Privacy Policy

What we collect

• Account — your email address and password (stored securely, hashed).
• Trip data you add — destinations, dates, bookings, documents, photos, notes, travellers and anything you type or upload.
• Payments — handled entirely by Stripe. We receive a payment confirmation and a customer reference, but never your card number.
• Basic usage & device info — to keep the app working and secure.

How we use it

• To run the app — show your trips, sync across your devices, and share trips with people you invite.
• To provide Plus features (the AI assistant, scanning) — which means sending the relevant trip text or file to our processors to generate a result.
• To take payment and manage your subscription.
• To keep the service safe and meet our legal obligations.

Who we share it with (processors)

We don't sell your data. We use trusted providers to run HolidayPal:

• Supabase — database, login and file storage.
• Stripe — payments on our website.
• Apple (App Store) and Google (Google Play) — payments made in the iPhone and Android apps.
• RevenueCat — keeps track of which account has Plus, across the App Store, Google Play and our website.
• Anthropic (Claude) — the AI assistant and booking scanning.
• Google — places & maps for the "nearby" feature.
• Vercel — hosting.
• Resend — sending account and receipt emails.
• PostHog (EU-hosted) and Google Analytics — product analytics: which pages and features get used, so we can improve the app.

Some processors may handle data outside the UK/EU under appropriate safeguards.

Keeping it

We keep your data while your account is active. Delete a trip or your account and we remove the associated data, except where we must keep records (e.g. payment records for tax).

Your rights

Under UK GDPR you can access, correct, delete or export your data, and object to certain processing. To exercise any right, email support@holidaypal.travel. You can also complain to the UK Information Commissioner's Office (ICO).

Cookies

We use cookies and similar browser storage to keep you signed in and the app working. We also use product analytics (PostHog and Google Analytics) to understand which pages and features people use, so we can make HolidayPal better. That analytics is never used for advertising, we don't record your screen, and it is tied to an account ID rather than your email. We honour your browser's Do Not Track setting; to opt out otherwise, email support@holidaypal.travel. We don't use advertising cookies.