Privacy Policy for Itinera

Last updated: 24 September 2026

Itinera ("the app", "we", "us") is a travel itinerary and ticket organizer published by YnotLabs. This policy explains what information the app collects, why, and your choices. We designed Itinera to collect only what it needs to work.

Information we collect

• Account information — when you sign in (via Google Sign-In, Apple Sign-In, or email and password), we receive your name and email address to create and secure your account.
• Optional profile information — if you choose to add them, your phone number, date of birth, and postal address are stored on your profile and shown to your trip members. You do not need to provide any of these to use the app.
• Your trip content — the trips, legs, activities, tickets, documents, checklist items, expenses and cost-splitting records, and any photos you add are stored so they sync to your account and to the co-travellers you share a trip with.
• Photos — if you choose to add a photo to a trip or your profile, the app accesses your camera or photo library only for that action. Itinera does not scan your library.
• Account identifier — a unique user ID is assigned to your account so your data can be associated with you.

Nera, the AI trip planner

Itinera includes an optional assistant called Nera that helps you plan trips. Nera is only used when you open it and send a message.

• What is sent — the messages you type to Nera, the draft itinerary you are reviewing, and today's date. Please don't include sensitive personal information in your messages. Your name, email address, documents, tickets, expenses and existing trips are not sent.
• Who processes it — your messages are sent through our server to Anthropic, an AI provider, which generates Nera's replies. To answer weather questions, the city and dates are sent to Open-Meteo; to find restaurants and attractions, a search phrase and city are sent to Google Places. None of these requests include your name or email.
• What we keep — your conversation with Nera is saved to the trip it belongs to, so you can close the app and pick the conversation back up later, and so Nera can see a trip's current activities and legs when you reopen it. It is stored with the same access controls as the rest of that trip, and is deleted when the trip or your account is deleted. We also store counts of how many Nera requests your account has made each day and month (to prevent abuse), how many trips you have created with Nera (to apply the free-trip limit), whether you have unlocked Nera Plus, and a cache of place search results, which contains no information about you. If you approve a draft, it is merged into your trip as ordinary trip content.
• Accuracy — Nera is an AI and can make mistakes. Check opening hours, prices, entry requirements and other details with the official source before you rely on them. Weather far in advance is a guide based on past conditions, not a forecast.

How we use your information

Your information is used solely to provide the app's features: authenticating you, storing and syncing your trips and documents, planning trips with Nera when you ask it to, and personalizing settings such as language and currency. We do not use your data for advertising, and we do not track you across other apps or websites.

Service providers

Itinera uses the following third-party services to function:

• Google Firebase (Authentication, Firestore, Cloud Storage) — hosts your account and trip data securely. See Google's privacy policy.
• Frankfurter API — provides currency exchange rates. Requests contain only the currencies being converted, not personal data.
• Anthropic — the AI provider behind Nera. It receives only the messages described in the Nera section above, and its handling of them is governed by its own privacy policy.
• Google Places API and Open-Meteo — used by Nera to look up places and weather. Requests contain a search phrase or city and dates, not personal data.
• RevenueCat — processes the one-time Nera Plus purchase together with the App Store or Google Play. It receives your account's random ID and your purchase status, not your name, email, trips or messages.
• Cloudflare — runs the server that connects the app to Nera. It handles the requests described in the Nera section and does not keep your conversation.
• Unsplash API — provides destination cover images. Requests contain only a destination search term, not personal data.

Data retention and deletion

Your data is retained while your account is active. You can delete individual trips at any time within the app; deleting a trip you own also removes its documents, expenses, activities, payments and Nera conversation history. You can delete your entire account from Settings → Account → Delete Account within the app, or by following the steps at our account deletion page. You can also contact us at the email below and we will remove it.

Data security

Data is transmitted over encrypted connections (HTTPS) and stored on Google Firebase's managed infrastructure. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

Children's privacy

Itinera is not directed to children under 13, and we do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

Questions about this policy or your data? Email ynotlabs.dev@gmail.com.