Privacy

Last updated October 30, 2026

TripInPalm is made by DEANA.AI INC., an Illinois corporation, at 220 N Green St, 2nd Floor, Chicago, IL 60607. This page covers this website, its invite form, the traveler and loyalty numbers, the boarding passes and the mail sent to a trip's address below, and the card names and food needs you may give TripInPalm in the beta.

What we collect

When you ask for an invite, we receive your name, your email address and what you wrote about your trip. Our hosting provider also sees your network address and browser type, as every website's host does; we use the network address only to stop the form from being flooded.

What we do with it

We use your name and email only to write to you about the beta. We do not sell them, share them with anyone else, or add you to a mailing list.

Who handles it

The site and the form's bot check (Cloudflare Turnstile) run on Cloudflare. Your request reaches us by email through Resend, our email provider. Both are in the United States.

Known Traveler and Redress numbers

For the trips you forward, TripInPalm checks whether each traveler's Known Traveler Number (TSA PreCheck, or the PASSID for Global Entry, NEXUS and SENTRI) and Redress number are on each flight booking, and reminds you to add one with the airline. It never keeps these numbers: only whether the booking shows one, and at most its last 4 characters. A number you send us is masked once it has been read.

Loyalty numbers

When you forward a booking, we check whether each traveler's frequent flyer, hotel or car rental number is on it, so we can tell you when one is missing and where to add it. In the trip we keep only the program, whether the number is there, and its last 4 characters, never the full number, and nothing carries over from one trip to the next. If you send us a number, we don't keep it: it is hidden in our copy of your message, and we tell you how to add it with the airline, hotel or rental company yourself. The forwarded email itself is kept as you sent it, like any email you send us. Loyalty numbers never appear on the calendar or the itinerary we send.

Card names, if you give them

In the beta, you may tell TripInPalm which credit cards you carry, so it can suggest which of them to pay a booking with. This is optional. It keeps each card's name, such as "Chase Sapphire Reserve", and whose card it is, nothing else: never a card number, its last digits, an expiry date or a security code. A card number sent in a message is removed before the message is stored. Card names are shown only to you, never on a shared calendar, an itinerary or a message to a vendor. Suggestions come from what each card's issuer publishes, on the date given with them; terms change often, so check with your issuer before you pay. They are not financial advice. Say "stop card suggestions" to turn them off, or "delete my cards" to delete them.

Food needs, if you give them

You may tell TripInPalm about a traveler's food needs, such as "Anna is vegetarian" or a nut allergy, so the reminders about food on long train, bus and plane rides can mention them. This is optional. They are kept in your words with that trip only, and shown only to you: never on a shared calendar, an itinerary or a message to a vendor unless you ask. Say "no food needs" to remove them.

Who sees what on a shared trip

On a trip with more than one family or traveler, each adult's own bookings are theirs: their flights, rooms, seats, booking references and check-in. The plan the group shares, such as where and when everyone meets or a group dinner, is seen by everyone on the trip. A family sees each other's own bookings only once each adult in it has agreed by replying to our email, and any adult can leave a family at any time by replying "leave". A child's own bookings are seen by the child's family, and by each guardian the organizer names together with that guardian's own family on the trip; no other family sees them. Birth dates, home and contact details are seen only by the person, a child's guardians and the organizer who entered them. The organizer sees what they sent in and what reaches the trip's address from anyone not on the trip, such as an airline, and only the status of a booking another traveler sends in, unless that traveler shares it with them. A receipt a traveler sends for themselves is kept for them and does not go on the trip until they add it to the trip's split of shared costs, as below. On a school or college trip the organizer also sees each student's flights, trains, buses and ferries and their emergency contact, for their safety. Check-in reminders go to the traveler. When we do not write to them (no email, under 18, or they asked for no mail or said stop), they go to a guardian or an adult of their own family who can see the booking, or to the organizer for a booking the organizer sees, and otherwise to nobody.

Boarding passes

A member, or a traveler on their trip, can send a boarding pass to the trip's address to have it checked against the trip; when a traveler sends one, the result goes to the member who organizes the trip, and for the traveler's own flight that result is only whether the pass matched it. We read it once and keep only the result: whether the name, flight, date and route match the trip, and whether TSA PreCheck and a frequent flyer number are on it, with no more than that number's last four characters. The pass, its barcode and the file are deleted as soon as the check is done. We never keep a confirmation code, ticket number or full frequent flyer number from a pass.

Mail sent to a trip's address

Each trip has its own email address, which the member who organizes it can share. The travelers on the trip, a travel agent, or the airline, hotel or booking site can send bookings to it. TripInPalm reads that mail only for that trip. A booking goes on the trip when it is really from a traveler on it, from a sender the organizer said to trust, or from a major airline, rail or bus line, hotel chain, car rental company or booking site on TripInPalm's list, in that company's own signed mail. Anything else waits for the organizer to add or reject it, such as a small hotel's own confirmation, a host writing from their own address, or a booking that names someone not on the trip. The organizer is told what arrived and who sent it; for a traveler's own booking, only that it is on the trip and its status. Nobody who writes to the address gets a reply, except as below for a traveler's own receipt. The mail is kept on the organizer's account with card, loyalty and Known Traveler numbers hidden as above, with a line saying who sent it and what became of it. Mail that fails the sender checks, or carries a file that is never a booking, is not read or kept. The address stops taking others' mail 30 days after the trip ends, and the organizer can replace it at any time.

A traveler's own receipt is handled apart. An adult traveler on the trip, writing from the email address the organizer gave for them, can send the trip's address a receipt for something bought on the trip that is not a booking, such as a meal, groceries or a taxi, as a photo, a PDF or the email itself. We read who was paid, how much, on what day and for what kind of thing, and keep that with the trip for them. It does not go on the trip, the organizer gets no notice of it (except that a photo our content check blocks is reported to the organizer, as any blocked photo is), and it is not in the trip's split until the traveler adds it there; then it is a cost on the trip like any other. If their email does not say whether it is for the group, we may ask them once, by email to them alone, or tell them once that it could not be read. Their reply is read and not answered. From anyone else but the organizer, such a receipt is not for the trip: it does not go on it or in its split. A booking's own payment receipt, such as a deposit or a paid tour, is read as a booking and goes on the trip as above.

Cookies

This site sets one cookie of its own: when you sign in at tripinpalm.com/my to see your trips, it keeps you signed in on that device for up to 30 days, or until you sign out. It is a sign-in key and nothing else. We use no trackers or advertising. The bot check on the invite form may set a cookie for that purpose only.

Deleting your request

Reply to any email from us, or write to privacy@tripinpalm.com, and we will delete it. When the beta opens to you, you get the service's full terms and privacy policy before anything starts.