Privacy policy
In short: no account, no analytics, no advertising, and your saved trips stay on your iPhone. Here is exactly what is sent when you search, and to whom.
At a glance
- No account, no analytics, no advertising and no tracking. The app contains no third-party SDK, and its privacy manifest declares that it does not track you.
- Your saved trips, your search history and your preferences are stored only on your iPhone.
- When you search, the app sends the search — activity, starting point, dates, budget and way to travel — to our server. The server builds your results and keeps no copy of the search, apart from a short technical log line without your coordinates. It passes the parts each service needs to the providers listed below, never with your IP address or an identifier.
- You book on partners’ websites, under their privacy policies. TravelScanning never handles payments.
- The subscription is bought and managed through Apple; we receive no payment details.
- This website sets no cookies and uses no analytics.
Who is responsible
The controller responsible for the processing described here is:
LyteFast Email: stephane.sprauer@gmail.comData stored on your iPhone
The app stores the following only on your iPhone. None of it is sent to us.
| Data | Kept | What it is for |
|---|---|---|
| Saved trips | Until you remove them | Finding the trips you liked again |
| Search history: activity, starting point, dates, budget, number of results and date of each search | Until you clear it | Recent searches and “Search again” |
| Your favourite activity and the other choices you make on first launch | In the app’s settings | The default activity of the Search screen |
| A technical log, without your precise position | In the app’s files | Understanding problems; it never leaves your iPhone |
If you back up your iPhone (for example with iCloud Backup), iOS may include this data in the backup, which stays under your control. Deleting the app deletes all of it.
When you search
To find trips, the app sends your search to TravelScanning’s server, which is hosted by Fly.io in its Paris region (France). The request contains:
- the activity, the dates or length of the trip, the budget, the way you want to travel and how far you are willing to go to an airport;
- your starting point: the name of the place and its coordinates. If you chose your current location, these are your iPhone’s position and the name of your town; if you chose a city, they are that city’s;
- the app’s language, so that the results come back in it.
The request contains no account, no name, no email address, no advertising identifier and no device identifier. Like any server, ours receives your IP address in order to answer; its code does not store it.
To build your results, our server sends:
- to OpenAI, the AI model that proposes and ranks destinations: the activity, the name and coordinates of your starting point, the dates or length of the trip, the budget, the way to travel and the language;
- to OpenStreetMap’s Nominatim service: the names of the proposed destinations, to find where they are, and — when you look up a city in the app — the name you typed;
- to Wikipedia: destination names, to find a photo;
- to OpenWeather and Open-Meteo: the coordinates of each destination, for the current weather and sea conditions;
- to LiteAPI: the coordinates of each destination and your dates, for hotels and their prices;
- to Travelpayouts: the codes of airports near your starting point and near the destination, with your dates, to look for a flight fare.
These requests come from our server, so these providers do not receive your IP address or anything that identifies you. Of them, only OpenAI receives the coordinates of your starting point.
Our server has no database and keeps no copy of your searches. For each search, its technical log records the time, the activity, the name of the starting place, the budget and the codes of nearby airports — not your coordinates and not your IP address. Our hosting provider keeps these logs for a limited time (see How long data is kept).
Other requests made by the app
- Location. The app asks for your location only when you choose your current location as the starting point, and only while you use the app (“While Using the App”). iOS finds the name of your town through Apple’s services. You can always pick a city instead.
- Photos. Destination and hotel photos are loaded directly from the servers that host them (for example Wikimedia’s and the hotel data provider’s). As with any image on the web, these servers see your IP address.
- Maps. The map of results and “Open in Maps” use Apple Maps, under Apple’s privacy policy.
- Booking and fare links. When you tap a link to a partner — a hotel or booking site, or a flight, train or bus search — it opens in your browser. The partner receives what the link contains, for example the destination and your dates. For affiliate links, the affiliate network that forwards the link (Awin, CJ or Travelpayouts) records that you came from TravelScanning, so that the partner can pay us a commission. From then on, the partner’s and the network’s privacy policies and cookie choices apply.
- Share and calendar. Sharing a trip uses the iOS share sheet, and Add to Calendar opens the iOS calendar editor: you decide what is shared or saved, and where. The app needs no access to your calendar, and nothing is sent to us.
Subscription
You buy, renew, cancel and restore the subscription through Apple’s App Store, under Apple’s terms and privacy policy; Apple processes the payment. The app asks the App Store on your iPhone whether a subscription is active. We receive no payment details and no Apple Account data; the sales reports Apple gives us do not include your name or email address.
This website
travelscanning.com is a set of static pages. It sets no cookies, uses no analytics or tracking, has no forms and loads nothing from other websites. It is hosted by Cloudflare, Inc. When you visit, Cloudflare processes technical connection data — such as your IP address, the page requested, the time and your browser’s user agent — to deliver the pages and to protect the service against abuse. We do not collect data about visitors ourselves.
When you contact us
If you write to us, we process your email address, your message and anything you include, only to answer you. Your messages are stored by our email provider, Google (Gmail).
Purposes and legal bases
- Searches are processed to give you the results you ask for. Where the EU General Data Protection Regulation (GDPR) applies, the legal basis is the provision of the service you use (Art. 6(1)(b) GDPR) and our legitimate interest in a working service (Art. 6(1)(f) GDPR), which includes the short technical logs used to keep the server running.
- Data on your iPhone is processed by the app on your device, under your control. We do not receive it.
- The subscription is needed to give you access to the app (Art. 6(1)(b) GDPR). Apple processes the purchase under its own terms.
- Affiliate links let partners pay us a commission when you book: our legitimate interest (Art. 6(1)(f) GDPR). The partner and the affiliate network are responsible for what happens on their websites.
- This website: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
- Your messages: our legitimate interest in answering you (Art. 6(1)(f) GDPR), or steps you ask us to take (Art. 6(1)(b) GDPR).
Recipients and transfers
Each of these services processes data under its own privacy policy:
- Hosting of the app’s server: Fly.io, Paris region (France).
- Destination suggestions and ranking: OpenAI.
- Places and photos: OpenStreetMap’s Nominatim service and Wikipedia.
- Weather and sea conditions: OpenWeather and Open-Meteo.
- Hotels: LiteAPI.
- Flight fares: Travelpayouts.
- Affiliate networks, when you open a partner link: Awin, CJ and Travelpayouts.
- Apple: maps, the name of your town for your location, and the App Store for the subscription.
- Hosting of this website: Cloudflare, Inc.
- Email: Google (Gmail), which stores the messages you send us.
Some of these providers process data outside the European Union, for example in the United States. The safeguards that apply to each of these transfers (such as the EU–US Data Privacy Framework or standard contractual clauses) are being confirmed with each provider and will be listed on this page.
How long data is kept
- Data on your iPhone stays until you delete it in the app or delete the app.
- Our server keeps nothing once it has answered a search, except its technical log lines. Our hosting provider, Fly.io, keeps them for a limited time under its own policy; we do not copy them anywhere else.
- The providers listed above keep the requests they receive according to their own policies.
- Cloudflare may keep connection logs to deliver and protect this website.
- Messages you send us are kept only as long as needed to deal with your request, unless the law requires us to keep them longer.
Your rights
Depending on the law that applies to you, you have the right to access, rectify and erase your data, to restrict or object to its processing and to data portability, and the right to lodge a complaint with a data protection authority — in the EU, the authority of your country. Because there is no account and searches are not stored, we usually hold no personal data about you, apart from any messages you send us. You can delete the data on your iPhone yourself, in the app.
To exercise your rights or ask a question, contact us:
LyteFast Email: stephane.sprauer@gmail.comChildren
TravelScanning is not directed at children and does not knowingly collect data about them.
Changes to this policy
We will update this page when the app or the website changes, and before any new data flow is released. The date at the top of the page shows the last update.