Privacy Policy
This page is available in English only.
1. Who we are
TravelOS is a group trip planning service (the "Service") operated by TravelOS ("TravelOS," "we," "us"). This policy explains what personal information we collect through our website and web app at usetravelos.com and app.usetravelos.com, how we use it, who we share it with, and the choices you have. If we release phone apps, this policy will cover them too.
2. Information we collect
Information you give us
- Account details: your email address, display name, and password (stored as a one-way hash by our authentication provider), or a sign-in identifier if you use Google or Apple to sign in.
- Trip content: trips, itineraries, activities, reservations, places you pin on the map, packing lists, messages, polls and votes, Group Agreements answers, expenses and settle-up records, and notes.
- Documents: traveler documents and important information you choose to store, such as passport details, tickets or insurance. These are designed to be visible only to you.
- Invitations: when you invite someone, we process the invite link and, if you provide it, their email address.
- Messages to us: anything you send to [email protected].
Information collected automatically
- Technical and security data: IP address, browser and device type, pages and features used, timestamps, and error and security logs. Our hosting and database providers keep these logs.
- Sign-in state: your browser stores a session token in local storage so you stay signed in. We do not use advertising cookies.
- How you found us: if you arrive from a link with campaign tags (such as utm_source) or from another website, your browser keeps those tags and the other site's name. When you sign up, we save them with your account so we can learn which channels bring people to TravelOS. We don't save the full address of the page you came from, and we don't use this for advertising.
- Bot protection: we use Cloudflare Turnstile on sign-in and sign-up. It runs checks in your browser to tell people from bots and may read limited browser and device signals.
Payment information. Payments are handled by Stripe. We never see or store your full card number. We receive limited billing details from Stripe, such as your plan, subscription status, and the last four digits and brand of your card.
3. How we use information
- To provide the Service: create your account, run your trips, let invited people see and edit what their role allows, and sync changes across members.
- To process purchases and manage your plan (Free, Trip Pass, Pro).
- To send account and service emails such as sign-in links, password resets, invitations, receipts and important notices. We send marketing email only if you opt in, and you can opt out at any time.
- To power features you use, including AI Trip Copilot, reservation extraction, weather, travel advisories, currency conversion and maps.
- To keep the Service secure, prevent abuse and fraud, debug problems, and improve the product.
- To comply with legal obligations.
4. AI features
Some paid features use AI. When you use them, we send the trip details needed to answer your request, such as destinations, dates, planned activities, and first names, to an AI model provider that processes the request for us. We design these requests so they do not intentionally include your email address, payment details, or the private documents you store. The AI provider acts as our service provider. AI output can be wrong, so check anything important. AI suggestions are only proposals: the AI cannot book or change anything on your behalf unless you approve it.
4A. Military and veteran access
The Military & Veterans tab is for U.S. service members, veterans and their families. You can open it in one of two ways.
Confirming it yourself. You pick which groups describe you (for example, Veteran or Military Spouse) and confirm that it's true. We save only what you picked, the date, and which version of the confirmation you agreed to. We don't ask for documents, and we don't check your answer against military or VA records. Offers listed in the tab may check your eligibility again when you book.
Verifying with ID.me (when offered). You verify on ID.me's website, not ours. ID.me checks your status against military and Department of Veterans Affairs records, then tells us only that you're verified and your military affiliation (for example, Service Member, Veteran, Retiree, Military Spouse, Military Family or Surviving Spouse). We also receive an ID.me account identifier, which we store only in a scrambled, one-way form, so one ID.me account can't unlock more than one TravelOS account. We don't receive or store your name, date of birth, Social Security number, service records or identity documents from ID.me. Anything you give ID.me is handled under ID.me's own privacy policy.
We use this only to open the Military & Veterans tab and show you benefits and offers meant for the military community. We don't use it for advertising, and we don't sell or share it. Access lasts one year, after which you're asked to confirm or verify again. You can remove it at any time under "Your verification" in the tab, and we delete it right away. It's also deleted if you delete your account.
5. Who we share information with
Other people on your trip. Trip members see the trip content their role allows, including your name and the items you add. Private items, such as your documents, are not shared with them.
Service providers who process information on our behalf:
| Provider | What they do for us |
|---|---|
| Supabase | Database, sign-in, and server functions |
| Cloudflare | Website hosting, DNS, security, and Turnstile bot protection |
| Stripe | Payment processing and subscription billing |
| Resend | Sending account and service emails |
| AI model providers (through OpenRouter) | Processing AI Copilot and other AI requests |
| Google and Apple | Sign-in, if you choose it |
| ID.me | Confirms military or veteran status if you choose to verify for the Military & Veterans tab. We send ID.me nothing about you; you sign in to ID.me directly. |
| Train status data providers (Amtraker, Eurostar, SNCF via transport.data.gouv.fr, Entur, Deutsche Bahn, Trafikverket and opentransportdata.swiss) | Receive only the train number, travel date and, for some railways, the departure station and time needed to look up live train status. They do not receive your name, email or booking reference from us. See data sources. |
| Map, weather, geocoding, advisory and exchange-rate data providers | Receive place names, coordinates or currency codes needed to return results. They do not receive your name or email from us. Map tiles come from OpenStreetMap, which can see your IP address when tiles load. |
Legal and safety. We may disclose information if we believe it is required by law or legal process, or needed to protect the rights, safety, or property of our users, the public, or TravelOS.
Business changes. If TravelOS is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that deal. We will tell you if that happens and if your choices change.
We do not sell your personal information and we do not share it for cross-context behavioral advertising.
6. How long we keep information
We keep your information while your account is active. If you ask us to delete your account, we delete or de-identify your personal information, except where we need to keep some for legal, tax, security or fraud-prevention reasons, or where it is part of a shared trip. On shared trips, records other members rely on, such as expense entries, may remain but will no longer be tied to your name. Backups roll off on a regular cycle. Payment records are kept by Stripe and by us as required for accounting. Military verification records are kept for one year from verification, or until you remove them or delete your account, whichever comes first.
7. Your choices and rights
You can review and edit your profile and trip content in the app. To ask for a copy of your data, a correction, or deletion of your account, email [email protected] from the address on your account. We will verify your identity and respond within 30 days, or sooner where the law requires.
Depending on where you live, you may have additional rights:
- California and other U.S. states: to know what we collect, to access, correct and delete your information, to opt out of sale or sharing (we do neither), and not to be treated unfairly for exercising your rights.
- European Economic Area, United Kingdom and Switzerland: to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent. You may also complain to your local data protection authority. Our legal bases are performing our contract with you, our legitimate interests in running and securing the Service, your consent where we ask for it, and legal obligations.
Your device or browser may let you block or clear local storage. Doing so will sign you out.
8. Security
Information is encrypted in transit (HTTPS), and the data stored in your account is encrypted at rest with AES-256 by our database provider. Passwords are stored as salted hashes, never in plain text. Card payments are handled by Stripe, so we never see or store your card number. We also use access controls and database rules that limit which rows each user can read. No online service is perfectly secure, so please use a strong, unique password and turn on the extra sign-in step when it is offered. If we learn of a breach affecting your information, we will notify you as the law requires.
9. International use
We are based in the United States, and our providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards for transfers, such as standard contractual clauses.
10. Children
TravelOS is not for children. You must be at least 16 to use the Service. We do not knowingly collect information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.
11. Changes to this policy
We may update this policy as the Service changes, for example when we add analytics or phone apps. If a change is significant, we will notify you in the app or by email. The date at the top shows the latest version.
12. Contact us
Questions or requests: [email protected].