Privacy policy

Last updated: 16 October 2026

Oliplanner ("the app") is published by Oliplanner, based in United Arab Emirates ("we", "us"). We are responsible for (the "controller" of) the personal information described here. This policy explains what happens to your information when you use the app or this website. Contact us at support@oliplanner.com.

You can use the app without an account

Without an account, your trips, drafts, saved ideas, place lists and traveller profile are stored only on your device. Deleting the app deletes them.

If you create an account

An account lets you move your data to a new phone and use it on more than one device. We store:

• Your account details: your email address (we email you a code to confirm it, and when you change it or reset your password) and a scrambled (hashed) password, or the identifier Apple or Google gives us if you use Sign in with Apple or Google, plus an optional first name.
• The data you sync: your trips, drafts, place lists, saved ideas and traveller profile (names, a child's year of birth and passport countries) and, if you add them, booking details (title, names as on the passport, date of birth, sex, mobile number, passport number, issuing country and expiry). It is encrypted on our server and used only to send it back to your own devices and, when you book, to make that booking.
• The free trip for a complete profile: when you finish your booking details, the app sends them once so we can check they look complete before adding the free trip. We keep that the reward was given, on which installation, and a one-way scrambled fingerprint of the passport number and of the mobile number, so the same passport or number can't earn it twice. We do not keep the details themselves, and the fingerprint can't be turned back into them. Passport numbers are sent only to our server, for the one-time free-trip check (we keep only a scrambled one-way code, not the number), and to Duffel when you book a flight.
• Oliplanner Concierge waitlist: if you join, we keep that you joined and whether you prefer WhatsApp or Telegram. You can leave it at any time in the app.
• Oliplanner Concierge on Telegram (Oliplanner Pro): if you connect Telegram, we keep your Telegram chat ID and username, your time zone and whether you want the morning plan. Your messages to the Concierge are kept for 7 days so it can follow the conversation, then deleted. Disconnecting (in the app, or /stop in Telegram) deletes the link and the messages.
• Sign-in sessions: one for each device you sign in on, with the kind of device (for example "iPhone"), so you stay signed in and can see and sign out your devices in Settings. Sessions unused for 180 days are removed.
• Offers by email or notification (only if you turn them on): if you choose to get emails or notifications about new features, destinations and offers, we keep that choice and when you made it. They are off until you turn them on, and you can turn them off in the app, or with the link in any of these emails.
• Push notifications: the device push token is stored with your account and used to send booking, price and sign-in alerts via Apple (APNs) or Google (FCM).
• Trips you share: if you send a trip to someone with an account, we keep the trip, your first name and the city until they add or decline it (at most 30 days), and send them a notification.
• Invites: if you invite friends, we keep your invite code and who joined with it, so we can add the free trip you earn.

You can delete your account at any time in Settings, or on our account deletion page. This deletes your account, your sign-in sessions, everything synced with it and your Concierge link and messages straight away. Copies on your devices stay until you delete the app or sign out and remove them. A few records are kept after deletion, without your email or name: booking records (see below), records of purchases and trip credits (so App Store refunds and restores work), and the free-trip fingerprints described above. Our server backups are kept for 14 days, so deleted data disappears from them within 14 days.

What is sent off the device, and why

• Oliver and AI. Oliver is an AI planner powered by Claude, made by Anthropic, PBC (USA). We only send Anthropic data when you've allowed it in the app. We send your trip details (places, dates, home city, number of travellers, budget and preferences), the first names and children's ages of the travellers you pick, your notes and pasted place lists, your messages to Oliver and, for visa checks, the countries on each traveller's passport. We never send Anthropic passport numbers, dates of birth, phone numbers or your email, so please don't type them into notes or messages. Anthropic processes this data for us as our service provider. It doesn't use it to train its models, and it deletes it after 30 days, unless its safety systems flag it for a possible policy breach, in which case it may keep it for up to 2 years. You can turn Oliver off any time in Profile → Settings → Oliver & AI; this stops new data being sent. Oliver can make mistakes, so check prices, entry rules and opening times before you travel.
• Flight and hotel searches (airports, dates, number of travellers, cabin, area) are sent to our flight and hotel data providers, Kiwi.com and Duffel, to fetch live prices. Your name and contact details are not sent with a search.
• A random install ID is created on first launch to issue the app a token and to apply daily usage limits. It is not your device's hardware or advertising ID.
• Anonymous usage counts (on unless you turn them off): the app tells our own server which screens and steps are used, such as opening the app, reaching Review, starting a plan, seeing the paywall or going to a booking partner, with the app version, the platform and the day and hour. It never sends your trips, places, what you type, your name, email, phone or passport details. Each phone sends a random analytics ID that is separate from the install ID and your account; our server keeps only a code made from it that changes every day, so these counts can't be linked to you, to your account or from one day to the next. No other company receives them, and they are not used for advertising or tracking. Turn them off in Profile → Settings → Privacy and data; this deletes the analytics ID on your phone and stops sending.
• Crash reports and problem reports: if the app hits an error, it sends the error message, the app version and the platform (iOS or Android). If you report a problem, the start of your report is also sent to our team's chat channel so we can look at it. Crash reports are deleted after 30 days.
• Fonts and maps: the app loads its fonts from Google Fonts and its maps from CARTO and OpenStreetMap. These services receive your IP address and, for maps, the area you are looking at. No account details are sent to them.
• Emails (codes, booking confirmations, changes and cancellations, and offers if you turned them on) are sent through our email provider, Resend, which receives your email address and the message.

Our server does not keep your planning requests or messages. It keeps a daily usage count for 40 days and short operational logs without trip content. Our server runs on a virtual private server rented from Hostinger.

When a trip plan starts, we keep an anonymous count of the kind of trip: the destination and departure city as typed, the number of nights and adults, the budget, the travel style, pace, food choice and interests, and the month of travel. It is stored on its own, with no account or phone identifier and only the month of travel, so it can't be linked to you. We use it to see which destinations and trip types to improve.

Purchases

Subscriptions are bought through the App Store or Google Play. We never see your card details. Through our payments provider, RevenueCat, we receive which plan you have, when it renews or ends, and a random identifier for your account or phone, so we know whether you have Pro. We also keep how many trip credits you have bought and used. We also count how many free trip plans have been used.

Booking flights in the app (only if you book)

When you book flights in Oliplanner, the booking is made with the airline through our booking partner, Duffel. To make it, the names, titles, dates of birth and sex of the people travelling, their passport details where the airline asks for them, and your email and mobile number are sent through our server to Duffel and the airline. We also give Duffel our internal account number for you, so a booking can be matched to your account. The airline uses them for your ticket, check-in and any changes to your flights.

You pay with your card in a secure form from Duffel Payments, whose card processing is done by Stripe. Your card details go straight to them and never reach us. We receive whether the payment succeeded, the amount and the currency, and we keep a record of each booking (the reference, the flights, what you paid and our booking fee, and any change, cancellation or refund) so you can see, change or cancel it in the app and so we can help you. Booking confirmations, changes and cancellations are emailed to you.

Booking records are kept for as long as tax and consumer law requires, even if you delete your account; everything else about you is deleted then.

Oliplanner Concierge on Telegram (only if you connect it)

When you message the Concierge, your name, your message, the recent conversation, your upcoming trips and your bookings made in Oliplanner are sent to Anthropic (Claude) to write the answer, and the answer is sent to you through Telegram. Passport and other identity document details are not sent. Morning plans, the note the evening before a trip, and booking confirmations, changes and cancellations are also sent to you through Telegram. Telegram's own privacy policy covers what Telegram does with the chat.

Notifications (only if you turn them on)

If you allow notifications, your phone gives us a push token, the address used to reach it. We store it with your choices (cheaper flights, new sign-ins, news). For cheaper-flight alerts, we keep the airports, dates, number of travellers, cabin and planned price of the flights for your upcoming trips. We check prices a few times a day and stop when the trip starts. Turning notifications off deletes the token and these watches. Notifications go through Apple (iPhone) or Google Firebase (Android).

Your calendar and reminders (only if you use them)

If you add a trip to your calendar or turn on calendar sync, the app writes events to a calendar of its own on your phone. It does not read your other events, and no calendar data leaves your phone. Turning sync off removes the events it added.

Trip reminders (for example, to apply for a visa or check in) are scheduled on your phone. They are not sent through our server.

What we do not do

The app shows no advertising, does no tracking across other companies' apps or websites, and does not access your location, contacts or photos. We do not sell your data. We share data only with the providers named on this page, and only to do what you asked: plan a trip, take a payment, book your flights, send you emails and notifications, or answer you in Telegram.

Our website

The home page of this website loads a script from Travelpayouts, a travel affiliate network, which can turn links to travel brands into affiliate links so we may earn a commission if you book through them. The script sets a cookie with a random identifier, reads analytics cookies that may already be in your browser, and sends Travelpayouts page and click information. It is not loaded on this policy, the terms, the support page or the account deletion page, and it is never in the app. You can block or clear it with your browser's cookie settings.

Visa information

Visa results are a guide produced with Claude and are not legal advice. Check with the embassy, the official government website or your airline before you travel. The app links to passportindex.org to help you confirm.

Links to other sites

Booking links open airline, hotel or map websites, which have their own privacy policies.

Why we use your information (legal bases)

• To provide the app you asked for (account, sync, planning, searches, bookings, purchases, notifications, Concierge): because it is necessary to provide the service to you.
• Offers by email: only with your consent, which you can withdraw at any time.
• Crash reports, usage limits, security and fraud prevention (including the free-trip fingerprints, the anonymous trip counts and the anonymous usage counts): our legitimate interest in keeping the app working, fair and secure.
• Booking records: to meet our legal obligations, such as tax and consumer law.

Where the law requires your consent instead, we ask for it in the app, and you can withdraw it at any time.

Where your information is processed

We are based in United Arab Emirates. Our providers process data in other countries too, including the United States (Anthropic, Resend, RevenueCat, Apple, Google), the United Kingdom (Duffel) and the European Union. Where data protection law requires it, we rely on the safeguards those providers offer for international transfers, such as standard contractual clauses.

How long we keep it

• Account and synced data: until you delete your account.
• Sign-in sessions: until you sign out, or 180 days without use.
• Concierge messages: 7 days. Shared trips: until added or declined, at most 30 days.
• Daily usage counts: 40 days. Crash reports: 30 days. Server backups: 14 days.
• Anonymous usage counts: individual events 90 days, then only daily totals, for up to 2 years.
• Booking and purchase records: as long as tax and consumer law requires.

Children

The app is not directed at children under 13, and you must be 18 or older (or have a parent's permission where the law allows) to create an account or book. Parents can add their children as travellers with a first name and year of birth to plan family trips. If you believe a child has given us personal information, email us and we will delete it.

Your rights

You can see, export and delete your data from the app (Settings, Your data). Depending on where you live, you also have the right to ask for a copy of what is held on our server, to correct it, to have it deleted, to restrict or object to how we use it (including for direct marketing), to receive it in a portable format, and to withdraw consent at any time. Email us and we will answer within one month. If you are unhappy with our answer, you can complain to your data protection authority, for example the UAE Data Office, the authority in your EU country, or the UK Information Commissioner's Office.

Contact

Oliplanner, United Arab Emirates · support@oliplanner.com