Trvlrr holds your travel history. We treat it as yours.
Last updated 16 October 2026
Trvlrr is operated by Arigato Consulting Pty Ltd (Australia). Contact us any time at support@trvlrr.app.
To make your photos searchable, an automated service generates a short description and keywords for each photo you upload. This runs on our servers using Anthropic's API. Photos processed this way are not used to train any AI model.
Face recognition happens entirely on your device. Your photos are never sent anywhere for face recognition. Only anonymous mathematical representations — which cannot be turned back into an image — are stored, so the app can group photos of the same person. You can delete this at any time by removing the photos.
If you use the booking-forwarding feature, emails you send to your personal Trvlrr address are read solely to extract travel details (flights, hotels, dates, confirmation numbers). The message is processed and not retained after the itinerary is created. Before a message is read in full, a classifier decides whether it is a booking at all, so that ordinary mail caught by your forwarding rule is discarded rather than analysed; we keep a record of that decision — the sender, the subject and the outcome, never the message — for 90 days, so a mistake can be found and corrected.
You can choose to publish your passport card at an address of your choosing, such as trvlrr.app/p/yourname. It is off unless you switch it on. A published passport shows the name you put on it, your home city, the numbers on the card (trips, days away, countries, cities, flights, airports, distance), the countries you have visited and a map of where you have flown. It never shows upcoming trips, dates, bookings, photos or who you travelled with. Anyone with the link can see it, and search engines can list it unless you turn that off. When you publish, the web app makes a preview image of the card for when the link is shared; it is stored with your account. Unpublishing removes the page and the image at once; deleting your account does the same.
We do not sell your data, and we do not use it for advertising. We share only with the services required to run the app: Cloudflare (hosting, storage and website analytics), Clerk (sign-in), Anthropic and OpenAI (photo descriptions, destination artwork and reading forwarded bookings), TypeSafe (sorting forwarded mail into travel and not-travel, from the sender, subject and the start of the message), Resend (email), Apple, Google Play, RevenueCat and Stripe (subscriptions — Stripe only if you subscribe on this website, and it handles your card details; we never see them). In the Android app, Google also turns the place names you search for into map positions, and OpenFreeMap supplies the map tiles: it sees your device's network address and the part of the map you are looking at, never your account or your trips. People you explicitly invite can see the trips you share with them.
We count visits to trvlrr.app with Cloudflare Web Analytics, so we know which pages people read and whether the site is fast enough. It sets no cookies, it does not follow you to other websites, and it does not build a profile of you: it records the page, where the link came from, the country, the kind of browser, and how quickly the page loaded. None of that is joined to your Trvlrr account. Visitors in the EU are not measured at all.
Data is stored on Cloudflare's infrastructure. We keep it for as long as your account exists. Delete a trip or photo and it is removed, including from our file storage.
You can connect an assistant or tool that supports the Model Context Protocol (for example Claude or ChatGPT) to your Trvlrr account. You sign in on trvlrr.app and approve it; from then on it can read and change the trips, bookings, photos and profile in your account when you ask it to, and whatever it reads is handled under that app's own privacy policy. We store only a record of the connection and hashed access tokens. Disconnect any app in Profile → Connected apps; deleting your account removes every connection.
You can export or delete everything yourself in the app under Profile → Export my data or Profile → Delete account. A deleted account is removed from our servers, including every photo and document, within 48 hours. You can also ask us to do either by emailing support@trvlrr.app.
Trvlrr is not directed at children under 13 and we do not knowingly collect their data.
If this policy changes materially we will update this page and note the date above.