Privacy
In short: NotBooked has no account and no login. Your trips live on your device and in your own iCloud. Only after you give permission is a confirmation you share in sent to our service and on to Anthropic, which reads it; the result is sent back to your device. We don't store the file or your trips.
Who we are
NotBooked is developed and operated by Mads Peter Dahl Andersen, Denmark. Privacy questions: support@notbooked.app.
What the app stores
Your trips, spots, bookings, options, ideas and the confirmations you've shared in (PDFs, screenshots, links) are stored in the app on your iPhone or iPad and in your private iCloud (see below). We have no access to them. When you delete a trip, it's deleted on your devices and in your iCloud.
When a confirmation is read with AI
The first time you share a file, screenshot or link in, the app asks whether it may be read with AI. If you say no, nothing is sent, and you can fill in the booking yourself. You can turn reading off at any time under Settings → Privacy. If you say yes, this happens:
- The file is sent encrypted to our service (Cloudflare Workers). If you share a link, the service fetches the page's text.
- The service sends the content to Anthropic PBC (USA), whose Claude model extracts the name, date, place, reference and price. Anthropic processes the data on our behalf and does not use it to train models. Anthropic may retain the request for up to 30 days for abuse monitoring.
- The result is sent back to your device. Our service doesn't store the file or the extracted content.
- Along with the file, the app sends an anonymous device ID (a random string, not linked to you or your Apple ID), your language and, if you've picked a trip, the trip's city and dates, so dates in the confirmation are understood correctly.
For operations, the service keeps one log row per request: time, a hash of the anonymous device ID, file type and size, model, token count, response time and whether it succeeded. No file content and no personal data. The log is used to limit requests per device and to monitor costs and errors.
iCloud and travel companions
Syncing between your devices happens through your own private iCloud database at Apple, tied to your Apple ID. We have no access to it.
When you invite travel companions to a trip, Apple shares that trip (and only that trip) with the people you invite. They can see the trip's spots, bookings and attached confirmations, and if they can edit, they can change them. Their name from their Apple ID appears in the app once they've joined. You can remove a travel companion or stop planning together, and a travel companion can leave the trip. Sharing happens through Apple's iCloud; we have no access to it.
Anonymous usage statistics
To see whether the app helps people get started, the app sends a few anonymous events to our service: that the app was opened for the first time, that the intro was viewed, that a trip was created (and how many trips you have), that the subscription screen was shown (and from where), that a subscription was purchased (yearly or monthly), and that an invitation was created or accepted. Each event has a time, the app version and a hash of the anonymous device ID; invitations also carry a short hash of the share, so we can count how many people join. The trip's name, cities, bookings, confirmations and travel companions' names are never sent. The statistics are only used in aggregate, aren't shared and aren't linked to you. You can turn them off under Settings → Privacy.
Notifications and calendar
Reminders about what's still missing before departure and about cancellation deadlines are scheduled locally on your device. If you choose to add bookings to your calendar, the app asks for write-only access; it never reads your existing events. Everything can be turned off in Settings.
Subscription
NotBooked Plus is purchased through Apple's App Store. Payment, renewal, cancellation and refunds are handled by Apple under Apple's terms. We receive no payment information; the app is only told that the subscription is active. The first trip is free, and travel companions don't need Plus.
What we don't do
- No account, no login, no email address or phone number.
- No tracking across apps or websites, no ads, no selling of data.
- No third-party analytics SDKs.
Your rights
Your trips stay with you and in your iCloud, so you delete them yourself by deleting trips or the app and its iCloud data. To have our operations log for your device ID deleted, email support@notbooked.app with the ID from Settings → Privacy. EU residents can also complain to their data protection authority.
Changes
If we change this policy, we update the date at the top and, for significant changes, tell you in the app.