Privacy policy

Last updated: October 24, 2026 · ÓraleTrip is run by Bluebana LLC (“we”, “us”).

The short version: we keep what you put into ÓraleTrip so you and your crew can plan together. We don't sell your data, we don't show ads, and you can delete your account and everything in it from the app at any time.

1. What we keep about you

• Your account: your first and last name, email address, a protected (hashed) password, your language and appearance, an optional profile picture, an optional security question (the answer is hashed), and two-step verification if you turn it on.
• Your trips: trips and My Week planners, their days, colors and themes, plans (times, places, notes, checklists, meeting points), the crew and their roles, reactions, documents you add (encrypted on our server), imported bookings, and view-only links you create.
• Órale-Chat!: messages, photos, voice notes and plan votes in each trip's chat. Only the people on that trip can see them.
• People you add: names (and, if you add them, email addresses or phone numbers) of family and friends in My people, and kids you add to a trip by name. When you add people from your phone's contacts, only the contacts you pick are sent, and only to check whether they already use ÓraleTrip.
• Devices and sign-ins: each signed-in device's name and type, the time of your last use, and a security log of sign-ins and account changes (with the internet address and browser or app used). The security log is kept for 180 days.
• Notifications: the push notification address of each phone you allow, and your notification choices.
• Purchases: whether you have Pro, until when, and the reference of the purchase. We never see or keep your card number: payments are handled by Stripe on the web and by Apple in the App Store.

2. Why we use it

To run the service you asked for: show your trips on all your devices, share them with your crew, send you reminders and flight updates, keep your account secure, answer your questions, and stop abuse. We don't use your data for advertising and we don't sell it or share it for others' marketing.

3. Services that help us run ÓraleTrip

Each one gets only what its job needs:

• KnownHost (United States): our servers and database, where your data is stored.
• Cloudflare: delivers the website and app securely and protects them from attacks. Our website uses Cloudflare's privacy-first visitor statistics, which don't use cookies.
• Backblaze: backups of our servers, kept for up to about 30 days.
• Apple: push notifications, Apple weather (WeatherKit) for your destinations' forecasts and for My Week, Apple Maps for places and directions, and App Store purchases.
• Flight data (AeroDataBox; later FlightAware): flight numbers and dates, to fill in and track your flights.
• Anthropic (Claude): reads the booking, screenshot or email you import to turn it into plans, and writes each country's guide. What you import is sent only for that and isn't used to train its models.
• Wikimedia: the photos in the country guides come from Wikimedia Commons.
• Stripe: payments for Pro on the website.

4. Emails

We email you sign-up and sign-in codes, security notices (like a new sign-in or a password change), trip invitations you accept, and reminders before a Pro renewal. Tips and news are sent only if you agreed to them, and every such email has a way to stop them. Emails you forward to [email protected] are read only to add the booking to your trips, and only when they come from your account's email address.

5. On your phone and computer

Your location. Only if you allow it, My Week uses your approximate location to show the weather where you are. It is rounded to about 10 km before it leaves your device for the forecast, it isn't linked to your account and it isn't saved.

The app keeps a copy of your trips on your device so they open without internet, and keeps your sign-in in the iPhone's Keychain (or the browser's storage on the web). If you turn on Apple Calendar, your plans are written to a calendar on your iPhone only. The app doesn't track your location.

6. How long we keep it

Your data stays while you have an account. When you delete your account (Settings → Account → Delete account), we delete it right away, with your trips, messages, photos, voice notes and documents; copies in our backups disappear as the backups rotate, within about 30 days. Website demo accounts are deleted after 12 hours.

7. Your choices and rights

You can see and change your information in the app, turn each kind of notification on or off, sign out other devices, and delete your account. You can also ask us for a copy of your data or to correct or delete it: write to [email protected] from your account's email address. Depending on where you live, you may have more rights under your local law (such as the GDPR in Europe or state laws in the United States), and you can complain to your data protection authority.

8. Security

Connections are always encrypted. Passwords and security answers are hashed, documents are encrypted on our server, sign-ins are tied to the device they were made on, and two-step verification is available. If something goes wrong that affects your data, we will tell you and the authorities as the law requires.

9. Children

ÓraleTrip accounts are for people 13 and older (or older where the law requires). Parents can add their kids to a trip by name; a kid added by name has no account and no login.

10. Changes

If we change this policy in a way that matters, we'll tell you in the app or by email before it applies.

11. Contact

Bluebana LLC · [email protected]