Privacy Policy

Last updated: August 30, 2026

This is a working draft and not legal advice. Review it with counsel before you rely on it.

Whimbrel helps you turn forwarded booking confirmations into an organized travel itinerary. This policy explains what we collect, how we use it, and the choices you have. It applies to the Whimbrel web app and its companion mobile apps.

Information we collect

We collect the information needed to run your account and build your itineraries:

  • Account details. Your email address and a hashed password, or the sign-in links you request instead of a password.
  • Forwarded email. The booking confirmations you forward to your personal Whimbrel address, including their full contents and any attachments.
  • Itinerary data. The trips, legs, itinerary items, notes, todos, and media that you or the assistant create from your email or add by hand.
  • Connected apps. Tokens for third party apps and assistants you authorize to reach your itinerary through our tools.
  • Profile. Optional details such as an avatar, a home location, and your notification and appearance preferences.
  • Technical data. Basic session information such as your IP address and browser, kept to keep your account secure.

How forwarded email is processed

When you forward a booking, we pass the message to a large language model that reads it and proposes itinerary items (flights, hotels, reservations, and the like). The same tool layer backs the in-app assistant. Automated extraction can be imperfect, so you stay in control and can edit or remove anything it creates. We only accept forwarded mail from senders you have approved.

How we use your information

We use your information to:

  • Build and maintain your itineraries from the email you forward.
  • Run the in-app assistant and the tools that create and update trip data.
  • Send you the notifications and sign-in messages you ask for.
  • Keep your account secure and prevent abuse.

We do not sell your personal information, and we do not use your itineraries to advertise to you.

Service providers

We share information with a small set of providers that make the service work, including a large language model provider that processes forwarded email and assistant requests, and an email delivery provider that sends and receives mail on our behalf. These providers may only use the data to provide their service to us.

Retention

We keep your account and itinerary data for as long as your account is active. When you delete a trip, an item, or your account, the associated data is removed from the app. Some records may persist briefly in backups before they expire.

Your choices

  • Manage which senders may forward to your address in your settings.
  • Edit or delete any trip, itinerary item, todo, or media at any time.
  • Revoke connected apps and assistants from your settings.
  • Delete your account, which removes your itineraries from the app.

Contact

If you have questions about this policy or your data, reach out to the Whimbrel team and we will help. See also our Terms of Service.