account address and we will reply within 30 days. We will not treat you differently for using these rights. You can also complain to your local data protection authority.
California: we do not sell personal data. AdMob's use of advertising identifiers for personalized ads may count as "sharing" under the CCPA. To opt out, use Profile → Ad privacy choices, decline tracking on iOS, or delete your advertising ID on Android.
12. Children
DocuTrip is not directed to children under 16, and we do not knowingly collect their data. If you think a child has given us data, contact us and we will delete it.
13. Changes
We will post any change here and update the date at the top. If a change is significant, we will tell you in the app or by email before it takes effect.