Privacy Policy
Last updated 21 July 2026
Roundtrip is a shared trip-planning companion. This policy explains what information the app collects, why, where it goes, and how you can remove it. If you don't agree with it, please don't use the app.
Who we are
Roundtrip is operated by an individual. For any privacy question or request, contact support@roundtrip.one.
What we collect
| Account | If you link an account, your email address and (for Google sign-in) your Google account identity. Using the app as a guest creates an anonymous ID with no email. |
| Profile | The display name and colour you choose for yourself. |
| Trip content | Everything you add to a trip: itinerary, packing lists, budget and expenses, booking checklist, outfit notes and photos, and trip settings — including destination place names, their coordinates, and travel dates. |
| Documents | Files you upload to a trip (tickets, PDFs, screenshots). These are shared with everyone on that trip. Please avoid uploading highly sensitive scans, such as passport photo pages, unless you need to. |
| Photos | Outfit photos you add are stored privately and scoped to you within your trip. |
| Technical | Standard request data (such as IP address) is processed by our hosting providers to deliver the app. If the app crashes, an error report (the error, your browser/device type, and your IP) may be sent to our error-tracking service so we can fix it. We use cookieless, aggregate visit statistics — no advertising trackers and no cross-site tracking. |
Everyone who is a member of a trip can see that trip's shared content and documents, and the names of the other members. Personal slices (your own packing list and outfits) are scoped to you.
How we use it
- To run the app: store your trips, sync them live across your devices and your trip-mates', and let you sign back in.
- To show weather and maps for your destinations.
- If you use the AI itinerary suggestion feature, the trip title, dates, and the description you type are sent to Google's Gemini API to generate the suggestion. Nothing is sent unless you use the feature.
- We do not sell your data or use it for advertising.
Third-party services
The app relies on these providers, which may process the data noted:
- Supabase — hosts the database, authentication, and uploaded files (our backend).
- Vercel — hosts the app and this site, and provides cookieless visit statistics.
- Resend — delivers sign-in code emails to your address.
- Google — authenticates you if you choose Google sign-in; processes AI itinerary requests (Gemini) if you use that feature.
- Sentry — receives error reports when something in the app breaks.
- Open-Meteo — receives destination coordinates (for weather) and place-search text you type (for location search).
- Unsplash — receives cover-photo search terms when you pick a trip cover image.
- OpenStreetMap — serves map tiles; receives your IP and the map area you view.
Storage & security
Data is protected by row-level security so trip content is only readable by that trip's members. Uploaded documents and photos live in private storage buckets and are served through short-lived links that expire after about an hour. Traffic is encrypted in transit (HTTPS).
Data retention & deletion
- Trip content stays until you or another trip member deletes it. You can delete individual documents and items in the app at any time.
- You can delete your account and your data from inside the app (Account → Delete my account). This removes your account, your personal content and photos, and any trips where you are the only member. Trips you shared with others keep their shared content.
- You can also email support@roundtrip.one and we'll remove your data for you.
Children
The app isn't directed at children under 13 and shouldn't be used by them.
Changes
We may update this policy; the "last updated" date above will change when we do. Continued use after an update means you accept the revised policy.
Questions? support@roundtrip.one