What changed with version 1.3: photos you add to a trip, trips you took before you had the app, RevenueCat for purchase records (section 6), and destinations the app doesn't know, which are now counted as a scrambled code (section 4). Since 3 October 2026 this page has also named the Meta and TikTok install-measurement SDKs (section 4).
TripPacker is made by one person. There are no ads in the app and no data brokers involved. We record which screens you reach and which actions you take on our own server, and two install-measurement SDKs — Meta's and TikTok's — tell those companies when the app is installed and opened, so we can see whether our ads on their platforms work. One switch in Settings turns all of it off. One subscription service, RevenueCat, receives your purchase records (section 6). This page says exactly what leaves your phone and what doesn't.
TripPacker ("we", "us") is an iOS app operated by its independent developer, based in California, United States. If you want to reach a human about anything on this page, write to [email protected].
This is most of the app. The following is stored in TripPacker's own file on your device and is never uploaded to us:
Because it lives only on your device, deleting the app deletes all of it, and we cannot recover it for you. There is currently no sync and no backup to our servers — if that changes, this page changes first. It is included in your device's own iCloud or computer backup, like any app's data, so a restored phone gets it back.
Your photos never leave your phone. You choose them with iOS's own photo picker, which gives the app only the photos you pick and no access to the rest of your library. TripPacker keeps a small copy of each one inside the app; the location and date stored in a photo are read on your phone to place it, and the coordinates are not kept. Nothing is uploaded to us or anyone else.
One honest caveat, so the list above is not read as more than it says: the usage records in section 4 include a handful of numbers about a trip — how many nights, how many items were on the list, how many were packed — and the identifier of the destination when it is one of the places built into the app. That is the shape of a trip, not its contents: no item is ever named, and a destination you typed that is not one of ours is never recorded as the words you typed — see section 4.
| What | Why | When |
|---|---|---|
| Email address | It is your account. It's how you sign back in, and where a sign-in code goes. | When you create an account |
| Display name | Shown to friends you invite, and used to greet you in the app. | You type it, or Apple/Google supply it |
| Invite code, passport number, tier, trip count | So a friend who has your code can find you and see who they're adding. | Only once you're signed in |
| Who your friends are | To show your friends list on both sides. | Only when an invite is accepted |
| Your purchase and renewal history (product, price, dates, country, whether it was a trial) | To see what's working. Handled by RevenueCat (section 6). Whether Pro is on is still read from Apple. | When you buy, renew, cancel or get a refund |
| Which screens you reached and which actions you took | To see where the app is confusing and which parts of it people use. Section 4 says exactly what this is and how to switch it off. | While Share anonymous usage is on |
We record which screens you reach in TripPacker and which actions you take — that a list was generated, that a list was packed, that a trip was finished, that a price was shown, that something was bought. Once you sign in, these records are attached to your account. Before that they carry a random identifier that is made on your phone, belongs to no one else, and disappears when you delete the app.
We never record the contents of your lists. Not the items you add, not the items you mark as unused after a trip, not notes, not names, not quantities. Destinations are recorded only as one of the places built into the app, by its identifier. When you type a place the app doesn't know, we record only a scrambled code made from it on your phone (a salted hash), so we can see which places people are looking for and add them — never the words themselves, and nothing at all if what you typed contains a number or is longer than 40 characters. Photos are counted, never sent: how many you added, not what they show.
We use this to see where the app is confusing and which parts of it people actually use. These records go to our own database, the same one that holds your account; they are never sold, never shared with anyone else, and never used to advertise to you.
You can switch it off at any time: Profile → Settings → Share anonymous usage. Turning it off stops any further recording and discards anything still waiting to be sent from your device. It is on when you install the app; nothing else in the app changes when you turn it off.
We advertise TripPacker on Meta's platforms (Facebook, Instagram) and on TikTok. To learn whether those ads lead to real use, the app includes Meta's SDK and TikTok's Business SDK. They send those companies:
They do not receive your advertising identifier (IDFA): the app turns that off and never shows Apple's tracking prompt. They don't receive your email address, your account or anything from inside your trips. Purchases are not reported to TikTok. Meta and TikTok handle this data under their own privacy policies.
The same switch stops it: Profile → Settings → Share anonymous usage turns off these SDKs' events along with our own usage records.
The trip review the app shows you when you get home is a separate thing and is not covered by that switch. What you mark as unused stays on your phone as part of your own trip, and it is what makes your next packing list better. It is never sent to us.
Packing reminders and the occasional On this day memory are scheduled by the app on your device. There is no push server. Whether a memory was opened is counted in the usage records of section 4, and nothing else. Turning reminders or Memories off in Settings stops them completely.
We use a small number of service providers. Except where a row below says the company's own privacy policy governs, they process data on our instructions and are not permitted to use it for their own purposes.
| Provider | What they handle |
|---|---|
| Supabase (United States) | Accounts, sign-in sessions, the profile and friends data listed above, and the usage records in section 4. |
| Resend (United States) | Sends the six-digit sign-in code to your email address. |
| Apple | App distribution, subscriptions and payments, and Sign in with Apple. Governed by Apple's own privacy policy. |
| Only if you choose "Continue with Google". Governed by Google's own privacy policy. | |
| Cloudflare | Serves this website and routes email sent to our address. |
| RevenueCat (United States) | Your purchase and subscription history and your account identifier, used to record and report purchases. It receives no card details and no device identifiers. |
| Meta Platforms (United States / Ireland) | Install measurement for our ads on Facebook and Instagram, as described in section 4. Governed by Meta's own privacy policy. |
| TikTok (TikTok Inc. / TikTok Technology Limited) | Install measurement for our ads on TikTok, as described in section 4. Governed by TikTok's own privacy policy. |
When you share a trip card to Instagram, TikTok, Messages or anywhere else, the image goes straight to the app you chose, on your phone; we don't receive it.
We do not sell your personal information. Apart from the install measurement in section 4, which you can switch off, we don't share it either. We would disclose data if we were legally compelled to, and we'd tell you unless we were forbidden from doing so.
Your account data is kept while your account exists. Delete your account and it goes immediately — not after a grace period, and not into a queue. See the next section.
In the app: Profile → Settings → Delete account. Confirm once, and:
It cannot be undone and we cannot restore it. If for any reason the in-app route doesn't work for you, email [email protected] from your account's address and we'll do it by hand.
Deleting your account does not cancel an active subscription — Apple owns billing, so cancel it in iOS Settings → your name → Subscriptions.
Wherever you live, you can ask us to show you what we hold, correct it, or delete it. Email [email protected] and we'll answer within 30 days.
Under the CCPA/CPRA you have the right to know what personal information we collect and why, to have it deleted, to correct it, and not to be discriminated against for exercising any of that. We do not sell personal information. To opt out of the install measurement in section 4, turn off Share anonymous usage in the app's Settings; it takes effect immediately.
Under the UK GDPR and GDPR you have rights of access, rectification, erasure, restriction, portability and objection, and you may complain to your local supervisory authority. Our legal bases are: performance of a contract for your account and the features you use, legitimate interests for keeping the service secure and working, and consent where we ask for it (such as notifications), which you can withdraw at any time. The usage records and the install measurement in section 4 rest on legitimate interests — understanding how the app is used and whether our ads work — and the switch in Settings is how you object to that processing, with no effect on anything else.
Our providers are based in the United States, so if you're outside it your data is transferred there. For transfers from the UK or EEA we rely on the European Commission's Standard Contractual Clauses, which our providers incorporate into their terms.
Everything travels over HTTPS. Your sign-in token is held in the iOS Keychain and never written anywhere else, never logged, and never shown. On the server, row-level security means your account can only ever read its own row — an invite code resolves through a function that returns a name and a tier and nothing more, so a code can't be used to browse other people's accounts.
No system is perfect, and we won't pretend otherwise. If something goes wrong that affects you, we'll tell you.
TripPacker isn't meant for children under 13, and we don't knowingly collect anything from them. If you believe a child has created an account, email us and we'll delete it.
If this policy changes in a way that matters, we'll update the date at the top and tell you in the app before the change takes effect. Small clarifications may happen without notice.
[email protected] — a real address, read by a real person.