TripScript has no accounts and runs no servers for your trips. Imports are parsed on your device, your data lives in your own iCloud, and cloud AI only ever runs with your own key, when you ask.
The short version
- No account, no sign-in, no ads, no tracking. We don't use analytics or advertising SDKs, and we never sell or share your data for marketing.
- Your trips live in your own iCloud. Trip content, imported documents, photos, lists, and ratings are stored on your device and, if iCloud is on, in your private iCloud database. We cannot read them.
- Imports are parsed on your device with Apple Intelligence. TripScript never reads your email or contacts to build a trip.
- Cloud AI is optional and uses your own key. Nothing is sent to Anthropic or OpenAI unless you add your own API key and start an AI action, after an in-app disclosure.
- The only data we can see is the small amount needed for the optional in-app invite feature (below), and only if you turn it on.
What TripScript stores, and where
| Data | Where it lives | Who can see it |
|---|---|---|
| Trips, days, cards, notes, costs, ratings, lists, Traveler Profile | Your device; your private iCloud database when iCloud sync is on | You, and your other devices |
| Documents and screenshots you import (PDFs, photos) | Your device; attachments on cards sync to your private iCloud | You |
| Photos you add to a trip or a PostScript recap | Your device / your private iCloud | You |
| A trip you share with others | A CloudKit share you own; the people you invite | You and the people you invite |
| API keys you enter (Claude, ChatGPT, flight-status services) | Your Keychain, synced by iCloud Keychain | You; sent only to that provider |
| Settings | Your device; iCloud key-value storage for sync | You |
Apple's iCloud terms govern iCloud storage. We do not operate our own servers for your trip content.
The optional in-app invite feature ("Findable for invites")
If you turn on Settings → Findable for invites, friends who use TripScript can send you a trip invite inside the app. To make that work we store, in TripScript's public iCloud database, which Three Lucky Stars can read:
- a one-way hash (not the plain text) of the email address or phone number you choose to be findable by,
- the display name you entered, and
- your iCloud user record identifier.
When someone sends you an invite, we store the sender's display name, the trip's name and icon, and the invite link until you accept or decline it. Turning the feature off deletes your findable record. This feature is off by default.
Sharing a trip
Sharing uses Apple's CloudKit sharing. The people you invite see the trip's shared cards, lists you've marked as shared, the crew roster (name, email, phone, photo, and, unless you turn on "crew basics only", notes and relationship), and edits made by the group. Cards and lists you mark "Just me" never leave your device as part of the share. You can remove people, leave a trip, or reset the invite link at any time.
Cloud AI (your choice, your key)
TripScript's default AI is Apple Intelligence, which runs entirely on your device. You may instead connect your own Anthropic (Claude) or OpenAI (ChatGPT) API key. If you do, then only when you start an AI action (importing a document, building or improving a trip), the text of that document and your trip details, including any Traveler Profile preferences you've filled in, are sent to that provider using your key under that provider's privacy policy. We never see this traffic and we ship no AI keys of our own.
Other services the app talks to
- Apple Weather (WeatherKit) and Open-Meteo for forecasts, using your trip's destination, not your location.
- Apple Maps for maps, directions, and Discover searches.
- Unsplash, Pexels, Openverse, and Wikimedia Commons for photos you search for or that are suggested for places; requests contain the search term only.
- AeroDataBox or Aviationstack for live flight status, only if you add your own key; requests contain the flight number and date.
- Web pages you paste are fetched to read event or venue details.
None of these receive your name or account information from TripScript.
Permissions
- Location (while using the app): to find your home city and show places near you. Never in the background, never stored by us.
- Contacts: to add crew members from your address book, only when you pick them.
- Calendars (write-only): to add your itinerary to your calendar.
- Photos: to pull your own trip photos into a PostScript recap and save prints back to your library.
- Notifications: for event reminders and "import ready" alerts.
Purchases
TripScript Pro is a one-time purchase handled by Apple. We receive no payment details. Restore Purchases is in Settings.
Deleting your data
Delete any trip from the app, or use Settings → Trips → Erase Everything (incl. iCloud) to remove every trip from your device and your iCloud. Turn off "Findable for invites" to delete your findable record. Deleting the app removes its on-device data; iCloud data remains until you erase it in the app or in iCloud settings.
Children
TripScript is not directed at children under 13 and does not knowingly collect information from them.
Changes
We'll post any changes to this page and update the effective date.