You are offline. You can browse trips you have already opened, but changes are unavailable.
Sign in Start free

Privacy Policy

Last updated: October 16, 2026

This is a working draft and not legal advice. Review it with counsel before you rely on it.

Whimbrel helps you turn forwarded booking confirmations into an organized travel itinerary. This policy explains what we collect, how we use it, and the choices you have. It applies to the Whimbrel web app and its companion mobile apps.

Information we collect

We collect the information needed to run your account and build your itineraries:

  • Account details. Your email address and a hashed password, or the sign-in links you request instead of a password.
  • Forwarded email. The booking confirmations you forward to your personal Whimbrel address, including their full contents and any attachments.
  • Itinerary data. The trips, legs, itinerary items, notes, todos, and media that you or the assistant create from your email or add by hand.
  • Connected apps. Tokens for third party apps and assistants you authorize to reach your itinerary through our tools.
  • Profile. Optional details such as an avatar, a home location, the countries that issued your passports (never passport numbers or other document details), and your notification and appearance preferences.
  • Technical data. Basic session information such as your IP address and browser, kept to keep your account secure. When you first arrive we also note the page you landed on, the site that sent you, and any campaign tags in the link, so we can learn which pages bring new travelers.

How AI processes your information

When you forward a booking or connect an inbox, we pass the message to an AI model that reads it and proposes itinerary items (flights, hotels, reservations, and the like). The same tools back the in-app assistant. Automated extraction can be imperfect, so you stay in control and can edit or remove anything it creates. We only accept forwarded mail from senders you have approved.

We ask for your permission in the app to send your information to these AI services:

  • Anthropic (Claude). Forwarded email and mail from inboxes you connect, assistant conversations and the files you attach to them, receipts you scan, media you upload, trips you import, and web pages you link. Claude reads them to create and update your itinerary, expenses, packing lists, and todos.
  • TypeSafe (Jev). The sender, subject, and first 2,000 characters of each email in an inbox you connect, to decide whether it is a booking.
  • Voyage AI (MongoDB). The text of your trips, itinerary items, and emails, and the searches you type, turned into embeddings so search can find related things.

How we use your information

We use your information to:

  • Build and maintain your itineraries from the email you forward.
  • Run the in-app assistant and the tools that create and update trip data.
  • Send you the notifications and sign-in messages you ask for.
  • Keep your account secure and prevent abuse.

We do not sell your personal information.

Service providers

We share information with a small set of providers that make the service work: the AI services named above, Google Maps Platform for place search and addresses, an email delivery provider that sends and receives mail on our behalf, and Game Stats AI, which records the pages you view and how much AI processing your account uses so we can understand usage and costs. These providers may only use the data to provide their service to us.

Analytics and cookies

We use Google Analytics to understand how Whimbrel is used so we can improve it. Analytics cookies are off by default. The first time you visit, a banner lets you accept or decline them, and analytics only runs after you accept. You can change your mind by clearing site data in your browser, which brings the banner back.

We also use Ahrefs Web Analytics to count visits. It sets no cookies and collects only anonymous, aggregate statistics, so it runs without asking through the banner.

The iOS and Android apps load neither Google Analytics nor Ahrefs and set no analytics cookies, so they show no banner.

Retention

We keep your account and itinerary data for as long as your account is active. When you delete a trip, an item, or your account, the associated data is removed from the app. Some records may persist briefly in backups before they expire.

Your choices

  • Manage which senders may forward to your address in your settings.
  • Edit or delete any trip, itinerary item, todo, or media at any time.
  • Revoke connected apps and assistants from your settings.
  • Accept or decline analytics cookies from the banner shown on your first visit.
  • Delete your account from Settings at any time. Trips you shared with other travelers pass to one of them.

Contact

If you have questions about this policy or your data, reach out to the Whimbrel team and we will help. See also our Terms of Service.