CotineraryThis policy explains what information Cotinerary ("Cotinerary", "we", "us") collects when you use the Cotinerary mobile apps, the website at getcotinerary.com and related services (together, the "Service"), how we use it and the choices you have.
Information we collect
Information you give us
- Account information. When you sign in with Apple or Google we receive your name, email address and an account identifier from that provider. You can add a profile photo.
- Trip content. Trips, itinerary items (flights, trains, ferries, car rentals, transfers, hotels, cruises and activities), notes, locations, contact details for bookings and file attachments you add.
- Forwarded emails. When you forward a booking email to a trip address, we receive the full message, including its sender, recipients, body and attachments.
- Trip members. When you invite someone to a trip, they can see that trip's content and you can see their name and profile photo.
- Support requests. Anything you send us when you contact support.
Information collected automatically
- Device and usage information such as device model, operating system, app version, language, approximate region and in-app events, collected through Firebase Analytics and the Meta (Facebook) SDK.
- Crash reports collected through Firebase Crashlytics.
- Push notification tokens so we can send trip reminders, flight updates and email-processing notices you have enabled.
- Advertising identifiers. On iOS, we only access your device's advertising identifier if you allow tracking when prompted. On Android, you can reset or opt out of the advertising ID in your device settings.
- API token activity. If you create personal API tokens to connect AI assistants, we record when each token was created and last used.
How we use information
- To provide the Service: store and display your trips, sync them across devices and share them with the members you invite.
- To extract booking details from emails you forward and add them to the right trip.
- To look up flight status, weather, maps and places for items on your itinerary.
- To send notifications you have turned on.
- To keep the Service secure, prevent abuse and fix problems.
- To understand how the Service is used and improve it.
- To measure the effectiveness of our marketing.
- To comply with legal obligations.
We do not sell your personal information.
Automated processing of forwarded emails
Booking emails you forward, and their attachments, are processed by an AI model provided by OpenAI to identify reservations and extract details such as dates, times, locations and confirmation numbers. OpenAI processes this content on our behalf to provide the Service and, under our agreement with them, does not use it to train its models. Please review extracted details before relying on them. Only forward emails you are comfortable having processed this way.
AI assistants you connect
If you create an API token and connect a third-party AI assistant (for example Claude), that assistant can read, and if you granted write access, change your trips. Information the assistant retrieves is handled under that provider's own privacy policy. You can revoke a token at any time in Account → AI Assistants & API.
How we share information
We share information only as described here:
- With trip members you invite, who can see the content of that trip.
- With service providers that process data on our behalf, listed below.
- For legal reasons, when required by law or to protect the rights, safety and property of our users, the public or Cotinerary.
- In a business transfer, such as a merger or acquisition, subject to this policy.
| Provider | Purpose |
|---|---|
| Google Cloud and Firebase | Hosting, database, file storage, analytics, crash reporting |
| Apple, Google | Sign in |
| Mailgun | Receiving forwarded emails |
| OpenAI | Extracting booking details from forwarded emails |
| Cirium | Flight status (flight numbers and dates only) |
| Google Maps Platform | Maps, places, address search and weather forecasts |
| Expo | Delivering push notifications |
| Meta | App analytics and marketing measurement |
Retention
We keep your account and trip content for as long as your account is active. Forwarded emails are kept with the trip so you can view the original. When you delete your account, we close it, delete every trip you own (including its itinerary items, for all members) and remove you from trips owned by others. Some account records may be retained for a limited period for security, fraud-prevention and legal purposes, and backups and logs are removed on their regular schedule.
Your choices and rights
- Access and edit your profile and trips in the app at any time.
- Delete your account in the app under Account → Profile. See how to delete your account.
- Notifications can be managed in Account → Notifications or your device settings.
- Tracking can be turned off in your device's privacy settings.
Depending on where you live, you may have the right to request access to, correction of, deletion of or a copy of your personal information, or to object to or restrict certain processing. To make a request, contact us using the details below. You may also lodge a complaint with your local data protection authority.
Security
We use encryption in transit, access controls and other safeguards to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
International transfers
We and our providers process information in the United States and other countries. Where required, we rely on appropriate safeguards for these transfers.
Children
The Service is not directed to children under 13 (or the minimum age in your country), and we do not knowingly collect their personal information.
Changes to this policy
We may update this policy from time to time. We will post the new version here and update the date above, and notify you in the app for material changes.
Contact
Questions or requests: support@getcotinerary.com.