TripFit

BetaTripFit is currently in beta. Flight information may use test or limited provider data. Lodging results may include deterministic demo data until live lodging access is activated. How we price

Privacy Policy

This policy explains what TripFit stores when you search for a trip, how long it is kept, and how you can get it back or have it removed.

Last updated 29 July 2026

Draft for review — this policy is in plain-language draft form pending attorney review before general release.

Who we are

TripFit is an affordability research tool operated by the TripFit team. TripFit is an affordability research tool. TripFit is not a travel agency, seller of travel, merchant of record, or booking provider, and does not take payment or issue tickets or reservations.

What we collect

  • Account data: your email address and, if you set one, a display name.
  • Search data: origin and destination airports, dates, traveller counts, budget, and the requirements you set.
  • Traveller preferences: the defaults you choose to save, such as home airport and cabin preference.
  • Pricing evidence: the offers, fees, and Price Truth ledgers produced by a search.
  • Operational data: irreversible hashes used for abuse prevention, and provider request audit records that contain no name or email.

We do not collect passport or identity documents, payment card data, or traveller media, because TripFit never books or takes payment.

Guest searches

If you search without an account, we hold your search under a random, opaque session identifier stored in your browser tab. It is not derived from your IP, device, or any personal detail, and guest searches are deleted automatically after 24 hours unless you sign in and save them.

How long we keep it

  • Guest searches and their results: 24 hours.
  • Your saved searches and saved trip options: until you remove them or delete your account.
  • Provider request audit records: 30 days, then deleted.
  • Abuse-prevention counters: 24 hours, stored as irreversible hashes.

Providers and processors

Flight data is retrieved from Duffel in test mode. Lodging results are currently deterministic demo data. Accounts, storage, and email delivery run on our managed cloud backend. We never send provider access tokens or secrets to your browser.

Your choices

  • View and edit your display name and traveller preferences in your account.
  • Request a machine-readable export of everything we hold for you.
  • Delete your account, which removes your profile, preferences, saved items, and sign-in account.

Both controls live on your account page. For anything else, write to privacy@tripfitai.com or support@tripfitai.com.