TripPacker is made by one person. There are no advertisers, no analytics SDKs, and no data brokers involved. This page says exactly what leaves your phone and what doesn't.
TripPacker ("we", "us") is an iOS app operated by its independent developer, based in California, United States. If you want to reach a human about anything on this page, write to hello@trippacker.app.
This is most of the app. The following is stored in TripPacker's own file on your device and is never uploaded to us:
Because it lives only on your device, deleting the app deletes all of it, and we cannot recover it for you. There is currently no sync and no backup to our servers — if that changes, this page changes first.
| What | Why | When |
|---|---|---|
| Email address | It is your account. It's how you sign back in, and where a sign-in code goes. | When you create an account |
| Display name | Shown to friends you invite, and used to greet you in the app. | You type it, or Apple/Google supply it |
| Invite code, passport number, tier, trip count | So a friend who has your code can find you and see who they're adding. | Only once you're signed in |
| Who your friends are | To show your friends list on both sides. | Only when an invite is accepted |
| Whether you have an active subscription | To unlock Pro features. | Read from Apple, on demand |
Packing reminders are scheduled by the app on your device. There is no push server, so we never learn when a reminder fired or whether you opened it. Turning them off in Settings stops them completely.
We use a small number of service providers. They process data on our instructions and are not permitted to use it for their own purposes.
| Provider | What they handle |
|---|---|
| Supabase (United States) | Accounts, sign-in sessions, and the profile and friends data listed above. |
| Resend (United States) | Sends the six-digit sign-in code to your email address. |
| Apple | App distribution, subscriptions and payments, and Sign in with Apple. Governed by Apple's own privacy policy. |
| Only if you choose "Continue with Google". Governed by Google's own privacy policy. | |
| Cloudflare | Serves this website and routes email sent to our address. |
We do not sell or share your personal information, and we have never done so. We would disclose data if we were legally compelled to, and we'd tell you unless we were forbidden from doing so.
Your account data is kept while your account exists. Delete your account and it goes immediately — not after a grace period, and not into a queue. See the next section.
In the app: Profile → Settings → Delete account. Confirm once, and:
It cannot be undone and we cannot restore it. If for any reason the in-app route doesn't work for you, email hello@trippacker.app from your account's address and we'll do it by hand.
Deleting your account does not cancel an active subscription — Apple owns billing, so cancel it in iOS Settings → your name → Subscriptions.
Wherever you live, you can ask us to show you what we hold, correct it, or delete it. Email hello@trippacker.app and we'll answer within 30 days.
Under the CCPA/CPRA you have the right to know what personal information we collect and why, to have it deleted, to correct it, and not to be discriminated against for exercising any of that. We do not sell or share personal information as those terms are defined, so there is no opt-out to offer you.
Under the UK GDPR and GDPR you have rights of access, rectification, erasure, restriction, portability and objection, and you may complain to your local supervisory authority. Our legal bases are: performance of a contract for your account and the features you use, legitimate interests for keeping the service secure and working, and consent where we ask for it (such as notifications), which you can withdraw at any time.
Our providers are based in the United States, so if you're outside it your data is transferred there. For transfers from the UK or EEA we rely on the European Commission's Standard Contractual Clauses, which our providers incorporate into their terms.
Everything travels over HTTPS. Your sign-in token is held in the iOS Keychain and never written anywhere else, never logged, and never shown. On the server, row-level security means your account can only ever read its own row — an invite code resolves through a function that returns a name and a tier and nothing more, so a code can't be used to browse other people's accounts.
No system is perfect, and we won't pretend otherwise. If something goes wrong that affects you, we'll tell you.
TripPacker isn't meant for children under 13, and we don't knowingly collect anything from them. If you believe a child has created an account, email us and we'll delete it.
If this policy changes in a way that matters, we'll update the date at the top and tell you in the app before the change takes effect. Small clarifications may happen without notice.
hello@trippacker.app — a real address, read by a real person.