Zip2Trip Privacy Policy

Last updated: September 9, 2026

Your packing lists, trips, items and to-dos stay on your iPhone. They are never uploaded to us and we cannot see them.

Zip2Trip has no accounts, no sign-in, no advertising and no analytics. We do not track you across other apps or websites.

What stays on your device

Everything you create in the app is stored locally and nowhere else:

• Your trips, dates and trip names
• Your packing lists, categories, items and quantities
• Your Before You Leave to-dos
• Your onboarding answers and the preferences built from them
• Your packing progress and reminder settings

None of this is sent to our servers, because we do not run any. Deleting the app deletes this data from your device. If iCloud Backup is switched on in your iOS settings, Apple may include the app's data in your encrypted device backup — that backup is controlled by you and Apple, not by us.

What third parties receive

RevenueCat — subscriptions

We use RevenueCat to check whether your subscription is active and to restore purchases on a new device. When you subscribe or open the app, RevenueCat receives:

• An anonymous app user ID generated on your device
• Your subscription and purchase status, and transaction history for this app
• Your device model, operating system version, app version and country or region

This ID is not linked to your name, email or Apple Account. See the RevenueCat privacy policy .

Firebase Remote Config — feature switches

We use Google's Firebase Remote Config to switch features on and off without shipping an app update. When the app fetches its configuration, Google receives:

• A Firebase installation ID — a random identifier tied to this installation, not to you
• Your device model, operating system version, app version, language and country or region

We do not use Firebase Analytics or Crashlytics. See the Firebase privacy documentation and the Google privacy policy .

Apple — payments and optional app data

All purchases are processed by Apple. We never receive your card details, billing address or Apple Account credentials. Apple may share anonymous, aggregated app data with us through App Analytics — but only if you turned on "Share With App Developers" in your iOS privacy settings. See the Apple privacy policy .

Notifications

If you allow notifications, Zip2Trip schedules packing reminders locally on your device using iOS. There is no push server, we do not send you messages, and no information leaves your phone to make a reminder appear. You can turn notifications off at any time in iOS Settings.

Why we process this data

• To deliver what you paid for — checking your subscription status. Under GDPR this is necessary to perform our contract with you.
• To keep the app working — feature switches, so we can disable a broken feature or roll out a fix without an update. Under GDPR this is our legitimate interest in a stable app.

We do not use your data for advertising, profiling or automated decision-making.

What we never do

• We do not sell or share your personal information, in the sense used by the California Consumer Privacy Act. We have never done so.
• We do not track you across other companies' apps or websites, so the app does not ask for App Tracking Transparency permission.
• We do not build advertising profiles or run ad networks in the app.
• We do not ask for your name, email address, phone number, contacts, photos or location.

How long data is kept

Data on your device stays until you delete it or remove the app. RevenueCat keeps subscription records for as long as your subscription is active and afterwards as required for accounting and tax purposes. Firebase installation IDs are refreshed periodically and deleted when you remove the app.

International transfers

RevenueCat and Google process data on servers in the United States and other countries. Where data leaves the United Kingdom or the European Economic Area, those transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard offered by the provider.

Your rights

Depending on where you live, you may have the right to access the data held about you, correct it, delete it, restrict or object to its processing, receive a copy in a portable format, and complain to your data protection authority. In the United Kingdom that is the Information Commissioner's Office ; in the EEA it is your national supervisory authority.

Because we hold no account for you, the fastest way to erase everything on your side is to delete the app. We will not charge you or treat you differently for asking.

Children

Zip2Trip is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child has provided us with personal data, email us and we will delete it.

Security

Your lists are protected by your device's own passcode and encryption. Traffic between the app and RevenueCat and Firebase is encrypted in transit using TLS. No system is perfectly secure, but keeping your content on your device rather than on our servers removes most of the risk.

Changes to this policy

If we change how the app handles data, we will update this page and change the date at the top. Significant changes will also be announced in the app's release notes.