Privacy Policy

Who we are

XPLR is a trip planning app operated by XPLR (“we”, “us”). This policy explains what we collect, why we collect it, and the choices you have. If a question isn't answered here, email privacy@xplr.travel.

Information we collect

We keep collection to what the product genuinely needs:

• Account details — your email address, and your name or profile photo if your sign-in provider supplies one.
• Trip content — the boards, saved places, itineraries, bookings, notes and preferences you create in the app.
• Invite details — the email address you enter when you invite someone to a trip, used only to send that invitation.
• Payment details — if you subscribe, our payment processor handles your card. We never see or store full card numbers.
• Basic usage and device data — pages visited, errors, browser and device type, used to keep the app working and fast.

How we use your information

To create and secure your account, store and sync your trips across devices, generate itineraries and travel estimates from the places you save, send account and trip-related emails, process subscriptions, and diagnose problems.

We do not sell your personal information, and we do not use your trip content for advertising.

Third-party services

XPLR relies on a small set of providers to function:

• Google Maps Platform — place search, place details, photos, maps and route estimates. Your searches and map interactions are processed by Google under their privacy policy.
• Our hosted backend — authentication and database storage for your account and trip data.
• Email infrastructure (notify.xplr.travel) — delivery of account, invite and trip-reminder emails.
• Stripe — subscription payments and billing management.

Google account sign-in and Google user data

Signing in with Google is optional — you can plan a trip without an account. When you do sign in with Google, we request only these scopes:

• openid — to identify your account securely.
• email — your email address, used as your account identifier and to send account, invite and trip-related email.
• profile — your name and profile photo, shown in the app so you can tell your account apart.

How we handle Google user data

We use Google account data only to create and secure your account, personalise the app with your name and photo, and contact you about your account and trips. We do not request access to Gmail, Google Drive, Calendar or Contacts, and we do not use Google user data for advertising, resale, or to train AI or machine-learning models.

Google user data is stored in our hosted backend alongside your trip content and is shared only with the infrastructure providers listed above (hosting/database, email delivery, payments) strictly to operate the service. It is never transferred to anyone else except where required by law.

You can revoke XPLR's access at any time at myaccount.google.com/permissions, and you can request deletion of your account and all associated data by emailing privacy@xplr.travel. XPLR's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies and local storage

We store your sign-in session and a cache of your recent trip data in your browser so the app loads quickly and keeps you signed in. Clearing your browser storage signs you out and clears that cache. We do not use third-party advertising cookies.

Data retention

We keep your account and trip data for as long as your account is active. If you delete a board or your account, the associated content is removed from our live systems, with routine backups cycling out shortly after.

Your rights and choices

You can access and edit your trip content at any time inside the app, request a copy of your data, or request deletion of your account by emailing privacy@xplr.travel. Every non-essential email we send includes an unsubscribe link; account and security emails are required for the service.

Children

XPLR isn't intended for children under 13, and we don't knowingly collect their information.

Changes to this policy

If we make a material change we'll update this page and, where appropriate, notify you by email.

Contact

Privacy enquiries: privacy@xplr.travel. Anything else: hello@xplr.travel.