Privacy

What Stubfold stores

Your trips, bookings, to-dos, and packing lists; the travelers you add and their payment handles; attachments you upload; and the content of emails you forward to plans@stubfold.com, including their attachments. That's it — Stubfold stores what you give it and nothing it went looking for.

Who processes it

• Convex hosts the database and file storage.
• Clerk handles sign-in.
• Postmark and Cloudflare receive and send email for plans@stubfold.com.
• Anthropic — the text of emails you forward is sent to the Claude API to extract booking details. If a trip you own has AI insights on (it's on by default; turn it off in Settings), booking summaries — titles, places, dates, flight legs, never your emails, attachments, notes, or costs — are also sent to generate the trip's Insights cards. That's all the content that leaves for AI processing.
• Apple delivers push notifications to the iOS app.

No other third parties. No analytics trackers, no ads, and your data is never sold.

To improve the beta, Stubfold keeps its own count of which features are used — for example “a trip was created” or “an email was forwarded.” These records hold only which action happened and when, never the content: no trip names, no email text, no amounts. They're deleted after 90 days and go with your account if you delete it.

Sharing

Guest share pages are token-gated links you create and can reset at any time. A link shows that traveler's bookings and balance — never your email address or anything you didn't put on the trip.

Deleting your data

Settings → Delete account removes everything immediately: trips, bookings, attachments, forwarded-email items, templates, and registered devices. There is no retention window and no undo.

Questions

Email feedback@stubfold.com.