Privacy Policy

Effective date: 19 October 2026

This Privacy Policy explains how Tralendr, operated by The Walking Universe ("Tralendr", "we", "our", "us"), collects, uses, shares, and retains your information when you use our website at tralendr.com, our iPhone and Android apps, and our connectors for AI assistants such as Claude, ChatGPT and Gemini (together, the "Service"). It also explains the controls you have over your information. By using the Service you agree to this policy.

1. Information we collect

1.1 Information you provide

• Account information: your email address, and optionally your name, gender, date of birth, home city, and whether you want our newsletter. We sign you in with a one-time code sent to your email, so we do not store a password you choose. You can also sign in with Apple: Apple tells us your Apple account identifier and the email address you choose to share, which may be a private relay address that forwards to you, and we use it to create or find your account. We never receive your Apple password.
• Trip content: the trips you create or save, including destinations, dates, the places you add, visit times, notes, and traveller type.
• Support messages: the name, email, and message you send us through our support form or by email.

1.2 Information collected automatically

• Log and device data: such as your IP address, browser or device type, operating system, referring pages, and actions taken in the Service, used for security and to keep the Service working.
• Cookies and similar technologies: used to keep you signed in and, with your consent where required, for analytics. You can manage these through our cookie banner and your browser or device settings.
• Guest session cookie: you can plan a trip before you have an account. A cookie identifies that draft so you can come back to it in the same browser, and the draft is linked to your account if you sign in. It holds no personal information beyond the identifier itself. See section 4 for how long a draft is kept.
• Push notification identifiers: if you use our mobile app and allow notifications.
• Location (mobile apps, optional): if you allow location access in our mobile apps, we use your device's location to show where you are on your trip map. At limited moments while you are on a trip — such as opening your trip map or asking for recommendations — we also store an approximate location (accurate to roughly 100 metres, never your precise position) to make recommendations more relevant to where you are. Location is only read while you are actively using the app, never in the background, and you can withdraw permission at any time in your device settings; the app works without it.

1.3 Information from a connected AI assistant

This section is about an assistant you connect sending information to us. For the text Tralendr sends out to language-model providers for its own chat and plan generation, see section 5.2.

If you choose to connect an AI assistant to Tralendr, then when you ask that assistant to create, read, update, or share a trip, it sends us only the information needed to carry out that request, for example a destination, trip dates, place names, and visit times. We do not receive your wider conversation with the assistant, only the specific tool inputs it sends to us. We also store the access tokens that let the assistant act on your account until you disconnect it. See section 5 for details.

1.4 Information from third parties

• Place details: when you add a place, we look it up through Google's mapping and places services to attach its real location, address, and category to your trip. We store those details, and a picture of the place where one is available, with your trip, so that your itinerary still reads correctly without fetching them again each time.
• Images: we may show destination or place images from providers such as Unsplash and Pexels.

1.5 Payment information

We do not collect payment information. Tralendr is free, and nothing on it is sold. Where the Service shows travel you could book, booking is not yet switched on; when it is, you will be handed to the travel provider that sells it, who takes any payment under their own terms. Tralendr takes no payment and stores no card details.

1.6 Trips you plan with other people

You can invite other people onto a trip to plan it with you. An invitation is sent to the email address you give us, and the invitation shows who invited them, the name of the trip, and the trip's cover picture. Once somebody is on a trip, the people on it can see each other's name, initials, and the colour we assign them, and can see when another of them has the trip open and which day, and which place on it, they are looking at. We do not show the other people's email addresses, and we do not show anyone where you are — the location your device reports is never shared with the other people on a trip. Anything a person does to the trip — adding a place, moving a day, writing a note — is visible to everyone on that trip and is attributed to them by name.

2. How we use your information (purposes)

• To provide the Service: creating, storing, organising, displaying, and sharing your trips, and turning place names into real locations on a map.
• To operate connections you set up with AI assistants, so a connected assistant can create and update trips on your behalf.
• To answer you in Tralendr's own chat and to generate a plan when you ask for one, which means sending the text of that conversation and the facts of the trip to a language-model provider (section 5.2).
• To let people planning a trip together see each other's changes as they happen, and to show who else has the trip open (section 1.6).
• To sign you in and keep your account secure, including sending one-time login codes.
• To respond to your support requests.
• To send you service messages, and, only if you opt in, occasional product or marketing emails you can unsubscribe from at any time.
• To understand and improve how the Service is used, using analytics.
• To keep the Service safe: detecting, preventing, and investigating fraud, abuse, and security issues.
• To comply with legal obligations and enforce our terms.

3. How we share your information (recipients)

We do not sell your personal information. We share it only as described below.

• Service providers who process data for us, in these categories: hosting and infrastructure (our cloud host and Cloudflare); email delivery (Brevo); analytics (Google Analytics) and consent management (Cookiebot); maps and place data (Google Maps Platform); image providers (Unsplash, Pexels); realtime messaging (Pusher Ltd), which carries the live updates between people planning the same trip; and push notifications and related services (Firebase). They may only use the data to provide their service to us.
• Language-model providers, for Tralendr's own chat and plan generation, such as Anthropic, OpenAI and Groq. What we send is described in section 5.2. This is separate from any AI assistant you connect yourself, below.
• Other people you plan with: if you invite somebody onto a trip, the people on that trip can see each other as described in section 1.6, and can see each other's changes to the trip.
• AI assistant providers you choose to connect, such as Anthropic (Claude), OpenAI (ChatGPT), or Google (Gemini). When connected, trip information flows between that assistant and Tralendr to carry out your requests. Those assistants are operated by other companies under their own terms and privacy policies, which govern what they do with your conversation.
• People you share a trip with: if you create a share link for a trip, anyone who has that link can view that trip without an account. Sharing is your choice and can be undone.
• Legal and safety: when required by law, legal process, or to protect the rights, safety, and security of our users, the public, or Tralendr.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honour this policy.

4. How we retain your information (retention)

• Account and trips: kept for as long as your account is active, until you delete a trip or delete your account, after which we remove it from our live systems.
• One-time login codes: expire within about 10 minutes.
• AI assistant access tokens: access tokens are short lived (about one day) and refresh tokens last up to about 90 days. When you disconnect an assistant, its access is revoked immediately, and expired tokens are deleted automatically by a routine cleanup.
• Location information: approximate location points from the mobile apps are deleted automatically after 90 days, and immediately if you delete your account.
• A trip you make without an account: we create a temporary account to hold it, and that account and everything in it are kept for 30 days and then deleted. Sign in within that time and the trip becomes yours, kept like any other.
• A plan you start and walk away from: a draft in the planner that you leave untouched for about 48 hours is cleared sooner than that. The clock runs from the last time you changed it, not from when you began, and a draft you save, share, or claim by signing in is never cleared.
• Tralendr's chat and plan generation: the messages in a trip's chat are kept with the trip, so the conversation is still there when you come back, and are deleted when you delete the trip or your account. What the language-model provider keeps of the text we send is governed by that provider's own terms.
• Live updates between people on a trip: these are messages in transit, not a record. The realtime service carries them to the other people who have the trip open and we do not keep a log of them; what is kept is the change itself, on the trip.
• Other temporary session data: retained for a limited period and then automatically purged.
• Logs and analytics: retained for a limited period for security, debugging, and product analysis, normally no more than 12 months.
• Backups: residual copies may persist in secure backups for a limited additional period before being overwritten.

We may keep information longer where the law requires it or to resolve disputes and enforce our agreements.

5. AI assistants, and Tralendr's own AI features

5.1 Connecting your own AI assistant

Connecting an AI assistant is optional. When you connect one, you sign in to Tralendr and approve what the assistant is allowed to do, described in plain terms as viewing your trips, creating and editing your trips, and viewing or updating your basic profile. We then issue access tokens that let the assistant act on your account within those limits.

You can see and revoke connected assistants at any time in the Connected apps section of your Tralendr profile. Revoking access takes effect immediately. The assistant itself is run by a separate company, and its handling of your conversation is governed by that company's own privacy policy.

5.2 Tralendr's own chat and plan generation

Tralendr has an assistant of its own. When you ask it a question about a trip, or ask for a plan to be generated, we send the text of that conversation and the facts of the trip — where you are going, the dates or the number of days, the places already on it, and what you asked for — to a language-model provider so that it can answer. The providers we use include Anthropic, OpenAI and Groq; which one answers a given request can change, and we may add or replace a provider without changing this policy.

We do not send your account with it. Your email address, your name, your profile and the other trips on your account are not part of what goes to a provider. If you type something personal into the chat, that text is part of the conversation and goes with it, so treat the chat as you would any message you are sending to a company.

These providers process the text to produce an answer and may handle it within their own terms of service. What each provider keeps, how long it is kept, and how it may be used is governed by that provider's own terms. This is separate from any assistant you connect yourself under 5.1, which is a connection you make and can revoke.

6. Your rights and controls

• Access and update: view and edit your profile and trips at any time in the app or website.
• Delete your account and data: you can delete your account, which removes your trips, from the delete account page.
• Disconnect AI assistants: revoke any connected assistant's access from the Connected apps section of your profile.
• Leave a trip, or remove somebody from one: you can leave a trip you were invited to, and the person who owns a trip can remove anyone from it. Once somebody is off a trip they can no longer see it or its changes.
• Stop sharing: a share link can be turned off at any time, after which it no longer opens the trip.
• Tralendr's chat: the conversation belongs to the trip, so deleting the trip deletes it. We cannot recall text a language-model provider has already received; what they keep is governed by their own terms (section 5.2).
• Marketing: unsubscribe from marketing emails using the link in any such email.
• Cookies: manage your choices through our cookie banner and your browser or device settings.
• Regional rights: depending on where you live, you may have rights to access, correct, delete, port, or object to the processing of your personal data, and to withdraw consent. To exercise these, contact us at [email protected]. You also have the right to complain to your local data protection authority.

7. Data security

We use reasonable technical and organisational measures to protect your information, including encryption in transit and scoped, revocable access for connected assistants. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Where local law sets a higher age of digital consent, that age applies. If you believe a child has provided us information, contact us and we will delete it.

9. International transfers

We operate internationally, and your information may be processed in countries other than your own, including by the service providers listed above. This includes the language-model providers in section 5.2 and our realtime messaging provider, which are based outside the United Kingdom and the European Economic Area or process data there. Where required, we use appropriate safeguards for such transfers.

10. Third-party links

The Service may link to third-party sites and services we do not control. Their privacy practices are governed by their own policies, which we encourage you to review.

11. Changes to this policy

We may update this policy as the Service evolves. We will post the updated version here with a new effective date, and for significant changes we will take reasonable steps to notify you.

12. Contact us

Questions about this policy or your data? Contact us at [email protected]. See also our terms of service.