Last updated October 22, 2026
In plain language: what we collect, why, and what we don't do with it.
Fingerpost is operated by MXI Ventures LLC, based in Phoenix, Arizona, USA. Questions or requests about your data go to hello@fingerposttravel.com.
An account needs an email address, and nothing else. We don't ask for a phone number, a home address, or a payment method until you're ready to pay for a trip. Signing in works by email link or a 6-digit code: there's no password to create, remember, or lose.
Creating an account and buying a trip requires being 18 or older. A minor can join a trip as a participant or viewer, but only when an adult admin invites them; that admin is responsible for the minor's participation, including their information on the trip.
We save your setup answers as you go, so you can pick up where you left off and, with names removed, so we can improve the questions. Before you sign in, your answers are saved on our server against a random ID kept in your browser as a cookie lasting 7 days. To limit abuse, a one-way scrambled form of your network address is kept with it for up to 2 days. When you sign in with the code we email you, that ID is replaced by your account. Answers from someone who never signs in are deleted after 7 days. If you delete your account, we remove the answers tied to it. Anonymous answers left in another browser expire within 7 days. The notes boxes (health and access needs, other notes, what you'd love), addresses and bookings aren't saved as you go; they're kept only once your trip is set up. Once you've signed in, your other answers are kept until a week after you finish, or for 90 days if you don't, after which it becomes anonymous monthly counts, with no names, no notes and no dates. A trip that is set up but never paid for is removed after 90 days.
When you ask for a sample day we keep your name, email and destination until you ask us to delete them. We only send you marketing email if you ticked the box and then confirm it, or if you've bought a trip, and you can unsubscribe at any time with the link in every such email, or ask us to delete your details by writing to hello@fingerposttravel.com. The place you ask about is sent to our AI provider to plan the sample day; your name and email are not.
Payments are handled by Stripe. Your card details go directly to Stripe, not through our servers, and we never store your card number. We keep the amount, the payment status, the card brand and its last four digits, and the billing country. Stripe uses payment data to help prevent fraud. When you buy a trip, we may also send you occasional emails about Fingerpost, such as offers for your next trip. Every one has an unsubscribe link.
The details of your trip (where you're going, your dates, your interview answers, the plan itself) are stored so we can build and update your plan and so your travel companion can answer you well. They're visible only to you and to whoever you've shared your trip's link with, and each person's role (admin, participant, or viewer) controls what they can see and change.
Photos you add to your journal or scrapbook are stored privately, on Cloudflare's storage. They are not public, not searchable, and not shared with anyone outside the people you've invited to your trip. We remove the location data from photos when you add them, but a video keeps the location it was recorded at, and everyone on the trip can see it. If you order a printed book, the photos in it are used only to make your book.
If you store a booking reference, a ticket code, or a door code in Fingerpost, it goes in a separate, private Documents area, not in your plan. Documents are encrypted at rest, visible only to admins and participants on your trip (not viewers), and are never sent to the AI model, written into logs, or included on a share link.
When you chat with June, your travel companion, your message and your trip's details are sent to an AI model, provided by an AI provider, to write a reply. That's also how your day-by-day plan gets written. Those answers are meant to help you plan and to answer questions about your trip. They are not booking confirmations, and shouldn't be treated as one. Always confirm tickets, reservations, and opening hours through the business or service itself before relying on them.
We don't use your trips, messages, or photos to train AI models, and our AI provider doesn't use them to train its models either.
We use a small number of outside services to run Fingerpost. Our hosting, database, mail and monitoring providers process your information only to run the app for us. Stripe is the one exception: it handles payment details under its own privacy policy (see below).
We don't sell your information, your trip details, or your photos to anyone, for any reason. We don't run ads inside Fingerpost, so there's no reason to.
You can delete things yourself in the app:
When you delete your account, we remove your name, email address and phone number from our records. We also delete:
Trips where you were the only traveler are deleted too. Some things stay with a shared trip, shown as "A former traveler", because the other travelers' records depend on them: your chat messages, the expenses you added, and the booking documents you stored. Other travelers' own messages that mention you, and June's replies, stay with the trip as well. Answers a trip's admin typed about you during the trip's setup stay with that trip. Write to us and we'll remove them. If you sign in again later with the same email, you'll start with a new, empty account.
If you turn on reminders, we send them through Apple, Google, or Mozilla's push notification services, to the device you turned them on for. You can turn them off any time.
To ask a question about this policy, see what we have on file for you, or ask us to delete your account, write to hello@fingerposttravel.com.
We may update this policy as the product changes. We'll update the date at the top of this page when we do.
