Privacy
Your trips are yours
Last updated October 23, 2026
PlanItPika is a trip planner. To plan your trips it has to keep your bookings, the places you want to go and the people you travel with. This page says exactly what is kept, where, and who else sees any of it. The short version: we keep only what the app needs, we never sell it, and there are no ads or tracking.
What we keep
- Your account: your name, your email addresses, and your password, stored only as a salted scrypt hash that can’t be turned back into the password.
- Your trips: days, stops, notes, photos and files you add, bookings, and who you’ve shared each trip with. We keep earlier versions so changes can be undone.
- Booking emails: confirmations you forward to our address, or that we read from a mailbox you connect, with their attachments. We keep the original message so a booking can be re-read if something went wrong.
- Keys you give us: your AI provider key, flight-status key and mailbox app password, stored on our server and never sent back to your browser.
- On your devices: if you add PlanItPika to your Home Screen, a copy of your trips is stored on that device so it works offline. Signing out removes it.
Connected mailboxes
If you connect a mailbox, PlanItPika signs in only to read your Inbox, never Spam, Junk or any other folder. It doesn’t mark messages read, move them or delete them. It only looks at messages that arrive after it last checked, and only from the senders you allow. You can disconnect at any time in Settings.
Where it’s stored
PlanItPika runs on our own server. Photos, files and booking emails are also stored in Amazon Web Services (Amazon S3, in the US West region), and an encrypted copy of everything is backed up there each night and kept for up to a year. Traffic to the site passes through Cloudflare, which protects it and serves it over HTTPS.
Who else sees it
Only the services needed to do what you ask, and only the part they need:
| Service | What it gets, and when |
|---|---|
| Your AI provider (Anthropic, OpenAI, Google or xAI) | The booking email or trip details being worked on, when you use an AI feature or a booking is read. It runs on your own key, under that provider’s terms. |
| Amazon Web Services | Storage, backups, and receiving mail sent to our forwarding address. |
| Email delivery (Amazon SES or our mail provider) | The recipient and contents of mail we send for you: confirmations, invites, shared PDFs. |
| OpenStreetMap (Nominatim) and Open-Meteo | Place names and coordinates, to put stops on the map and fetch the weather. |
| Wikimedia Commons, Openverse, Google Street View | Place names, when looking up photos of a stop. |
| aviationstack | Flight numbers and dates, if you turn on flight-status alerts with your own key. |
| Apple and Google push services | The text of a notification, if you switch on phone alerts. |
| AI assistants you connect (MCP) | The trips you allow, at the access level you choose. You can disconnect them or shut any trip off. |
People you share a trip with see that trip. A PDF link shows the trip to anyone who has the link until it expires or you revoke it, with confirmation numbers hidden unless you choose otherwise.
Cookies
One cookie keeps you signed in. Your browser also remembers small preferences such as light or dark mode. There are no advertising, analytics or tracking cookies.
Your choices
- Change your details, addresses, keys and connections in Settings at any time.
- Delete a trip and its files from the trip’s settings.
- To get a copy of your data or delete your account, contact support. We’ll remove it from the live system straight away; backups age out within a year.
Children
PlanItPika is not meant for children under 13, and we don’t knowingly keep their information.
Changes
If this policy changes, the date at the top changes too. If it’s a change that matters to how your data is used, we’ll tell you in the app or by email first.
Questions
Ask anything through the support form.