Privacy and data

Information you provide

• Trip details such as destination, dates, children's age ranges, routines, interests, budget and pace.
• Accommodation and fixed-booking details when you ask the planner to route around them.
• Your email address when you create or sign in to an account, and when you ask us to email an itinerary.
• Optional family-profile details such as a child’s first name or nickname, age, interests, walking tolerance, buggy use, nap pattern and bedtime. We do not ask for a child’s date of birth.

Children's names or nicknames are optional. Please do not enter medical information or other sensitive personal details. The service is intended for adults planning family travel.

How information is used

Planner inputs are used to research a destination, check routes and timing, generate the itinerary and, if requested, save or email it. If you create an account, saved family-profile settings are used as defaults for future trips; you can change them for any individual trip. Operational logs contain request identifiers, provider status, timing and aggregate counts; application logs are designed not to record family or trip details.

Temporary request counters protect the beta from excessive planning, saving and email requests. Client IP addresses and email addresses are converted into secret-keyed identifiers that change with each limit window; the counters do not store the original addresses or trip content. Counters expire within 24 hours and are removed during later requests.

Copies kept on this phone

In the updated iPhone app, “Keep on this phone” stores a text copy of the itinerary in the app’s private storage for up to 30 days. It includes day and stop details, not your sign-in credentials or separate family profile. Anyone using the unlocked phone can read it. Remove individual copies from the online trip screen, or all copies from the bundled trip reader. Signing out or deleting your account on that phone clears its copies. Changes or deletion on another device cannot immediately remove an offline copy; reconnect and remove it on that phone. Normal device backups may also include app storage.

Using your location

Location is requested only when you choose “Use my location”. You can enter an address instead. Your coordinates or address are sent to Google to find places and check journeys. Nearby searches and adding an outing do not save your current starting coordinates. If you choose that point as your accommodation and save the trip, the base coordinates are saved as part of the itinerary and can be seen by anyone you share its link with. We do not track your location in the background.

Analytics

We use Vercel Web Analytics for first-party pageview totals. Query strings are removed before an event is sent, and saved-itinerary pages under /trip/ are excluded entirely. We also keep daily aggregate counts for a small set of product actions: starting the planner, completing the family-details step, generating, saving, emailing and copying a share link. These counters contain no visitor identifier, trip identifier, destination, dates, ages, addresses or itinerary content.

Services that process data

Vercel

hosting, security logs and privacy-friendly pageview analytics

Google Maps Platform

place search, geocoding, routes and weather

Tavily

public source discovery using destination names; no family routines or accommodation details are sent for this research

OpenStreetMap and Nominatim

map display and backup location lookup

Neon

storage for accounts, family profiles and trips you choose to save

Resend

delivery of sign-in links and itinerary emails you request

Those providers may process data in other countries under their own data-protection terms.

Accounts, caching, saved trips and retention

Reusable destination coordinates may be cached for 30 days, public place research for 24 hours and destination weather for 30 minutes. Accommodation addresses, booking details and personalised routes are not placed in the shared provider cache.

Anonymous saved trips are scheduled for deletion 12 months after the later of their save date or return date. Trips attached to a signed-in account, the family profile and the account record are retained while the account remains active so they can be reused across devices. You can request deletion of account data at any time using the contact address below. Expired anonymous records are removed during subsequent service activity or maintenance.

A saved itinerary uses an unguessable, possession-based link: it is not indexed, but anyone with the link can view it and submit an accuracy report. Reports contain a category, optional affected stop and explanation; no reporter email or family details are requested. A copy is sent to the Travel After Kids review inbox so it can be checked before any recommendation changes. Reports are deleted with the trip or after 12 months, whichever comes first. Keep the share link private.