Privacy policy

Who we are

Itchy Feet is run by Latham Technology Ltd, registered in England and Wales (company no. 17539566), 27 Park Lane, Chippenham, SN15 1LT, England. We're responsible for your information under UK data protection law.

For anything about your information, email hello@getitchyfeet.com.

What we keep, and why

Your account

Your email address, and the name, home time zone, language and profile photo you choose. The devices you're signed in on (their type and when they were last used), so you can see them and sign them out. The public half of your passkeys and device keys, which let you sign in and confirm it's you with your fingerprint or face; the private half never leaves your device. If you set one up, a scrambled form of your recovery phrase that can check it but can't be turned back into it, and the email addresses of the people you trust to help you get back into your account.

We need these to run your account.

Your trips

The flights, trains, buses, ferries, taxis, stays, activities, reminders, notes, diary entries, clocks and calendars you add, and the people you travel with that you add by name, such as a child. They don't have accounts.

We need these to show them back to you and to send the reminders you ask for.

Your vault

The photos and PDFs of documents you add, such as passports, visas, insurance and tickets, the details you type in with them, such as a passport number or expiry date, and your visa application answers. Each document is encrypted with its own key, and those keys are encrypted with a master key kept separately from them. Our servers can decrypt them to show them to you, and only do so after you've confirmed it's you with your fingerprint, face or phone passcode.

Sharing your location

Only when you turn it on. We keep your latest position, roughly where that is, and its time zone, and nothing older: each new position replaces the last. Pausing clears it, and stopping deletes it. The people you send the link to see it until it stops or you stop it.

We use it because you've asked us to, and you can stop at any time.

Links you share

When you share a document or your location, we keep the link, how long it lasts, whether it needs a password (in a scrambled form), and how often it's been opened, so we can tell you when it's first opened. If you email a link, we keep the address you sent it to.

Emails

We email you sign-in links and codes, the reminders and alerts you set up, and messages about your account's safety. We email other people only when you ask us to: the links you share, and, if you set it up, the people you trust when you miss a check-in or need help getting back into your account.

If you tick the box to hear about travel offers from our partners, we'll email you those too. You can turn it off at any time, and we don't give partners your details.

Reading bookings for you

When you scan a booking, the screenshots, photos or PDF you choose are sent to Anthropic, whose AI model, Claude, reads the details for the form. We don't keep the files once they've been read, and Anthropic doesn't use them to train its models. Scanning is only ever started by you, and you can always type a booking in instead.

On your phone

The apps keep a copy of your trips, notes and reminders on your phone so they work without the internet, and a list of changes waiting to upload. Your vault documents are kept there too, encrypted, and open only with your fingerprint, face or phone passcode. You can turn that off in the vault. Everything the app has stored is deleted when you sign out, when you delete your account, or if your session is signed out from another device. It's never included in your phone's backups.

Who else handles your information

We use these companies to run Itchy Feet. They only use your information to provide their service to us.

Amazon Web Services

Hosts our servers and stores your account and files, in Ireland.

DreamHost

Sends our emails, so it handles your email address and the emails themselves.

Anthropic

Reads the bookings you choose to scan, as above.

Apple and Google

Deliver notifications to the apps, including a "something changed" message that tells your other devices to update. Those messages never include what changed. We keep each device's notification address so we can reach it.

Google Fonts

The website's typefaces load from Google, which sees your device's IP address when they do.

OpenStreetMap

Map pictures on a shared location page load from OpenStreetMap's servers, which see the viewer's IP address.

Two services get nothing about you: Open-Meteo, which turns the place names you type into time zones and weather, and ExchangeRate-API, whose daily exchange rates we fetch for everyone at once.

Some of these companies are outside the UK. Where they are, we rely on the UK's adequacy regulations or the standard contractual clauses approved for transfers, so your information stays protected to the UK standard.

Cookies and your browser

We use only the cookies Itchy Feet needs to work: one that keeps you signed in, one while you're getting back into your account, and one that remembers you've typed the password for a shared link. Your browser also remembers your calendar view and filters on your own device. There are no advertising or analytics cookies.

How long we keep it

For as long as you have an account, apart from what you delete sooner, and your location, which is kept only as described above. When you delete your account, your account, trips, notes, diary, vault documents and their files are deleted straight away. Sign-in links, codes and confirmation checks expire within minutes.

Your rights

You can ask for a copy of your information, have it corrected, have it deleted, receive it in a form you can take elsewhere, object to how we use it, and withdraw any permission you've given. Much of this you can do yourself in Itchy Feet, including deleting your account. For the rest, email hello@getitchyfeet.com and we'll reply within a month.

If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.

Children

You need to be 13 or over to have an Itchy Feet account. You can add children who travel with you by name, and add their documents to your vault; they don't have accounts of their own.

Changes

If we change how we use your information, we'll update this page and its date. If the change is important, we'll email you before it takes effect.