Trip Companion
Privacy & security
You trust this app with passports and money. Here is exactly how that information is handled.
Private by default
Every trip, expense, booking and document is bound to your account at the database level. Access rules are enforced by the database itself, not by app code, so nothing leaks even if a screen is loaded out of context.
Documents stay yours
Passports, visas and insurance files live in a private, encrypted store. They are opened through signed links that expire in 30 seconds, and they are never shared with your trip companions unless you switch sharing on for that specific file.
Sharing is explicit
Inviting someone to a trip shares the itinerary, packing list and shared expenses — not your document vault, loyalty balances or personal preferences.
No anonymous access
Signed-out visitors cannot reach a single row of personal data. Payment and loyalty credentials are never stored in the app; connections are read-only and token-based.
Everything is logged
Changes to trips, bookings, documents, memberships and roles are recorded in a tamper-resistant audit trail that only an administrator can read and nobody can edit or erase.
Export or erase, any time
From Profile you can download a full copy of your data as JSON, or permanently delete your account — files, rows and sign-in identity are all removed.