Privacy

TickTrip Privacy Policy

Last updated:

TickTrip is a travel planning app designed to help users organise trips, packing lists, to-do lists, itinerary items, travel documents and related trip information.

TickTrip is operated by an independent UK-based developer and is not operated by a company.

Information We Collect

TickTrip is designed as an offline-first app. Information you enter into the app is stored locally on your device. This may include trip details, destinations, dates, packing items, to-do items, itinerary details and documents or images that you choose to add.

Camera Permission

TickTrip may request access to your device camera only when you choose to use a feature that requires it, such as adding or capturing a document, image or other trip-related content. Camera access is not used in the background.

How We Use Your Information

Information stored in TickTrip is used to provide the app’s core travel planning features. If you choose to sign in with Google, your account information is used for authentication and to support optional cloud features where available, such as syncing and sharing trips. If you connect an assistant, we also use supported trip information to carry out your requests through that connection. We do not sell your personal information or use it for advertising. External providers have their own policies.

Optional Account Login (Google)

You may optionally sign in using your Google account. Sign-in is handled via Supabase authentication. This login is optional and is intended to support optional cloud capabilities, including syncing your trip data across devices and sharing trips where available.

Local Storage

Your app data is stored locally on your device by default. If you choose to sign in and enable optional sync or sharing features, relevant data may also be stored in connected cloud services to provide those features. Removing the app may delete locally stored data, depending on your device settings and backup configuration.

Data Security

TickTrip uses a local-first model, which means your trip data is primarily stored on your device. For optional cloud features where available, data is transmitted using encrypted connections provided by our authentication and infrastructure providers. You are responsible for maintaining the security of your device, including device lock, backup settings and account credentials.

Privacy Rights (UK GDPR / GDPR)

Depending on your location and applicable law, you may have rights to request access, correction, deletion or export of your personal data, and to withdraw consent for optional processing. Most locally stored app data can be removed directly from your device by deleting items in-app or uninstalling TickTrip.

Data Retention

Local data remains on your device until you delete it. When you delete synced data, it is removed from normal app use immediately and the deletion is sent to your other devices when they sync. A deletion record and associated synced data may remain in our cloud systems for up to 90 days to prevent an offline device from restoring it. It is then permanently removed through automated cleanup. Devices returning after this period are refreshed from the current cloud state. Separately, if a signed-in cloud account has no authenticated cloud activity for more than 365 days, the cloud account and its synced database data may be permanently deleted. Data kept locally on a device is not deleted by this inactive-account cleanup. Data held in service-level backups follows the provider's separate backup-retention process. Information already sent to ChatGPT follows OpenAI’s retention and deletion rules, as explained below.

Permissions

TickTrip may request access to camera, photos/media, files/documents and notifications only when needed for specific features you choose to use. Permissions are feature-driven and optional, and can be managed in your device settings.

Sharing Data

TickTrip does not share your personal data with third parties for marketing or advertising. If you choose to share trip information, documents or other content using device sharing features, that action is controlled by you and by the apps or services you share with. Connecting ChatGPT also allows supported trip information to be shared with OpenAI when you use the integration, as explained below.

Account-to-account trip sharing, where available, requires a signed-in recipient to accept an invitation. Recipients receive only the shared destination, dates and limited itinerary details, including item titles, travel services, venue names, times, booking status and airport references. Any personal information entered in those shared fields is visible to recipients. The owner's private notes, booking references, seats, costs, documents, packing and to-dos are excluded. Owners and recipients see relevant account display names to manage sharing. A display name comes from profile information and may itself contain an email address; a separate email address or profile photo is not sent through trip sharing. The app also receives trip, itinerary and membership identifiers. We retain invitation and membership status, expiry and access changes with the cloud trip until trip or account deletion; invitation tokens are stored as hashes.

An owner can revoke access, and a recipient can leave. This prevents future server access. A recipient who is offline may retain previously downloaded shared details until their app reconnects; copied or externally saved information cannot be remotely erased. Trip sharing is separate from optional assistant access. Downloaded shared trips and your personal packing and to-do lists are stored on your device and can be included in a portable app backup, which can be password encrypted. Your personal lists are not shared with the owner or synced to other devices. Signing out, leaving or losing access hides the trip and lists; they remain on the device. A restored trip becomes available after the same account's membership is checked again.

Optional AI Assistant Integrations (ChatGPT)

Connecting ChatGPT is optional and only available for accounts with assistant access enabled. Public connectors and GPT plugins are awaiting release and approval. In TickTrip Settings → Account & Sync, you can turn on “Allow ChatGPT access”; this enables your account permission now but does not connect ChatGPT. You will still approve the connection separately when it is available. Your preference is stored until you change it or your cloud account is deleted. Alongside your current choice, we store when you last changed it and an informational permission-scope version. This is separate from software releases and updates to this privacy policy. We do not keep a consent history, wording archive or IP address for this setting. When a connection is available, you sign in to TickTrip and choose Allow on the connection page. Signing in alone does not connect an assistant. You can keep using TickTrip offline without it.

What ChatGPT can access and change

ChatGPT can find destinations, read your synced trips and supported itinerary entries, and create or update them at your request. This includes:

  • Trip destinations (town/city and country), dates, business-travel status and whether a trip is archived.
  • Flights, hotels, activities, dining, transport and packages: names or titles, dates and times, booking status, and how entries are grouped.
  • Supported travel details, such as airlines, flight numbers, airports and terminals, and identified public venues, addresses, timezones, routes, service numbers, platforms and operators. Business phone numbers and websites are included only when supported by a public source.

What stays private

These tools cannot delete trips or entries, make bookings or payments, or access all your cloud data. Saved travel details are not live service updates. Private booking references, confirmation and seat numbers, notes, costs, private addresses and contacts, and vehicle registrations remain unavailable. The supported travel details above are protected during transfer and in TickTrip’s cloud storage, but do not use your additional sync-password encryption. Information encrypted with that password can only be unlocked on your authorised devices; the assistant has no decryption key. Photos, documents and tickets stored only on your device are unavailable through this connection, as are packing and to-do lists.

How OpenAI uses the information

When you ask ChatGPT to use TickTrip, relevant information returned by these tools is sent to and processed by OpenAI. OpenAI may retain it and use it, including for model improvement, according to your account or workspace settings and applicable policies. Review OpenAI’s privacy information below before connecting. TickTrip’s cloud security and deletion rules do not control copies held by OpenAI.

How to stop access

Turn off “Allow ChatGPT access” in TickTrip Settings → Account & Sync while online; the app confirms your choice after the server saves it. This blocks subsequent requests, including existing connections. You can also disconnect TickTrip in ChatGPT’s connection settings. To request revocation of the connection’s authorisation, contact support@ticktrip.app. Revoking the authorisation also blocks subsequent requests. Disconnecting or withdrawing access does not delete information already sent to OpenAI; use OpenAI’s data controls to manage those copies separately.

Currency Calculator and Exchange Rates

TickTrip fetches indicative reference exchange rates directly fromFrankfurter. Requests may run when you open the calculator, return to the app or change your currency or trips. They include currency codes (pairs such as GBP/USD), including currencies suggested by your saved destinations. Frankfurter and the network infrastructure delivering its API may receive your IP address and other network metadata when handling these requests. We do not send trip details, destination names, locations, travel dates, entered amounts, account identifiers or device identifiers to Frankfurter. No device geolocation is needed.

Cached rates, observation/check timestamps and manually selected calculator pairs stay locally on your device and are not synced to Supabase. Manual pairs are included in your local backup settings; disposable rate caches are excluded from exported backups. Old cache entries and deleted-trip preferences are pruned to bound storage. Your existing preferred app currency can still sync if you use account sync. Saved rates work offline when available. These are dated reference rates, not a guaranteed card, cash or transaction exchange price. SeeFrankfurter’s service and privacy informationand its licence and terms.

Third-Party Services

TickTrip may use platform services provided by Google Play, Apple or your device operating system for app installation, updates, permissions and crash/error handling. If you use optional Google sign-in, TickTrip also uses Supabase and Google authentication services. Optional ChatGPT connections use OpenAI. These providers may process information outside your country, including outside the UK or EEA, under their applicable safeguards and privacy policies:Google,Supabase,Apple,OpenAI.

Affiliate Links

Some links may be affiliate links. TickTrip may earn a commission if you buy, at no extra cost to you.

Cookies and Server Logs (Website)

The TickTrip website uses minimal essential cookies and basic server logging required for site operation, security and performance. We do not use advertising cookies.

Advertising and Marketing Tracking

TickTrip does not use advertising SDKs or build individual advertising profiles.

Marketplace and Recommendation Usage

When you install a Community List or tap an individual recommended product link, the app attempts to report that action to TickTrip. Each recorded event contains only the action type, the template or product identifier and the time received by our server. These records do not include account or installation identifiers, IP addresses, user agents, country, device timezone or trip details. Normal network requests still reach our hosting infrastructure and may be subject to security logging and rate limits.

We retain this event history to understand content popularity and changes over time; it is not automatically deleted when the original content is removed. Reporting does not require sign-in and failures do not prevent installing lists or opening product links. Product links open directly with the provider, whose own privacy policy applies.

Children’s Privacy

TickTrip is not specifically directed at children. We do not knowingly collect personal information from children.

Your Choices

You can control app permissions, including camera access, through your device settings. You can also delete data entered into the app using app features, or uninstall the app from your device. Optional assistant access and previously shared information can be managed separately, as described inOptional AI Assistant Integrations (ChatGPT).

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We will notify you of significant changes to how we use or share your information before those changes take effect and request fresh consent where required.

Optional Cloud Sync — Data We Store

TickTrip was built offline-first. Your data stays on your device by default. If you choose to use optional cloud sync, which is enabled when you choose to sign in, selected trip data can be securely stored so it stays available across your signed-in devices, with future web access where available. Some personal fields receive enhanced protection using the additional password you set after signing in. Photos and documents are not currently synced.

Data area

App settings

Synced
Yes
Protection
Securely stored
Summary

Currency preference, Date/locale preference, Business trip tracking preference, Packing duplicate behaviour

Details
Data pointSyncedProtectionWhy
Currency preferenceYesSecurely storedKeeps your preferred currency available across signed-in devices.
Date/locale preferenceYesSecurely storedKeeps your preferred date and locale formatting available across signed-in devices.
Business trip tracking preferenceYesSecurely storedKeeps your business-trip tracking preference available across signed-in devices.
Packing duplicate behaviourYesSecurely storedKeeps your duplicate-item handling preference available across signed-in devices.
Data area

Trip data

Synced
Partially
Protection
Varies by data type
Summary

Trip names, destinations, dates, notes, and trip media handling.

Details
Data pointSyncedProtectionWhy
Destination descriptionYesEnhanced protectionRestores the destination details you entered manually.
CountryYesSecurely storedRestores the country linked to your trip destination.
Trip datesYesSecurely storedRestores trip dates and countdown information.
CurrencyYesSecurely storedRestores the currency preference for the trip.
Trip notesYesEnhanced protectionRestores notes you saved with a trip.
Trip categoryYesSecurely storedRestores whether the trip is marked as holiday or business travel.
Trip photos and filesNoNot uploadedPhotos, documents, and files attached to a trip stay on your device and are not uploaded to optional cloud sync.
Names, locations and service detailsYesSecurely storedStores approved operational details for cross-device sync; sharing and integration access require separate permission.
Data area

Packing data

Synced
Yes
Protection
Securely stored
Summary

Bag names and details, Packing item names, Packing quantities and weights

Details
Data pointSyncedProtectionWhy
Bag names and detailsYesSecurely storedRestores your reusable bags and packing containers.
Packing item namesYesSecurely storedRestores the items in your trip packing lists.
Packing quantities and weightsYesSecurely storedRestores packing quantities, progress, and item weights.
Data area

Trip itinerary data

Synced
Partially
Protection
Varies by data type
Summary

Flights, accommodation, activities, transport, bookings, and itinerary notes.

Details
Data pointSyncedProtectionWhy
Itinerary item typeYesSecurely storedRestores whether an itinerary item is a flight, hotel, activity, dining entry, package, or transport leg.
Dates and timesYesSecurely storedRestores itinerary dates and times.
Item notesYesEnhanced protectionRestores notes you saved for itinerary items.
Names, locations and service detailsYesSecurely storedKeeps sourced public venue addresses, business contacts and service details in normal owner sync.
Booking statusYesSecurely storedKeeps whether itinerary items need booking or are already booked in sync.
Flight numbers and airportsYesSecurely storedRestores saved flight numbers and airport details.
Airlines and hotel brandsYesSecurely storedRestores airline and hotel brand details linked to your itinerary.
Booking references and confirmation detailsYesEnhanced protectionRestores booking references and confirmation details you saved.
CostsYesEnhanced protectionRestores cost details you entered for activities or packages.
Linked providersYesSecurely storedRestores links to saved providers attached to itinerary items.
Transport detailsYesVaries by data typeRestores transport type, route, vehicle, operator, and booking details.
Attached documents and filesNoNot uploadedDocuments and files attached to itinerary items stay on your device and are not uploaded to optional cloud sync.
Item structure and groupingYesSecurely storedKeeps sub-items attached to the correct parent itinerary item across signed-in devices.
Names, locations and service detailsYesSecurely storedStores approved operational details for cross-device sync; sharing and integration access require separate permission.
Data area

Vendor data

Synced
Yes
Protection
Securely stored
Summary

Saved provider names, websites, phone numbers, and email addresses.

Details
Data pointSyncedProtectionWhy
Provider namesYesSecurely storedRestores saved provider records you choose to reuse across trips.
Website linksYesSecurely storedRestores provider website links you saved.
Phone numbersYesSecurely storedRestores provider phone numbers you saved.
Email addressesYesSecurely storedRestores provider email addresses you saved.

Protection legend

Securely stored
Used where information is required to rebuild and organise your trips across devices. Protected during transfer and while stored in TickTrip cloud services.
Enhanced protection
Used for information you create yourself or information that may reveal more about your travel plans. This information receives additional encryption.
Not uploaded
Stored only on your device and excluded from optional cloud sync.
Varies by data type
Different parts of this data area use different protection levels depending on the information being stored.

Data retention and deletion

Most synced trip information is user-controlled. When you delete information from TickTrip, it is removed from normal app use. Deleted data may remain temporarily in protected systems while synchronisation, backup and deletion processes complete.

Learn more about data removal →