Your trips are yours
Trips by Sullio (“Trips”) is a group trip planner. This page says what it keeps about you, why, who helps run it, and how to get it deleted. No ads, no selling data, no tracking you across other apps or websites.
Who we are
Trips is made by Sullio, the app studio of SULLIOS Ltd (registered in England and Wales, company number 15056318), London, UK, which is responsible for your data under UK data protection law (UK GDPR). Questions or requests: hello@sullio.com.
What Trips keeps
| What | Why |
|---|---|
| Your name, colour and home city | So people on your trips know who's who, and to show times back home. |
| Your email address (and Apple or Google sign-in) | To sign you in. We don't send marketing. |
| Your trips: plans, bookings, booking references, dates, ideas, votes, comments, lists and shared money | That's the app. Most of it is shared with the people on that trip; plans you mark "Only you" are seen only by you. |
| Tickets, boarding passes and trip photos you add | So you and (if you choose) your group can open them, including offline. Kept in private storage, opened through links that expire. |
| Booking screenshots and PDFs you import | Read to fill in your plans, then kept with the plan they came from. You choose whether everyone on the trip can open them or only you. |
| Booking emails you forward to your forwarding address or paste in | Read to turn them into plans, then kept privately with the plan they made, for check-in details and cancellation rules. Only you can open one unless you share it. Card and passport numbers are taken out first. |
| Notes from friends you paste in, and links or lists you paste | Read to turn them into ideas, plans or saved places. Pasted notes are kept on the trip only if you choose, so you can reread them; you choose whether the trip sees them or only you, and you can delete them. Card and passport numbers are taken out first. |
| Places you save to your Plan, with where they are on the map | Your own list and map. Only you can see it, unless you share a place with a trip. |
| Your travels: the countries and cities you tick off as been to, and hotel groups and airlines you star or add | To show your travel stats and put your favourite brands first in suggestions. Only you can see it. Stats like countries and miles are worked out from your trips when you open them, not stored. |
| Your Monzo, PayPal or Revolut username, if you add one | So people on your trips can pay you back. Only usernames, never account or card numbers. Only people on your trips see it. |
| A notification token for your phone | To send you trip notifications, if you allow them. |
| Feedback you send from the app | Your message, a screenshot if you add one, the screen you were on, and your email only if you choose to include it, so we can fix things and reply. |
| Crash and error reports | To find and fix bugs. They include the error, the screen, the app version, the phone model and an anonymous account id; we strip names, emails, invite links and file links out on your phone before anything is sent. |
Your location is used on your phone (to show where you are on the trip map, roughly how far the next plan is, and which places you've pinned are within a walk). It's only ever read if you've already allowed it, while Trips is open, and never in the background. The one time it leaves your phone is when you ask Trips what's near you: then your position goes with that question so Google Places can find what's close. It's used for that answer only and not stored. Smart reminders are scheduled on your phone too, and the copy of your trips kept for use offline is stored encrypted on your phone and cleared when you sign out.
Who helps run Trips
These companies process data for us, only to provide the parts of Trips listed. They aren't allowed to use it for their own purposes under their terms with us.
- Supabase: database, sign-in, file storage and server functions, hosted in London (AWS eu-west-2).
- Google: Google sign-in if you use it; Google Places for looking up places and photos, and the suggestions as you type a place's name (we send what you type, the city you're planning, or your position when you ask what's near you); and Google's Gemini AI for reading booking emails, pasted notes and lists, translations, suggestions and "Ask" questions you send.
- Resend: receives the booking emails you forward to your forwarding address.
- Expo and Apple: deliver push notifications.
- Sentry: crash and error reports and in-app feedback, stored in the EU (Germany).
- Vercel: hosts this website and the invite and shared-trip pages.
Some of these companies are based in the US. Where data leaves the UK, it's covered by the UK's approved safeguards (such as the UK International Data Transfer Addendum or the UK–US data bridge).
Booking links
Some buttons in Trips ("Book", "Tickets", "Find a hotel", "Find an eSIM", "Compare cover") open a partner's site, such as a hotel, tour, transfer, eSIM or travel insurance site, through a link on sullio.com. Some of these links may earn Trips a commission if you book; it doesn't change your price. No personal data is shared with partners beyond what the link itself contains: the place or thing you're looking for, the city, your dates and how many people are going. We count clicks on these links without storing who clicked them. What you do on a partner's site is covered by their own privacy policy.
Our legal basis
We use your data to provide the service you've asked for (contract), and crash reports to keep Trips working and safe (legitimate interests). Notifications and location are only ever used if you allow them, and you can turn them off at any time in the iPhone Settings app.
How long we keep it
As long as you have an account. Deleting a trip deletes everything in it. Crash reports are deleted automatically by Sentry within 90 days.
Deleting your account
In Trips, open You (your profile) and choose Delete account. That deletes your profile, your private plans, your saved places, your tickets and your photos straight away. Plans and spending you shared with a group stay on that trip for the others (your name becomes "Former traveller"), and trips you organised pass to the next person on them, or are deleted if no one else has joined.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it, by emailing hello@sullio.com. We'll reply within a month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
Trips isn't meant for children under 13, and we don't knowingly collect their data.
Changes
If this policy changes, we'll update the date at the top, and tell you in the app if the change is significant.