Privacy Policy

1.1 Plantripr ("Plantripr", "we", "us") runs plantripr.com, an AI travel-itinerary service operated from London, United Kingdom. We are the controller of your personal data under the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR) and, for people in the European Economic Area, the EU GDPR.

1.2 Contact us about privacy at support@plantripr.com. This policy also explains how we use cookies and should be read with our Terms of Service.

Please don't put sensitive information (for example about health or religion) into trip prompts unless you want it used for that trip. We don't need it and don't use it for anything else.

Diet and allergy details you give Tripr AI can be health information. Tripr AI keeps them in its memory only after you have turned memory on (one approval, which you can withdraw at any time in the Tripr AI panel or in Settings → Preferences), and uses them only to make its suggestions fit you.

Where we rely on legitimate interests, we have weighed them against your rights. You can object (section 11).

4.1 You can try Plantripr without an account. Guests can generate 1 one-day trip in total. After a quick bot check, our server gives your browser a random guest ID and counts the trips made with it. The ID doesn't contain your name or email.

4.2 To stop the limit being bypassed by clearing the browser, we also limit guest trips to 10 a day per internet connection. For this we keep your IP address only in a scrambled (salted hash) form.

4.3 If you create an account, trips you saved as a guest on that device are moved into it.

5.1 We use two AI providers. Google's Gemini models generate itineraries from the trip form. Anthropic's Claude models power Tripr AI, our chat concierge, including trips planned in the chat. We send each provider only what's needed: your messages, trip details and the relevant itinerary, and for Tripr AI also what it remembers about you (if memory is on) and the booking text, screenshot or PDF you choose to share. We never send your password or payment details, and Claude is never sent your location: for "Near me" our server uses your location for that one search and only tells Claude that a location was shared.

5.2 We use the paid Gemini API and Anthropic's commercial API. Under their terms, neither Google nor Anthropic uses our requests to train their models.

5.3 Itineraries are suggestions. We don't make decisions about you by automated means that have legal or similarly significant effects (Article 22 GDPR).

5.4 When you ask Tripr AI what's trending, it searches the web through Anthropic's web search. Only the topic and the city are searched, never your name or account details. The answer shows the websites it comes from; those results are not checked by Plantripr.

5.5 When you use "Add my booking", the text, screenshot, PDF or email you choose is sent once to Claude to read the flight, train or hotel details. We don't store the file or its text; only the booking card you accept is saved in your trip.

5.6 In long planner chats, Tripr AI writes a short summary of the older messages so it can keep following the conversation. You still see every message; the summary is kept with the chat and deleted with it.

6.1 Plantripr's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

6.2 If you connect Google Calendar, we ask for read-only access (calendar.events.readonly). We use it only to show your events next to your itinerary and point out clashes.

6.3 Calendar data and the Google access token are processed and kept in your browser's storage on your device until you disconnect. We don't store calendar events or Google access tokens on our servers, don't use them for advertising, don't sell or transfer them, and don't use them to train AI models.

6.4 You can disconnect in Plantripr's calendar settings or at myaccount.google.com/permissions.

We don't sell your personal data. We share it only with these providers, for the purposes shown:

We may also share data with professional advisers, where the law requires it (for example with HMRC or the police), or with a buyer if Plantripr is sold, under this policy.

8.1 Some links are affiliate links to Viator, GetYourGuide and Travelpayouts. When you click one, the partner learns which site sent you, so we can be paid a commission if you book. We don't send them your name or email.

8.2 Other links, such as OpenTable, Ticketmaster, Trainline or Rentalcars, are ordinary links and we earn nothing from them. Once you leave Plantripr, the other site's privacy policy applies.

We use cookies and browser storage. Embedded content (YouTube, Instagram, Trustpilot) only loads if you agree. For analytics, nothing is recorded until you choose: if you accept, Google Analytics and PostHog use cookies to measure how the site is used, and PostHog may record session replays (anything you type is hidden). If you decline, they only count visits without cookies, without storing anything on your device and without linking the count to you. Change your choice at any time with "Cookie Preferences" in the footer.

Affiliate partners may set their own cookies on their own websites after you click through.

Anonymised data can't identify you and may be kept for statistics.

You have the right to: access your data; correct it; have it erased; restrict how we use it; object to uses based on legitimate interests; receive your data in a portable format; and withdraw consent at any time (this doesn't affect what we did before).

Email support@plantripr.com to use these rights. We'll reply within one month and may ask you to prove who you are. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or the data protection authority where you live in the EEA. Please contact us first so we can try to help.

12.1 You can close your account by emailing support@plantripr.com. It is deactivated straight away and can be restored for 30 days. After 30 days we delete or anonymise your data, except payment and contract records we must keep for 6 years. Your Tripr AI chats and memory are deleted with your account.

12.2 Trips and guides you published are removed from public view when your account is deactivated. Copies that other users unlocked belong to their accounts and stay there. Your comments are deleted with your account.

Our database is hosted in London (UK) and our email provider sends from the EU. Some providers (including Google, Stripe, Cloudflare and ipinfo) process data outside the UK and EEA, including in the United States. We protect these transfers with adequacy regulations or decisions (including the UK Extension and the EU–US Data Privacy Framework where the provider is certified), or with standard contractual clauses and the UK International Data Transfer Addendum.

We use HTTPS encryption, encryption at rest by our database provider, access controls and bot protection. No online service is perfectly secure; if a breach puts you at risk, we'll tell you and the regulator as the law requires.

Plantripr is for people aged 18 or over. When you sign up you confirm you are 18 or over. If we learn an account belongs to someone under 18, we'll close it and delete its data.

We'll post changes here with a new effective date. If a change materially affects you, we'll email you before it applies.

Plantripr, London, United Kingdom · support@plantripr.com