Privacy Policy

Depending on the features you use:

• Account: your name, email address and profile photo if you sign in with Google. If you continue as a guest, only a random device identifier.
• Trips: itineraries, bookings (flights, hotels, activities), notes, expenses, saved places, plans, and files you attach.
• Forwarded bookings: if you forward a confirmation email to MyPA (pa@mypatravel.com), the email text and its attachments (tickets, vouchers, photos) are read to create the booking. The original file is kept with the booking.
• Support requests: if you write to support@mypatravel.com, MyPA keeps your email address, your name as it appears on the message, the subject, the text and the date. Attachments are not kept. Only the app's administrator reads these, to answer you. They stay until you ask for them to be deleted or you delete your account.
• Travel documents, only if you add them: passport number, passport expiry and country, date of birth, gender, phone number, and the names on a booking. They are used to warn you about passport validity, to show you details to copy into official forms, and to show boarding passes. MyPA never fills in an official form for you.
• Boarding passes: the pass data or image you add, shown to the members of that trip.
• Assistant questions: what you ask the AI assistant, with the trip details needed to answer. Your conversation history is kept in your own browser, not on our server.
• Shared expenses (Split): groups, members, expenses and payments you enter.
• Friends and trip members: the connections you create.
• Invitations: if you sign in with Google you get a personal invitation link and QR code. When someone joins MyPA with a new account through your link, your QR code, an invitation email you sent, or one of your Split groups' join links, MyPA keeps which invitation they came through, so you can see how many friends joined (a number, never names). If you join through someone's invitation, MyPA keeps who invited you and how.
• Time zone of your device, saved on your profile so dates and times are read the way you read them.
• Problem reports: when something fails, a short technical record (which page, a short message, the app version, the kind of device, and for forwarded emails a masked sender such as k***@gmail.com). Only the app's administrator can read them, and they are kept for about 30 days.

Only to run the features you use: your itinerary, expenses, entry-requirement checks, boarding passes, check-in help, and answers from the assistant. MyPA does not sell your data and does not use it for advertising.

Trips. Everyone on a trip can see its bookings, schedule, expenses, boarding passes and notes, and the names and photos of the other members. Any member can add other people to a trip; the person added is told what members can see and can leave at any time. Only the trip's owner can remove other members.

Friends and your bucket list. Adding a friend shares nothing of yours. If you choose to share your bucket list with a friend (you are asked first), that friend can see your saved places and notes, and your name and photo. Nothing else of your profile is visible to them. You can stop sharing at any time.

Never shared: the rest of your profile (email, preferences, packing list, visited countries and so on) can be read by you alone. Your passport details, date of birth, gender and phone number are kept in an even more private area. No friend or trip member can see any of it.

Split groups. Once the group owner approves you, the group sees the name you entered and the expenses you add.

If you create a share link for a trip, anyone who has the link can read a limited view of it. The view leaves out confirmation numbers, passport details, PINs, names and costs. You can stop sharing at any time.

Each receives only what the feature needs at the moment you use it, sent from our server:

• Google Cloud and Firebase: sign-in, database, file storage and hosting. The database and the app run in the Google Cloud us-central1 region (Iowa, United States).
• Google Gemini (AI): powers the assistant and reads forwarded bookings and uploaded documents. Your question and the trip details relevant to it are sent to Gemini. If a trip is shared, this can include other members' names and booking details.
• Google Maps and Places: place search and photos, and the hotel and restaurant look-ups the assistant makes (for example "hotels in Tbilisi"). Only the search text is sent.
• AeroDataBox: flight status, by flight number and date.
• Tomorrow.io: weather for your destination.
• data.gov.il (the Israeli government's open-data portal): MyPA reads public travel-advisory data from it. Nothing of yours is sent.
• Unsplash: destination photos. No personal data is sent.
• Currency rates from a public data feed. No personal data is sent.
• Gmail and Cloudflare: mail sent to pa@ and support@mypatravel.com is passed on by Cloudflare (Email Routing) to a Gmail inbox that MyPA operates, and is processed from there. Invitation and confirmation emails MyPA sends go out from that Gmail account.
• Booking.com and other travel sites: when you tap a link to one of them, you leave MyPA, and that site's own privacy policy applies. See the affiliate disclosure.

Your full profile and passport data are not sent to any of these.

Your data is kept while your account exists. Deleting a trip, a saved place, a booking or a friend connection in the app removes it. Problem reports are kept for about 30 days.

You can delete your whole account yourself: Profile, then "Delete my account". You see what will happen before you confirm, and you sign in again to prove it is you. It cannot be undone. What happens:

• Deleted: your invitation code and the records of who joined through you or who you joined through, your profile (including passport and other personal details), saved places, saved articles, travel documents, vaccination records, uploaded files, your email-import address, the share links you made, mail queued for you, support requests you sent, your links in friends' lists, problem reports tied to your account, and your sign-in account.
• Trips only you are on are deleted with everything in them, including their files.
• Trips shared with other people stay for them. You are removed, and if you owned the trip the oldest remaining member becomes the owner. Bookings, expenses and boarding passes you added to a shared trip stay with that trip; its other members, or its owner, can remove them.
• Split groups with nobody else are deleted. In groups with other people, your past expenses stay so everyone's balances stay correct, and your name is replaced by "Former member".
• Backups: deleted data may remain in Google's own backups of the database for a limited time before they are overwritten. MyPA does not keep other copies.

If you cannot sign in, email support@mypatravel.com and the deletion is done by hand.

You can see and change your profile and trips in the app. You can download a copy of your data yourself (Profile, then "Download my data": one file with your profile, trips, expenses, boarding passes, saved places, Split groups and links to your stored files), delete your account yourself (above), and ask us to correct something by emailing support@mypatravel.com. Depending on where you live, the law may give you further rights; we will respect them. You can also sign out, remove the app from your device, and withdraw access from your Google account at any time.

Data travels over HTTPS. Access is enforced by Firebase security rules: trip data is limited to the trip's members and personal profile fields to you alone. No online service can promise perfect security.

MyPA is not directed at children under 13 and does not knowingly collect their data.

If what MyPA collects or how it is used changes in a meaningful way, this page is updated and the "Last updated" date changes.

Questions, requests to export or delete data, or anything else: support@mypatravel.com.

You can download or delete your data yourself in Profile. If you write to MyPA about your data instead, MyPA answers within 30 days.