Itinerise
Privacy policy
Last updated: 23 October 2026
Itinerise is a travel companion: it plans your trips, reads the bookings you forward to it, follows your day while you travel if you let it, and learns how you like to travel so its suggestions fit you. This page says what that means for your data — what is collected, what it is used for, who else sees it, how long it is kept, and how to have it exported or deleted. Itinerise is published by HoecusPocus.
What we collect
| Data | What it is used for | How long it is kept |
|---|---|---|
| Your account — name, email and profile picture from the account you sign in with; an optional phone number; your home town; language, time zone and currency | Signing you in, showing you to the people you travel with, and local formatting | Until you delete your account |
| The sign-up list — while Itinerise is invitation-only, the email addresses allowed to create an account. Inviting someone adds the address you invited; signing in with an address not on the list sends that address to Itinerise's operators so they can add it | Letting in the people who were invited, and only them | Until the account is deleted; a refused address stays with the operators' notifications |
| Payment links you add | Shown to people paying you back from a bill split | Until you remove them or delete your account |
| Travel preferences — interests, budget, quiet hours, and any dietary or accessibility needs you tell us | Suggestions and plans that fit you | Until you delete your account |
| Trips — itineraries, activities, the places you stash | The app's core: planning and running your trips | Until you delete your account |
| Bookings — the emails you forward to your trip's booking address, kept in full, and what is read from them | Adding your flights, hotels and reservations to your trip | Until you delete your account; the copy in our mailbox is removed 90 days after it is read |
| Location — while Location Tracking or Journey Mode is on, your phone's position, including in the background, with its accuracy and the phone's battery state | Knowing where you are in your day: live suggestions, timely departure reminders, whether you made it to a stop, the distance in your daily summary, and the track on your trip story | Raw positions for 30 days, then archived day by day until you delete your account; a trip story keeps its track with the story |
| How you travel — your ratings, your answers to "did you make it?", which suggestions you open or dismiss, and the traveller profile built from them | Learning what suits you, and improving suggestions for everyone in aggregate | See Deleting your data |
| Your trip group — posts, poll votes, replies to nudges, bill splits (including the names of people who are not on Itinerise), invitations (the invitee's email and your message) | Travelling together | See Deleting your data |
| Shared trip stories — when you share your trip story card, a link to the card as you shared it: its shape, the parts you kept on it, and the language it was in | Showing that card to the people you send the link to | The link shows the card for 30 days and is removed 60 days after that; it stops at once if you leave the trip or delete your account |
| Emergency details — insurer, policy number, emergency contacts' names, relationships and numbers | Having them to hand on the trip | Until you delete them or your account |
| Photos you upload as trip covers | Your trip's cover | For the life of the trip |
| Your phone — its push-notification address, make, model, system version, app version, and its battery and background settings | Sending you notifications and keeping Journey Mode alive | 90 days after the phone was last seen |
| Diagnostics — crash and error reports from the app, server logs | Finding and fixing faults | Crash reports for a limited period; server logs for 31 days |
| Usage records — which features called which outside service, and what it cost | Keeping the service affordable and fair | See Deleting your data |
AI
Itinerise uses AI models from OpenAI and Anthropic through their business APIs. What is sent to them includes personal data:
- the text of the booking emails you forward, to read your bookings out of them;
- your current location (as coordinates and the town), your plans for the day and your preferences — dietary and accessibility needs included — to suggest things to do nearby;
- your trip's stops, times, places and weather, to write your morning briefing, daily summary and trip story;
- what you type into search, and the messages in your trip group that you ask it to help you reply to;
- your interests, budget and traveller profile, to fit its answers to you.
OpenAI also receives an identifier for your account that does not contain your name or email.
Who else sees your data
- The people on your trips see your name, email and profile picture, and the trip's itinerary. They see where you are only if you turn on location sharing, and only for as long as you choose. People you approve as observers see the trip as you allow.
- People paying you back from a bill split see your payment links.
- Anyone holding a trip story link you share sees that card — the trip's place, its dates and the parts you kept on it — without signing in, and never your name or photo.
- Services that run parts of the app, each receiving only what its job needs:
- Google — maps, place search, addresses, routes, time zones, weather, place photos, and push notifications (Firebase Cloud Messaging): search text, coordinates and addresses, and the text of each notification sent to you;
- Foursquare, Geoapify and LocationIQ — place search and addresses: search text and coordinates;
- Navitia and Navitime — public-transport routes: route coordinates;
- Visual Crossing and WeatherAPI — weather: coordinates;
- Pexels and Pixabay — destination photos: destination names;
- AeroDataBox — flight status: flight numbers and dates;
- Microsoft Azure — hosting, storage, server logs, and phrasebook speech (the phrase only);
- Auth0 — signing in;
- Sentry — crash and error reports, processed in the EU.
We do not sell your data, and the app carries no advertising or analytics trackers.
Your choices
- Location Tracking and Journey Mode
- Location Tracking is on by default, but no position is collected until you let the app use your phone's location, and background positions only once you allow it "all the time" for Journey Mode. Turn it off in Settings › Location & your data; no positions are collected while it is off. Setting up your account reads your location once, to fill in your home town, if you allow it.
- Behaviour Processing
- On by default; turn it off in Settings › Location & your data. Off, Itinerise stops building your traveller profile, stops AI suggestions, leaves your profile out of its briefings and advice, and leaves you out of the aggregate it learns from. The app still records what you do in it — your ratings, your answers, which suggestions you open — because that is the app working. What was built before you turned it off is kept but no longer read.
Your rights
- Getting a copy
- Settings › Location & your data › Download your data gives you everything held about you, as a file.
- Deleting your data
Ask in the app — Settings › Location & your data › Request Data Deletion — or email privacy@dev.itinerise.app from your account's address. We delete your account, including your sign-in, and with it:
- your profile, payment links, preferences, emergency details and phones;
- your trips' itineraries, bookings and booking emails, briefings and trip stories;
- your location history and its archives, and the trip covers you uploaded;
- your stash, your trip observers and requests, and your place on the sign-up list.
Some records are kept with your name taken off them, so they identify nobody:
- your ratings and behaviour signals, which feed what Itinerise learns in aggregate — the traveller summaries already built from them are kept under a separate identifier, and deletion removes the only link back to you;
- your posts, votes and replies in trip groups, so the rest of the group's conversation stands;
- bill splits, so the people you travelled with still settle up — a share you owed stays owed, without your name;
- trips you shared with others, which carry on for them without you;
- the sign-up list entries your invitations added, so the people you invited can still join;
- usage and cost records.
Server logs and crash reports expire on their own schedule (above).
Cookies
Every page of this website sets one security cookie, which protects its forms against forgery and holds nothing about you. When you sign in it also sets a few short-lived cookies while the sign-in completes, and one that keeps you signed in until you log out or have been away for 8 hours. All of them are needed for the website to work. It sets no analytics or advertising cookies.
Security
Your data is stored in Microsoft Azure. The app talks to our servers over encrypted connections, and signing in is handled by Auth0. Traveller summaries used for learning are stored under an identifier separate from your account.
Changes and contact
When this policy changes, the date at the top changes with it. For anything about your data, email privacy@dev.itinerise.app.