Silly Travel Tool
Back to the app
Privacy Policy
The short version. We keep your trips, bookings and travel documents so the app can show them to you. We don't sell your data and don't show ads. Some features use AI and other services, listed below, which only get what they need to do their job. You can ask us to delete everything at any time.
Who we are
Silly Travel Tool ("STT", "we") is operated by [OPERATOR LEGAL NAME], [POSTAL ADDRESS]. Questions or requests: hello@sillytraveltool.com.
What we collect
Your account
Your email address, display name and (if you sign in with Google) your Google profile name and picture. Your password is handled by our authentication provider and we never see it.
Trips and bookings
Trips, bookings (flights, stays, trains, restaurants, tickets, cars, notes), packing lists and anything you type into them, including confirmation numbers and prices. If you share a trip, the people you invite can see it and we store their email address to send the invite.
Booking emails you forward
Each account has a private Goose inbox address. Emails sent to it are received by our email provider, read by our AI to pull out booking details, and turned into bookings in your trips. We keep the extracted details, not a library of your emails.
Travel documents and loyalty cards
Documents you add (for example passport, visa, insurance, vaccination record) and loyalty cards. Passport and document numbers are encrypted at rest; the app shows only the last four digits until you tap Reveal.
Location
Only when you allow it, and only on your device's request: SOS uses it to show the right emergency numbers, and HONK uses it to find spots near you. Your coordinates are turned into a city and country by a geocoding service; only the city and country are sent to our AI. We don't store your location history.
Usage and diagnostics
Simple product events (for example "trip created", "guide viewed", which screen was opened) so we can see which features work. Events carry only short codes such as the booking type or a country code: no names, emails, trip titles, confirmation or document numbers, typed text or exact locations. They are stored with your account in our database and also sent to Google Analytics, on the website and in the apps, with a random device identifier and your account's random ID (never your email), IP addresses anonymised and no advertising features. If the app crashes we may receive a crash report without personal data.
Your choice: turn off Settings → Share usage stats to stop all usage events on that device. If your browser sends Do Not Track or Global Privacy Control, it starts off.
Why we use it
- To run the app: show your trips, import bookings, build guides, packing lists and phrase books.
- To keep your account secure and prevent abuse (for example rate limits on AI features).
- To improve the app using aggregated, non-identifying usage events.
- To email you about your account or trip invites. No marketing emails without your consent.
Where the law asks for a legal basis: performing our contract with you (running the app), our legitimate interest in keeping it secure and improving it (including usage stats, which you can turn off), and your consent for location.
Who processes it for us
| Service | What for | What it receives |
|---|---|---|
| Supabase (US) | Database, sign-in, server functions | All app data |
| Google Gemini API | AI: reading booking emails, city guides, HONK picks, packing lists, phrases | The email or the request text (city, dates, booking types) |
| Resend | Receiving forwarded booking emails; sending invites and account emails | Those emails |
| Google (sign-in) | "Continue with Google" | Your Google sign-in |
| Open-Meteo | Weather and past-trip weather | Trip coordinates and dates |
| OpenStreetMap Nominatim, Komoot Photon, BigDataCloud, timeapi.io | City search, coordinates to city, local time | Search text or coordinates |
| open.er-api.com | Exchange rates | Currency codes only |
| Google Analytics | Usage statistics for the website and apps | Pseudonymous usage events and device/browser type |
| Sentry (if enabled) | Crash reports | Technical error details, no personal data |
We don't sell or rent personal data, and we don't share it for advertising.
AI features
Text written by Goose is generated by AI and marked "Suggested by Goose (AI)". It can be wrong; check anything important before you rely on it, and use the Report link to tell us about bad suggestions.
How long we keep it
Until you delete it or your account. When your account is deleted we erase your data within 30 days, including backups, except where the law requires us to keep something.
Your choices and rights
- Edit or delete trips, bookings, documents and cards in the app at any time.
- Turn location off in your phone's settings; the app keeps working without it.
- Delete your account: Profile → Settings → Delete account sends us a deletion request (in-app deletion is coming in a future update), or email hello@sillytraveltool.com from your account address.
- Ask for a copy of your data, a correction, or that we stop a particular use, by emailing us. Depending on where you live (for example the EU/UK under GDPR, or California under the CCPA) you have these rights by law, and you can complain to your data protection authority.
Security
Data travels over HTTPS, access is limited per account by database rules, AI keys stay on our servers, and document numbers are encrypted. No system is perfectly secure; if something goes wrong we'll tell affected users as the law requires.
International transfers
Our servers are in the United States. If you use STT from elsewhere, your data is transferred there, protected by our providers' standard contractual safeguards.
Children
STT is not meant for children under 13 (under 16 in the EU/UK). We don't knowingly collect their data; if you believe a child has an account, email us and we'll delete it.
Changes
If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect.