The short version: no accounts, no email, no cookies, no ad trackers. Your trips live in a private space we can only see as an anonymous blob of data. You can erase everything yourself, in one tap, any time.
1. Who is responsible
Tapinerary is operated by QiSynth, a product venture studio based in Prague, Czech Republic. For anything privacy-related, email tapinerary@gmail.com.
2. What we store
Your trips. Itineraries, ticks, notes and added places are stored on our server so your travel crew's phones stay in sync. They are keyed by a one-way hash of your passphrase. We never store the passphrase itself, we cannot reverse the hash, and our own admin tools show only anonymous space sizes and dates, never trip content.
Abuse-prevention counters. To stop passphrase guessing and keep the free AI planner affordable, we keep short-lived daily counters (per space hash and per hashed IP address). They contain no trip content and expire quickly.
Credit balances. How many free generations a space has used this month, and any paid credits, stored against the same anonymous space hash.
3. What we never collect
No names, no email addresses, no phone numbers, no accounts, no advertising trackers, no fingerprinting, no selling of data. Ever.
4. Cookies and local storage
Tapinerary sets no cookies, which is why you don't see a cookie banner. The app keeps your passphrase and preferences (like language) in your browser's local storage, on your device only, so you stay logged in. Clearing your browser data removes them.
5. Services we rely on
A few carefully chosen processors handle data on our behalf:
Vercel hosts the site and API (like any web host, it processes IP addresses to deliver pages).
Neon stores the database described above.
Anthropic provides the AI. When you generate, tweak, translate or run an expert review of a trip, the trip details you entered are sent to the Claude API to produce the result. API inputs are not used to train Anthropic's models.
Komoot Photon (OpenStreetMap) powers the destination autocomplete: the city name you type is sent to their geocoder.
Wikipedia / Wikimedia supplies the destination and place photos. Your browser requests the images for the city or place names in your plan directly from Wikipedia; no personal data is included beyond the standard web request.
Map links (Google Maps, and Apple Maps on iPhone) open in your own maps app or a new tab only when you tap them. What happens there is governed by those providers' policies.
Google Fonts serves the typefaces on the landing and info pages (your browser requests the font files from Google).
When paid packs launch, a payment provider (such as Stripe or Lemon Squeezy) will process purchases. They handle your card and receipt; we only ever receive the anonymous space reference to credit.
6. How long we keep things
Trip data stays until you delete it or your space is removed. Spaces untouched for a very long time may be cleaned up automatically to honor data minimisation. Abuse counters expire on their own within days.
7. Your rights
Under the GDPR you can ask for access, correction, deletion, restriction or portability of your data, and you can complain to your local data protection authority (in the Czech Republic, the ÚOOÚ). The fastest way to delete everything is built into the app: open your space and tap "Delete this space". That erases the server copy immediately. For anything else, email tapinerary@gmail.com. One honest caveat: because spaces are anonymous, we can only act on a space if you can tell us its passphrase or space reference, since nothing else links data to you.
8. Children
Tapinerary is made for planning family trips, and we love that kids' needs are part of the planning. The service itself is meant to be used by adults; we knowingly collect no data about anyone, children included.
9. Changes
If this policy changes in a way that matters, we'll update the date above and note it on the site.