Last updated 10 November 2026

Privacy policy

Tripdo helps you plan trips. A trip plan shows where you will be and when, so we designed the service to collect as little as possible and to keep what you write unreadable to us.

What we store

• Your account: your name, email address, home time zone and a scrambled form of your password (a hash). We need these to sign you in and show your times correctly.
• Your trips: trip names, destinations, dates, day plans, notes and tasks. These are encrypted before they are saved, with a key that is unlocked only by your password, your recovery key or a device you're signed in on.
• Your choices for Mann Travel: whether you get offers from Mann Travel (and when and how you chose), your country (worked out from your home time zone) and any travel preferences you add. These are not encrypted, because they are shared with Mann Travel (see below).
• Signed-in devices: the type of device and browser, and when it was last used, so you can review and sign out devices.

What we don't do

• We don't use ad networks, advertising trackers or analytics scripts. The only promotion is for our sponsor, Mann Travel (see below).
• We don't sell or rent your information to anyone. Your details go only to Mann Travel, our sponsor, as described below.
• We don't read your trips. Our systems and backups hold them only in encrypted form.

Sharing

If you invite someone to a trip, they can see the entries and tasks marked Shared. Entries marked Only me are never shown to them. You can remove people from a trip at any time.

Mann Travel: offers, preferences and quotes

Tripdo is provided by Mann Travel, a travel agency with offices in Australia, New Zealand, the United Kingdom and Canada, and Mann Travel is Tripdo's travel partner. Tripdo comes in two editions that share the same accounts and the same privacy protections: tripdo.app, and mann.tripdo.app, the edition made for Mann Travel's customers. On mann.tripdo.app you'll see clearly labelled Sponsored panels linking to the Mann Travel website for your country. These are plain links, with no ad networks, tracking pixels or third-party scripts.

• Offers by email. If you create your account on mann.tripdo.app and your home time zone is in Australia or New Zealand, it includes receiving travel deals and offers from Mann Travel; the sign-up form says so. Everywhere else, and always on tripdo.app, you get offers only if you tick the box. Mann Travel receives your name, email address and country for this.
• Unsubscribe anytime. Every offer email has an unsubscribe link, and you can switch offers off in Tripdo under Account. Tripdo keeps working the same either way.
• Travel preferences (optional): if you add a mobile number, home airport, places you travel to, cabin or interests, Mann Travel can see them to send offers that suit you.
• Get a quote (called Get travel help on tripdo.app): if you press it on a trip, Mann Travel receives your name, email, the answers you give, and that trip's destination and dates, so they can reply. Your day plans, notes and tasks are never sent.
• Mann Travel also sees how many trips you have and when you joined and last used Tripdo, but not what's in them. Trip contents stay encrypted.
• Once you deal with Mann Travel or visit its website, Mann Travel's own privacy policy applies.

Your choices

• Download a copy of any trip from the trip menu.
• Delete a trip, or delete your whole account from Account settings. Deleting is permanent.
• Contact us at the address below to ask what we hold about you or to correct it.

Where your data is kept

Tripdo runs on servers in Singapore, provided by our hosting company, Render. Everything stays encrypted there, including daily backups, which are kept for seven days.

Emails we send

We email you only about your account and the reminders you ask for: a code to confirm your address, a code to sign in if you turn that on, an alert when your account is signed in on a device, trip invites someone sends you, and reminders for flights, plans and tasks you choose. These emails go through Brevo, our email provider, which receives your name, email address and the email itself to deliver it. Trip plans are never included, except the trip's name in an invite you were sent and the short reminder note described below.

Reading a booking from a photo or PDF

If you choose From photo or PDF, the file is shrunk on your device and sent to Anthropic, our AI provider, only to read the bookings in it. Tripdo doesn't keep the file. You see what was found and choose what to add, and only what you add is saved, encrypted like the rest of your trip. Anthropic's terms for this service say it doesn't use the files to train its models. Avoid uploading pages that show card or passport numbers.

Discover: restaurants and attractions

When you open Discover, Tripdo's server asks Google Maps for well-rated places at your trip's destination (for example "best restaurants in Jaipur"), plus anything you type in its search box, and the hotel or place you choose to search near. If you tap My location, your browser asks your permission first, and your approximate position is sent to Google for that one search only. Tripdo doesn't store it. Only the search text and, if you allow it, that position go to Google, not your name, email or plans. Tripdo doesn't keep the results. If you add a place to a day, its name, address and map link are saved in your trip like any other plan. Google's own privacy policy covers its side of the service.

Email reminders

If you ask for a reminder on a flight, a plan or a task, Tripdo keeps a short note for it: its name, when it starts or is due, where (if you added a place), the trip's name and when to send the email. These notes are encrypted with a separate server key, not your trip key, because they must be readable when the email is sent. They are deleted soon after they're sent, or straight away if you turn the reminder off or remove the plan or task. Marking a task done turns its reminder off.

Sharing and adding to your calendar

When you tap Share, Tripdo writes a short text of the plan, day or trip on your device and hands it to the app you pick, such as WhatsApp or Messages. Tripdo doesn't send it anywhere itself, and once it's in that app, that app's privacy terms apply. When you choose Add to calendar, Tripdo makes a calendar file of what you can see and keeps it on its server for 10 minutes behind a random, unlisted link so your phone can open it. Then it's deleted. If you choose Google Calendar, the plan's name, time, place and notes go to Google in the link you open.

Voice typing

If you tap the microphone, your browser or phone turns your speech into text, using its own service (Google on Android and Chrome, Apple on iPhone and Safari). Tripdo never receives the recording, only the text that appears in the box. Your browser asks your permission before using the microphone.

Weather, exchange rates and your passport date

To show the forecast for a trip happening in the next 9 days, our server sends the trip's destination (for example "Amritsar, India") to OpenStreetMap's Nominatim service once to find its location, then sends only those coordinates to MET Norway for the forecast. Nothing about you is sent. Expense amounts stay in your encrypted trip; our server fetches daily exchange rates from ExchangeRate-API without sending any of your data. If you add a passport expiry date in Account, we keep only that date (never the passport number) to email you 9 and 6 months before it expires and to warn you about trips. You can remove it at any time.

Shared expenses

Expenses are encrypted with the trip like your plans. Shared expenses are visible to everyone on the trip; personal ones only to you. If you leave a trip, your personal expenses are deleted, and the shared ones stay so everyone else's balances still add up.

Trip map

To put your plans on a map, our server sends the place you typed in a plan's Where (or a hotel's name), and the rough area of your destination, to OpenStreetMap's Nominatim service to find it. Nothing about you is sent, and each place is looked up only once. The map pictures come from OpenStreetMap's servers, which see your device's internet address and the part of the world you're viewing, as with any online map. Directions open in Google Maps only if you tap that button.

Keeping trips on your device for offline use

This is off unless you turn it on, in Account or on a trip. When it's on, a copy of your current and upcoming trips, your account details and the app itself are kept in your browser on that device, so Tripdo opens with no signal. That copy isn't encrypted by Tripdo, so anyone who can unlock the device could see it. Turning the setting off or signing out deletes it from that device.

Family follow link

A trip's organiser can make a read-only link so family at home can see the trip's plans. It shows each plan's date, time, title and place, either for all of the organiser's plans plus plans others marked Shared, or for Shared plans only, as the organiser chooses. Notes, tasks, money, and the names of the people on the trip are never shown. The secret that opens the link is the part after the # in the link, which browsers don't send to our server's logs. We keep the trip's key only locked with that secret. The organiser can turn the link off or replace it at any time, and it stops working 14 days after the trip ends. We record when the link was last opened, so the organiser can see that, but not who opened it.

Emergency card

The insurance and emergency-contact details you add to a trip's emergency card are encrypted with the trip, and only you can see them, even on a shared trip. The emergency numbers come from the app itself; nothing is looked up. If you save the card as an image or print it, that copy is on your device, under your control.

Trip Story

If you make a Trip Story, your phone shrinks each photo and redraws it, which removes hidden details such as the camera model and exact location. Tripdo reads the date and a rough place (to about 1 km) from each photo on your phone to sort them into days and draw the route. Your phone then scrambles the photos, the story text and any notes from family with a key that only your phone and your share link hold. Our server stores the scrambled copy and can't read it. Anyone you give the link to can open the story, so share it only with people you trust. You can stop sharing or delete the story at any time, and stories nobody opens or edits for 12 months are deleted. Family who leave a note type their own name; we keep no account or contact details for them. When a note arrives, we email you that there is a new note (at most once a day per story); the email can't show the note, because we can't read it. Reels, post images, story cards and albums are made on your own device from your story, and nothing extra is uploaded to Tripdo. To report a story, email privacy@tripdo.app with the link.

Security

Connections use HTTPS. Passwords are stored only as scrypt hashes. Trip content is encrypted with AES-256-GCM. If you forget your password, your recovery key is the only way to unlock your trips; we can't reset access without it.

Contact

Questions about privacy: privacy@tripdo.app