Privacy Policy

Luggage Logger is built and run by Thomas Williams, based in the United Kingdom (“we”, “us”). We are the data controller for the personal data described here. You can reach us any time at support@luggagelogger.com.

Luggage Logger helps touring crews and travellers keep track of equipment across multi-stop trips. This policy explains what we collect, why, where it's kept, who can see it, and how to get a copy of it or have it deleted.

• We keep what you put into Luggage Logger and what we need to run your account.
• Your data is stored in the EU, in Ireland, by our database provider.
• Only the people you share a profile or trip with can see it. Nothing is public.
• No ads, no tracking, no third-party analytics, and we never sell your data.
• You can delete your account in the app at any time, and your data goes with it.

Your account. Your email address, the display name you choose and a password, which our sign-in provider stores only as a secure hash: we never see it. We also keep when your account was created and when you last signed in. Each signed-in device has a session that records its IP address and the type of app or browser, to keep your account secure; the session goes when you sign out of that device or delete your account.

What you put in. Your assets and cases (names, descriptions, serial numbers, weights, dimensions, values and photos); packs; profiles, with their colour and logo; trips and stops (venues, hotels, flights, booking references, Wi-Fi details, notes and crew names); logs of which cases were logged, where, when and by whom; bag tags; team notes; documents you upload; reminders; and folders.

Sensitive things are yours to add, and to protect. Some people photograph airline bag tags (which can show a name and booking details) or travel documents. Photos are stored privately (see Security), but please only upload what you're comfortable keeping in a cloud service. Photos you add are re-encoded before upload, which strips hidden details such as where they were taken; files you upload as documents are stored as they are.

Purchases. If you subscribe to Luggage Logger Pro, Apple takes the payment; we never see your card or Apple Account details. Apple tells our server which plan you have, when it renews or ends, and a transaction number, and we keep these with your account so Pro works wherever you sign in. If you sign up with a referral code, we record whose code it was; the app shows the person who referred you only how many people have joined with their code. If you share your own referral link, the page it opens shows your display name to anyone who has the link.

Location. If you allow location access, the apps use your position on your device to show where you are on maps. If you tap Current Location while editing a stop, the place name for your position (or its coordinates, if no name is found) is filled in, and when you save, it's stored with that stop like any address you type, so people the trip is shared with can see it. We don't track your location in the background or keep a history of where you've been.

Notifications. Reminders you set up (stop reminders, a hand-luggage reminder when you land, a luggage reminder before you arrive) are scheduled on your device and don't pass through us. If you allow notifications, we may also send you notices about the service, such as an outage or a problem that affects your data, and, only if you've opted in, occasional news and offers. In the iPhone app, notifications are shown by the app on your device. On the website, if you allow browser notifications, your browser gives us a push subscription that we keep with your account for that purpose only. We may also post occasional announcements inside the app. You can turn notifications off at any time in your device's or browser's settings.

Master Tour. If you connect Master Tour (Eventric), your API key and secret are kept in your device's secure Keychain, not on our servers. When you import or refresh a tour, they're sent with that request through our server to Master Tour, which returns your tour data. We keep a short record of each import: the tour, how many stops were added or changed, and any errors.

Flight details. If you view a flight's live details, the flight number and date (never your name or account) are sent from our server to AeroDataBox, our flight-data provider. Results are cached on our server by flight number and date.

AI connector (optional). If you add Luggage Logger to an AI assistant such as Claude or ChatGPT, you sign in as yourself and approve it on our consent screen. The assistant can then read and change what your account can access, when you ask it to. We share nothing with it except at your request, and what it receives is also covered by that provider's privacy policy. You can remove the connector in your assistant's settings at any time.

On your device only. Some features run entirely on your device and send nothing to us: reading airline bag tags from a photo, Smart Import of a pasted or photographed itinerary, and search. Siri requests are handled by Apple.

When you email us. We keep the conversation, and anything you attach, for as long as we need it to help you.

What we don't do. No advertising, no advertising identifiers, no third-party analytics or tracking tools, and we never sell your data, in the apps or on this website. The web app uses only the strictly necessary cookies that keep you signed in. It also keeps your preferences, and an offline copy of pages you've opened, in your browser's storage on that device, so it keeps working on a poor connection.

To run the service: keeping your assets, packs and trips in step across your devices, sharing them with the people you invite, making the documents you ask for (pack lists, day sheets, PDFs), sending the emails you need (your sign-up code and password resets) and the notifications described above, and answering you when you get in touch.

We also look at overall statistics about how Luggage Logger is used, such as how many accounts were created each week, how many were active recently, and how many assets, packs and trips exist. They're built on our own systems from dates and counts the service already keeps (when an account was created or last signed in, and when its records last changed). We use them to keep the service running well and to decide what to build next. Only we see them, and they aren't shared or used for advertising.

We don't use your content for advertising, to profile you, or to train AI models.

We use your account details and content to provide the service you signed up for (contract). We keep security logs, prevent abuse and produce overall usage statistics because we have a legitimate interest in running a safe, reliable service; you can object by emailing us. Location, camera, photos and notifications are used only after you allow them in your device's settings, and you can withdraw that at any time. News and offers are sent only with your consent, which you can also withdraw at any time.

Luggage Logger is built for crews. When a profile or trip is shared with someone, they can see what's inside it according to the role they're given (viewer, logger, editor or admin), including schedules, notes, asset details, photos and any Wi-Fi details saved on stops. People in a shared profile or trip can see each other's display names. Only the owner and admins of a profile or trip see its member list, which includes email addresses.

Nothing is shared unless you, or an admin of a profile or trip you're in, invite someone. Nothing is public, and there are no public profiles.

A copy of your data is kept on your own devices so the apps work offline. On our side, these services are involved:

• Supabase: our database, sign-in and file storage. Your account and everything in it are stored in the EU, in Ireland.
• Vercel: hosts this website and the web app, and receives Apple's subscription notices for us.
• Apple: App Store payments, push notifications, Apple Maps for maps and place searches in the apps, and Siri.
• Google: our email (Gmail). Sign-up codes and password emails are sent through it, and messages you send us arrive there.
• AeroDataBox (through RapidAPI): flight details, as above. It gets flight numbers and dates only.
• OpenStreetMap's Nominatim: address suggestions in the web app only. It receives the text you type and your IP address.
• Master Tour and your AI assistant: only if you connect them, as above.

Supabase and Vercel process data on our instructions and don't use it for their own purposes. The others receive only what's described here, for the purpose described, under their own privacy policies. Our hosting providers keep technical logs, including IP addresses, for security and troubleshooting, and delete them automatically after a short period. Some of these providers are based in, or reach data from, the United States and other countries; where your data leaves the UK, it's protected by the safeguards UK law requires, such as adequacy regulations or standard contractual clauses.

All traffic is encrypted in transit (TLS). Every database table is protected by row-level security, so the server only returns data your account is allowed to see. Photos and documents are kept in private storage, not on the public web: photos open only for you and the people you share them with, and documents through private links given only to the members of that profile. On Apple devices, your sign-in is kept in the secure Keychain. No system is perfectly secure, so please use a strong password you don't use anywhere else.

We keep your data for as long as you have an account. You can delete individual assets, photos, trips and profiles at any time in the app.

Delete your account in the iPhone app: tap the profile button at the top left, then Settings, then Delete Account under Danger Zone. On the web: Settings › Danger Zone › Delete Account. Your account, everything it owns, its sign-in sessions, and the photos and files you uploaded are deleted from our servers straight away. Copies in our database provider's backups expire within 30 days. Things you added to a profile or trip that belongs to someone else, such as logs on their trips, stay with it but are no longer linked to you. If you can't get into the app, email us from your account's address and we'll delete it for you.

Deleting your account doesn't cancel a Pro subscription; cancel it in your Apple Account settings (see Support). Apple keeps its own record of your purchases.

Our sign-in system also keeps a security log of account events, such as sign-ins and password changes, which includes your email address. It isn't cleared automatically when an account is deleted; email us and we'll remove your entries.

Under UK data protection law (and EU law, if you live in the EU), you have the right to:

• get a copy of your data, free of charge: email us and we'll send it in a common format (CSV export inside the app is part of Pro);
• have it corrected (you can edit most of it yourself in the app);
• have it deleted (see above);
• object to how we use it, including for statistics, or ask us to limit it;
• take it to another service;
• withdraw your consent at any time, where we rely on it.

Email support@luggagelogger.com and we'll respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or the data protection authority where you live, though we'd appreciate the chance to put things right first.

Luggage Logger is a professional tool and isn't meant for children under 16. We don't knowingly collect data from them.

If we make material changes, we'll update this page and the date at the top. Significant changes will also be flagged in the app.