Privacy,
without the fog.

Who this policy covers

This policy applies to the Travelist iOS app, its widgets and Live Activities, the Travelist backend, and the Permafrostudio account services used by Travelist. Permafrostudio is responsible for the processing described here.

Travelist is an offline-first travel planner. Some information stays only on your device; account, synchronisation, sharing, support, AI and purchase features require server processing.

Data we process

Why we use it

• Provide Travelist: authenticate you, save and synchronise trips, support collaboration, photos, notifications, widgets and offline restoration.
• Provide requested AI features: generate packing suggestions and improve their relevance from suggestion and selection signals.
• Process purchases: verify one-time purchases, maintain tokens and entitlements, restore purchases and prevent duplicate grants.
• Support and security: answer conversations, investigate reports, prevent spam, fraud and abuse, and maintain service reliability.
• Comply with law: maintain records where required and respond to valid legal requests.

When you block another traveler, Travelist records that choice, separates shared trips between the two accounts, prevents future shared-trip invitations and stops content and collaboration notifications between them. You can review and remove your own blocks in Travelist Settings.

Where applicable, these activities rely on performing our service agreement with you, your consent for optional permissions and profile details, our legitimate interests in security and support, and legal obligations.

Who receives data

We disclose only what is needed for the purposes above:

• People you invite can access the content of the specific shared trip, including shared events, lists, expenses, documents or photos according to the feature you use.
• Apple provides Sign in with Apple, StoreKit payments, APNs notifications and platform services.
• Google provides Google sign-in, optional Firebase analytics and crash diagnostics, and contextual, non-personalised advertising. Travelist does not use your trip content for advertising or request permission to track you across other companies’ apps.
• RevenueCat verifies purchases and maintains purchase entitlements.
• Amazon Web Services hosts databases and private files, delivers infrastructure and notification services, and processes requested AI features.
• Mailjet delivers account login emails and one-time codes.
• Authorities or advisers may receive limited information when required by law or necessary to protect users, rights and service security.

Service providers must protect data and may use it only to provide contracted services. Travelist does not sell personal data or track you across other companies’ apps. Advertising requests are sent in non-personalised mode and are not based on your trip content.

Retention and deletion

Deleting Travelist

In Travelist, open Settings → App accounts, tap the bin beside Travelist, and confirm. This deletes your Travelist trips, lists, events, budgets, attachments, shared photos, app-scoped AI history, notification registration and other Travelist data from active systems.

Travelist is one app under a separate Permafrostudio studio account. Deleting Travelist removes the Travelist app account and membership, but does not automatically delete the studio identity, cross-app token ledger or purchase records used by other Permafrostudio apps and for purchase restoration. Contact us if you want to make a broader privacy request concerning the studio account.

Deleted information may remain briefly in encrypted, access-restricted backups until the rolling backup cycle replaces it, or longer where retention is legally required. It is not restored to the active service except for disaster recovery or legal necessity.

Security and international processing

We use encrypted network connections, private storage, access controls, signed file links, rate limits and account-scoped authorisation. No service is risk-free, so please avoid placing unnecessary highly sensitive information in free-text notes or support messages.

Our primary infrastructure is configured in the European Union. Apple, Google, RevenueCat, AWS and Mailjet may process information in other countries under their applicable safeguards and agreements.

Children

Travelist is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has provided data, contact us so we can investigate and delete it where appropriate.

Changes to this policy

We may update this policy when Travelist, its providers or legal requirements change. We will update the effective date and, for material changes, provide an appropriate notice in the app or through the account contact channel.