Privacy
The Trip Wagon is a shared notebook for a friend group planning one trip. This page says what we store, who can see it, and how to get rid of it.
What we store
When you sign in with Apple or Google, we store the name and email address that sign-in gives us. Beyond that, we store what your group puts into a trip: the trip itself, its plan items, places, ideas, expenses, and any files someone attaches — tickets, QR codes, confirmations.
If you send feedback, we keep what you write, any screenshot, and the app details shown, linked to your account, so we can read it.
How we see what gets used
We look at how people use the app, including their trips and what’s in them and which device and app version they use, to run, support and improve The Trip Wagon.
This stays on our own server. No analytics company, ad network or other third party receives it.
Who else touches your data
We use a few providers to run the app: hosting and database, file storage, sign-in (Apple and Google), and crash reporting. They only process data to provide that service.
When we look into a problem with a specific trip, an AI assistant working for us may read that trip’s plans, notes and expenses for up to an hour. It is never shown photos, files or booking codes, and every time it reads the trip is logged.
Destination names (the “Where?” field) are looked up against a public place dataset (GeoNames) that we host ourselves — nothing you type there is sent to a third party to answer it.
What we don’t do
No ads. We don’t sell your data, and we don’t share it with anyone outside your trip, apart from the assistant above when we look into a problem. We don’t use third-party analytics or tracking, and nothing follows you outside the app.
Deleting your account and your data
This is how to delete your data from The Trip Wagon.
Delete your account. Open the app, go to a trip’s Settings, find the Account block and tap “Delete my account” (“Delete this guest” if you never signed in). The next page lists what will go. Confirm it and it happens at once. Or email us at and we’ll do it for you.
What goes with your account. Your name and email, your sign-in, and your sessions. Your feedback and its screenshots. Your usage notes. The files you uploaded. Every trip you organize, for everyone in it: all its plans, ideas, notes, journal, expenses and files are erased for good. All that is left of such a trip is a record of its id and the day it was deleted, with nothing else in it.
What stays. In a trip someone else organizes, what you added stays: your plans, ideas, notes, journal pages, files and expenses. Your seat stays too, renamed “your name (deleted account)”, and nobody can sign in as it. We keep it so the trip’s sums still add up for the others. The organizer can delete any single item of yours, or the whole trip.
Delete data without deleting your account. The organizer can delete a whole trip in its Settings, and it disappears for everyone in it. Anyone in a trip can delete a single plan, idea, expense, journal photo or note. It disappears from the app for everyone at once, and an uploaded file or photo is deleted from our file storage straight away. The rest of a deleted item or trip is erased for good 30 days after you delete it. The trip’s change history keeps a bare line for a deleted item (what kind it was, who removed it and when), with its words gone. A deleted trip’s history goes with the trip.
How long we keep things. Usage notes: 13 months, then they are deleted. Crash reports: they sit with our crash-reporting provider, which keeps them for a limited time on its own schedule; they hold no trip content. A deleted account’s sign-in with Apple is revoked with Apple. A guest who is left idle for 90 days with no live trip is retired; any feedback they sent is kept without a link to them. We keep no backups of the database beyond the database itself, so when something is erased it is gone.
Contact
Questions about your data: