Last updated 1 October 2026
Short version: your trip data is yours, it's private by default, we don't sell it, and we only collect what the product needs to work.
Account: email (and name if you give one). Trips: itineraries, travellers you add, expenses and packing lists - in our database (Supabase), protected by row-level security so only you and people you share a trip with can read them. Passports and visas stay on YOUR device only (in your browser's local storage) - they are never uploaded to us, and anything we cannot positively identify as a booking is treated as private in the same way. Booking documents are different: when you add a flight, hotel or tour confirmation, or use "Already booked", that file IS uploaded so we can read the details and correct your itinerary around them. It is processed by an AI provider acting for us, used only to update your trip, and not used to train anyone's model. Notifications: your push subscription and phone numbers you add for trip alerts.
If you opt in ("price-drop alerts"), we store your email and the destinations/dates you plan, so we can email you genuine deals for those trips. This is consent-based; you can unsubscribe at any time using the unsubscribe link in any of those emails, or your mail app's own unsubscribe button - both stop every marketing email immediately. Alerts about a trip you are actually on (flight changes, day briefings) are part of the trip, not marketing, and are unaffected. We don't email you marketing without this consent, and we never sell your data.
Trip inputs (destination, dates, preferences) are sent to AI model providers and data services (maps, routing, weather, flight status, fare/rate/deal search) to generate and maintain your plan. We send them only what's needed for the request — never your account identity.
When you tap a booking link you leave Trouveora for the partner's site (an airline, hotel site, insurer, etc.), where their own privacy policy governs what they collect. We may receive a commission but we don't receive your payment or card details.
We use your browser's local storage to keep you signed in and remember preferences (theme, dismissed hints). The Travelpayouts verification/affiliate scripts loaded from emrldco.com may set partner cookies. We don't run our own third-party advertising or retargeting cookies.
We collect anonymous product analytics (feature usage, delivery/read status of notifications) to improve Trouveora. These are recorded for every visitor, including guests who are not signed in - a page view, and what you searched for (destination, dates, party size). They are not linked to an identity unless you sign in. We don't sell or share personal data with advertisers.
You can export your trip (brochure PDF), disable notifications any time in your device settings, unsubscribe from deal emails, and request deletion of your account and all data by emailing us — we'll complete it within 30 days. For any data-protection concern, contact our grievance address below.
All traffic is encrypted (HTTPS). Secrets and API keys live server-side only. Passports, visas and any document we cannot identify as a booking remain on your device, so we cannot see them; booking confirmations you choose to add are uploaded, as described above.
Data questions or deletion requests: travelcarefree@trouveora.com
Trouveora — free AI trip planner with real prices · Terms · Privacy · Contact: travelcarefree@trouveora.com