TripPacker is made by one person. There are no advertisers, no analytics SDKs, and no data brokers involved. We do record which screens you reach and which actions you take, on our own server and nowhere else, and you can switch that off. This page says exactly what leaves your phone and what doesn't.
TripPacker ("we", "us") is an iOS app operated by its independent developer, based in California, United States. If you want to reach a human about anything on this page, write to [email protected].
This is most of the app. The following is stored in TripPacker's own file on your device and is never uploaded to us:
Because it lives only on your device, deleting the app deletes all of it, and we cannot recover it for you. There is currently no sync and no backup to our servers — if that changes, this page changes first.
One honest caveat, so the list above is not read as more than it says: the usage records in section 4 include a handful of numbers about a trip — how many nights, how many items were on the list, how many were packed — and the identifier of the destination when it is one of the 45 places built into the app. That is the shape of a trip, not its contents: no item is ever named, and a destination you typed that is not one of ours is not recorded at all.
| What | Why | When |
|---|---|---|
| Email address | It is your account. It's how you sign back in, and where a sign-in code goes. | When you create an account |
| Display name | Shown to friends you invite, and used to greet you in the app. | You type it, or Apple/Google supply it |
| Invite code, passport number, tier, trip count | So a friend who has your code can find you and see who they're adding. | Only once you're signed in |
| Who your friends are | To show your friends list on both sides. | Only when an invite is accepted |
| Whether you have an active subscription | To unlock Pro features. | Read from Apple, on demand |
| Which screens you reached and which actions you took | To see where the app is confusing and which parts of it people use. Section 4 says exactly what this is and how to switch it off. | While Share anonymous usage is on |
We record which screens you reach in TripPacker and which actions you take — that a list was generated, that a list was packed, that a trip was finished, that a price was shown, that something was bought. Once you sign in, these records are attached to your account. Before that they carry a random identifier that is made on your phone, belongs to no one else, and disappears when you delete the app.
We never record the contents of your lists. Not the items you add, not the items you mark as unused after a trip, not notes, not names, not quantities. Destinations are recorded only as one of the 45 places built into the app, by its identifier — a destination that is not one of ours is not recorded at all, because what you typed is yours.
We use this to see where the app is confusing and which parts of it people actually use. It is never sold, never shared with anyone else, and never used to advertise to you. There is no third-party analytics service involved: the records go to our own database, the same one that holds your account.
You can switch it off at any time: Profile → Settings → Share anonymous usage. Turning it off stops any further recording and discards anything still waiting to be sent from your device. It is on when you install the app; nothing else in the app changes when you turn it off.
The trip review the app shows you when you get home is a separate thing and is not covered by that switch. What you mark as unused stays on your phone as part of your own trip, and it is what makes your next packing list better. It is never sent to us.
Packing reminders are scheduled by the app on your device. There is no push server, so we never learn when a reminder fired or whether you opened it. Turning them off in Settings stops them completely.
We use a small number of service providers. They process data on our instructions and are not permitted to use it for their own purposes.
| Provider | What they handle |
|---|---|
| Supabase (United States) | Accounts, sign-in sessions, the profile and friends data listed above, and the usage records in section 4. |
| Resend (United States) | Sends the six-digit sign-in code to your email address. |
| Apple | App distribution, subscriptions and payments, and Sign in with Apple. Governed by Apple's own privacy policy. |
| Only if you choose "Continue with Google". Governed by Google's own privacy policy. | |
| Cloudflare | Serves this website and routes email sent to our address. |
We do not sell or share your personal information, and we have never done so. We would disclose data if we were legally compelled to, and we'd tell you unless we were forbidden from doing so.
Your account data is kept while your account exists. Delete your account and it goes immediately — not after a grace period, and not into a queue. See the next section.
In the app: Profile → Settings → Delete account. Confirm once, and:
It cannot be undone and we cannot restore it. If for any reason the in-app route doesn't work for you, email [email protected] from your account's address and we'll do it by hand.
Deleting your account does not cancel an active subscription — Apple owns billing, so cancel it in iOS Settings → your name → Subscriptions.
Wherever you live, you can ask us to show you what we hold, correct it, or delete it. Email [email protected] and we'll answer within 30 days.
Under the CCPA/CPRA you have the right to know what personal information we collect and why, to have it deleted, to correct it, and not to be discriminated against for exercising any of that. We do not sell or share personal information as those terms are defined, so there is no opt-out to offer you.
Under the UK GDPR and GDPR you have rights of access, rectification, erasure, restriction, portability and objection, and you may complain to your local supervisory authority. Our legal bases are: performance of a contract for your account and the features you use, legitimate interests for keeping the service secure and working, and consent where we ask for it (such as notifications), which you can withdraw at any time. The usage records in section 4 rest on legitimate interests — understanding how the app is used so it can be improved — and the switch in Settings is how you object to that processing, with no effect on anything else.
Our providers are based in the United States, so if you're outside it your data is transferred there. For transfers from the UK or EEA we rely on the European Commission's Standard Contractual Clauses, which our providers incorporate into their terms.
Everything travels over HTTPS. Your sign-in token is held in the iOS Keychain and never written anywhere else, never logged, and never shown. On the server, row-level security means your account can only ever read its own row — an invite code resolves through a function that returns a name and a tier and nothing more, so a code can't be used to browse other people's accounts.
No system is perfect, and we won't pretend otherwise. If something goes wrong that affects you, we'll tell you.
TripPacker isn't meant for children under 13, and we don't knowingly collect anything from them. If you believe a child has created an account, email us and we'll delete it.
If this policy changes in a way that matters, we'll update the date at the top and tell you in the app before the change takes effect. Small clarifications may happen without notice.
[email protected] — a real address, read by a real person.