Privacy policy

Last updated October 23, 2026

Tripcairn is made by Victor Andrew Pan Xian ("we", "us"). This page explains, in plain words, what the app does with your information. Questions: victorpanxian@gmail.com.

The short version

Your trips, bookings and profile are stored on your phone. We can't see them.
When you use the AI planner or trip chat, what you ask and that trip's plan go to our server and to Claude (made by Anthropic) to write the answer. Your name isn't sent. We don't keep the messages, only counts.
No ads, no tracking across apps, no selling or sharing your data for advertising, no analytics tools.
You can delete everything from the app: Profile › Your data › Delete all my data.

1. What stays on your phone

Your trips and plans, bookings you mark (including confirmation numbers, prices and addresses you type in), your profile (name, home city and country, the month your passport expires, interests, usual budget), your trip chats, the trips you save or like, and your settings. This is saved in the app's own storage on your device. We have no copy of it. Uninstalling the app or using "Delete all my data" removes it. You can export a copy any time from Profile › Your data.

2. What our server keeps

The app uses a server hosted by Supabase (in the United States) only for the AI features. The first time you use them, the app creates an anonymous ID for your phone (no email, no password, no name). The server keeps:

that anonymous ID;
counts of how many AI plans, changes and chat messages you used each month, and how much AI processing they took (so the free limits work and we can see our costs);
a scrambled (hashed) form of your network address with a daily count, to stop abuse. It can't be turned back into the address and is deleted after about two days.

Like most online services, Supabase also keeps short-lived technical logs (for example, the time of a request and the network address it came from) for a few days, for security and troubleshooting.

3. AI requests and Claude (Anthropic)

When you ask the AI planner for a trip, ask for a change, or send a trip-chat message, the app sends to our server: what you typed, the plan of the trip you're asking about (places, days, times, rough costs, what's booked), the notes the chat keeps about your choices, and your home city, interests, usual budget and language. Your name, confirmation numbers, booking addresses and passport month are not sent.

Our server passes this to Claude, an AI model made by Anthropic, to write the answer, and sends the answer back to your phone. We don't store the messages or answers on our server. Anthropic processes them to provide the answer and, under its commercial terms, doesn't use them to train its models; it may keep them for a limited time for safety and abuse checks. See Anthropic's privacy policy.

Please don't put sensitive personal information (for example health details or ID numbers) in AI messages.

4. Other services the app connects to

Photos of places load from Wikimedia Commons. Maps use Apple Maps (iPhone) or Google Maps (Android). Like any website, these services see your device's network address when they load.
Booking links open partner websites (for example Booking.com, Airbnb, Google Flights, Rome2Rio, GetYourGuide) already searched for your place and dates, and the city you travel from for flights. A link may include a partner ID and a short code for the trip (not you), so the partner can credit us if you book; we may earn a commission, and it never changes your price. What you do on their sites is covered by their privacy policies.

5. Phone permissions

Notifications: trip reminders are scheduled on your phone. We don't send push notifications from a server.
Photos: only when you choose photos (for example to build a past trip). Their dates and places are read on your phone.
Location: only to name the places in photos you choose, using your phone's own map service. The app never tracks where you are.

You can change these any time in your phone's settings.

6. Your choices and rights

Delete everything: Profile › Your data › Delete all my data removes your data from the phone and deletes your anonymous ID and usage counts from our server.
Get a copy: Profile › Your data › Export my data.
Depending on where you live (for example the EU, UK or California), you may have rights to access, correct, delete or object to the use of your data. Write to victorpanxian@gmail.com and we'll answer within 30 days. We don't sell personal information.

7. Children

Tripcairn isn't meant for children under 13 (under 16 in the EU and UK), and we don't knowingly collect their information. If you think a child has used the AI features, contact us and we'll delete the data.

8. Security and where data is processed

Connections to our server use encryption (HTTPS), and access to the server is limited. Our server and Anthropic process data in the United States.

9. Changes

If this policy changes, we'll update the date above and, for important changes, tell you in the app.