Privacy

What Stubfold stores

Your trips, bookings, to-dos, and packing lists; the travelers you add and their payment handles; attachments you upload; and the content of emails you forward to plans@stubfold.com, including their attachments. That's it — Stubfold stores what you give it and nothing it went looking for.

Who processes it

• Convex hosts the database and file storage.
• Clerk handles sign-in.
• Postmark and Cloudflare receive and send email for plans@stubfold.com.
• Anthropic — the text of emails you forward is sent to the Claude API to extract booking details. If a trip you own has AI insights on (it's on by default; turn it off in Settings), booking summaries — titles, places, dates, flight legs, never your emails, attachments, notes, or costs — are also sent to generate the trip's Insights cards. If you ask for packing suggestions on a trip, the same booking summaries plus the trip's weather forecast and your packing item names — including items you checked off on past trips, never traveler names, notes, or costs — are sent to generate them, and only when you tap the button. That's all the content that leaves for AI processing.
• Apple delivers push notifications to the iOS app.
• Apple and Stripe process Stubfold Pro subscriptions. They take the payment and tell Stubfold only that a plan is active and when it renews — card and bank details go to them, never to Stubfold.
• Sentry receives error reports from the website when something breaks: the error, the stack trace, and which page it happened on. Your trips, costs, and forwarded email never go with it, the report isn't tied to your account, and guest share links are stripped to /share/[token] so a report can never become a way in. The iOS and Android apps send Sentry nothing.

No other third parties, no ad networks, and no analytics trackers — the usage counts below are Stubfold's own. Your data is never sold.

To see what's working, Stubfold keeps its own count of which features are used — for example “a trip was created” or “an email was forwarded.” These records hold only which action happened and when, never the content: no trip names, no email text, no amounts. They're deleted after 90 days and go with your account if you delete it.

Sharing

Guest share pages are token-gated links you create and can reset at any time. A link shows that traveler's bookings and balance — never your email address or anything you didn't put on the trip.

Deleting your data

Settings → Delete account removes everything immediately: trips, bookings, attachments, forwarded-email items, templates, and registered devices. There is no retention window and no undo.

Children

Stubfold isn't directed at children and doesn't knowingly collect anything from anyone under 13. If you believe a child has an account, email the address below and it will be deleted.

Where your data lives

Stubfold is operated from the United States, and the processors above store and handle data there. Using Stubfold from elsewhere means your data is transferred to the US.

Questions

Email feedback@stubfold.com.