MyDestinationsPrivacy
Your trips are yours. Here is exactly what the app keeps, where it goes, and what never leaves your device.
The short version
- There's no account to create, and we run no server that holds your trips.
- The app has no analytics, no advertising, no tracking and no third-party code.
- Your trips live on your device and, if you keep iCloud sync on, in your own iCloud.
- Tickets and booking confirmations are read on your device.
- Trip photos stay in your Photos library; the app only links to them.
- We never see your trips, and we never sell or share anything about you.
What the app keeps on your device
Everything you add to a trip: its cities, places, stays, flights and other travel, day plans, checklist, notes, documents, tickets and booking confirmations. Also your profile (name, photo and home airport), your settings, and a few things kept to save time and data, such as map images, weather forecasts and cover photos.
Trip photos aren't copied. The app keeps a link to each photo in your Photos library, so the photo itself stays where it is. Photos you add to a trip's Documents are the exception: those are stored as copies, so they travel with the trip.
iCloud
iCloud sync is on unless you turn it off. It keeps your trips the same on every iPhone and iPad signed in to your Apple Account, using the app's private database in your own iCloud. Everything in your trips goes there, documents, tickets and confirmations included, and so does your profile. Your library photos don't; only photos added to Documents do.
We have no access to your iCloud data. Apple stores it under your Apple Account, protected by iCloud's security.
To stop syncing, go to the app's Settings › iCloud and turn it off. Your trips come out of iCloud and stay on this device.
One more small thing lives in iCloud, whatever the switch says: the number of trips you've added, so your free journeys are counted the same on all your devices.
Sharing a trip
When you share a trip, it's shared through iCloud with the people you invite, and only them; there are no public links. They see the whole trip, documents and tickets included, and the name on your Apple Account. They never see your library photos. You can stop sharing, or remove someone, at any time, and anyone can leave a trip shared with them.
What leaves your device
Besides your own iCloud, the app talks to a few services to do its job. This is all of them.
Apple Maps
- What
- What you type when searching for a city, place or hotel, and the locations of your cities and places, to draw maps, find a city's country, and work out travel times between places.
- Why
- To find places and show them on a map.
Apple Weather
- What
- The locations of your cities and places.
- Why
- To show forecasts for the coming days and what a month is usually like. Forecasts are kept on your device for a while, so the same city isn't asked twice.
Unsplash, for cover photos
- What
- When you create a trip, its name (without emoji) is searched for a cover photo. Searches you type in the photo picker are sent too, and, when you pick a photo, its ID, as Unsplash asks.
- How
- Searches go through a small relay we run on Cloudflare, which holds our Unsplash key. It sees the search words and your IP address. The IP address is used only to limit how often one device can search, and isn't kept. Results are kept for a day by their search words alone.
- Photos
- The photo you choose downloads straight from Unsplash, which sees your IP address as any website would. Unsplash's privacy policy applies to that.
Websites you save
- What
- When you save a link in a trip's Documents without a title, the app opens the page once to read its title. That website sees the request.
The App Store
- What
- Buying, restoring and checking Pro happen through Apple. We never see your payment details.
Apple's services follow Apple's privacy policy.
Permissions
The app asks only when a feature needs it, and works without any of them.
- Photos: to show your photos and find the ones you took on a trip, by date and place. The matching happens on your device; nothing is copied or uploaded.
- Camera: to take a photo for a trip. It's saved to your library.
- Location, while using the app: to show which of your own saved places are close to you during a trip. Your location is used on your device, never stored, and never sent anywhere.
- Calendar, add only: to add your flights, hotels and plans when you tap Add to Calendar. The app can't read your calendar.
- Notifications: for trip reminders, which are set on your device. Nothing is sent anywhere.
Reading tickets
When you add a ticket, a boarding pass, a screenshot or a booking confirmation, the app reads it on your device, using Apple's text recognition and, where your device has it, Apple Intelligence. Nothing is sent off to be read.
What you share yourself
Share cards, PDFs and backups go only where you send them.
- Share cards leave off hotel names, travel and booking details, since a picture can travel further than meant.
- PDFs leave out booking references unless you include them, and never include a flight's or train's booking reference, seat or notes.
- Backups are a plain file with every trip in it, tickets and documents included, and they aren't encrypted. Keep them somewhere safe.
Deleting your data
Deleting a trip deletes it from your devices and from your iCloud. If you shared it, it's gone for the people you shared it with too. Deleting the app removes what's on that device. To remove the app's data from iCloud, turn off sync in the app first, or delete it in your device's iCloud settings under the app's storage.
Children
The app doesn't collect personal information from anyone, children included.
This website
This site has no cookies, no analytics and no scripts. Our host, Cloudflare, handles each visit to serve the page, as any web host does.
Changes
If this changes, this page will say so, with a new date at the top.
Questions?
Write to us and a person will answer.