Privacy Policy
1. Who we are & what this covers
Anchor is an individual-first group trip planner. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have.
The company responsible for your information (the "controller") is Baydo Labs LLC, a Virginia limited liability company ("Baydo Labs", "we", "us", "our"). We operate the Anchor Trip mobile application and the anchortrip.app website (together, "Anchor" or "the Service").
This policy applies to the Anchor app and our website, and to the emails and other messages we send to run the Service. It does not apply to third-party services you reach through Anchor (for example, a booking website whose link you paste), which have their own privacy practices. If you do not agree with this policy, please do not use the Service.
2. Information we collect
We collect only what we need to run a trip planner. We group the information into categories below, and note where it comes from: information you provide, information collected automatically when you use the app, and information we receive from co-travelers who invite or add you.
Information you provide.
- Account identity — your email address, a display name, and (optionally) an avatar image. This is how you sign in and how co-travelers recognize you.
- Trip content you create — trips, itineraries, places, notes, dates, and tasks you add. This is the substance of your plans.
- Cost entries — amounts, currency, and the payer you record for an expense. Anchor records these figures so a group can keep track of who paid for what; Anchor does not process payments, move money, or settle balances, and we do not collect card, bank-account, or other payment-instrument details.
- Receipts and booking documents — receipt images or PDFs you upload, and the booking details our AI extracts from them (see AI & automated processing).
- Place locations — coordinates for the places you add to an itinerary (for example, a hotel or restaurant), so we can show them on a map. These are the coordinates of the places you choose; Anchor does not collect your device's GPS or precise real-time location.
- Managed persons — people you add to a trip who do not have their own account (for example, a family member or child you are planning for). These are stored as data you control within your trip, not as separate user accounts. Please add information about others only if you are entitled to, and keep it limited to what the trip requires.
- Messages to us — the contents of emails or support requests you send, so we can respond and keep records.
Information collected automatically.
- Limited technical and device data needed to operate the app and keep it secure — for example, app version and device/operating-system type, coarse diagnostic and error information, and network information such as the IP address your device presents when it connects to our servers. We use this to deliver the Service, fix problems, and protect against abuse. The app currently ships with no analytics, advertising, or tracking SDKs (see Cookies, analytics & tracking).
Information from co-travelers.
- If someone invites you to a trip or adds you as a managed person, we may receive the email address or name they use to reach or identify you, so we can deliver the invitation and place you in the trip. Anchor is a group planner, so within a trip some information is shared among co-travelers — see Sharing within a trip.
3. How we use information
We use the information described above to:
- Provide the Service — create and sync your trips, itineraries, places, notes, tasks, cost entries, and receipts across your devices and with the co-travelers you plan with.
- Authenticate you — sign you in and keep your account secure using Sign in with Apple or an emailed one-time verification code (see How information is shared for the providers involved).
- Power AI features — read receipts and pasted links to extract booking details, titles, and place coordinates so you do not have to type them in (see AI & automated processing).
- Communicate with you — send transactional messages such as sign-in codes and trip invitations, respond to support requests, and send occasional service notices (for example, a material change to this policy). We do not send marketing or promotional messages, and we run no advertising.
- Keep Anchor safe and working — operate, maintain, debug, and secure the Service; detect, prevent, and respond to fraud, abuse, and security incidents.
- Comply with law — meet our legal obligations, enforce our terms, and establish, exercise, or defend legal claims.
We do not currently use your trip content, receipts, or cost entries for advertising, and we run no advertising. Our AI features process this content on Amazon Bedrock, which acts as our processor; under our current agreement with Amazon Web Services, your content is not used to train the underlying models (see AI & automated processing).
4. AI & automated processing
Anchor uses AI to save you typing. When you upload a receipt or paste a link or place text, we use AI models to extract booking details (such as dates, amounts, and place names), generate titles, and determine place coordinates.
These models run on our own infrastructure via Amazon Bedrock, which acts as our processor. Under our agreement with Amazon Web Services, your content is not used to train the underlying models and is not shared with model providers for their own purposes. Some extraction runs directly on your device using Apple Intelligence, so that content may be processed locally without leaving your device.
Anchor's AI features are assistive. They help fill in and organize your plans, and you can review and edit what they produce. We do not use these features to make decisions that produce legal or similarly significant effects about you without human involvement.
5. De-identified & aggregate data
Some data we hold or derive is de-identified or aggregate — that is, it cannot reasonably be used, alone or in combination, to identify you. Under this policy, de-identified and aggregate data is not treated as personal data.
We may create and use de-identified and aggregate data to operate, analyze, and improve the Service — for example, to understand how features are used and to make Anchor work better. We maintain such data in a de-identified form and do not attempt to re-identify it.
7. Sharing within a trip
Anchor is a group trip planner, so some information is shared with the people you plan with. When you are part of a trip, your co-travelers on that trip can see:
- your display name and avatar, so they know who is planning;
- trip content in that trip — itineraries, places, notes, dates, and tasks; and
- cost totals you record in that trip, so the group can track shared expenses.
You join a trip by invitation — a co-traveler invites you, and we deliver the invitation by email (sent via Amazon SES). Please share within a trip only what you are comfortable letting your co-travelers see. Once information is shared with a trip, co-travelers may retain their own copies or notes independently of Anchor, and we cannot control what they do with what they have seen.
8. Paid features & billing
If you purchase a subscription or other paid feature, your payment is processed by the app store (Apple or Google) under their terms. We receive limited transaction and subscription-status information — such as whether a purchase completed and whether a subscription is active — but we do not receive your full payment-card details.
9. Affiliate links
Some outbound links may be affiliate links. Following one may share standard referral or click information with the destination merchant, whose own privacy policy governs how it handles that information. We do not disclose your Anchor account identity to the merchant for this purpose.
11. Data retention
We keep your personal data while your account is active and as long as we need it to provide the Service. You can ask us to delete your account and personal data at any time (see Your privacy rights).
When you delete your account, we crypto-shred your personal data: we destroy the per-user encryption key that protects your content, which makes your personal content permanently unrecoverable. We keep a minimized, de-attributed audit record of the deletion where we need it for security, legal, or accounting purposes. Content that other travelers on a shared trip still rely on is preserved but de-attributed from you, so the group's trip continues to work while your personal identity is removed from it.
Some copies persist briefly for operational resilience: our automated backups age out within a bounded window (about seven days), after which the deleted data is no longer present in them. We may also retain limited information for longer where the law requires it or to establish, exercise, or defend legal claims.
12. Security
We work to protect your information with safeguards appropriate to its sensitivity, including:
- Encryption in transit and at rest for your data;
- Per-subject key envelope encryption, so each user's content is protected by its own key (the same design that makes crypto-shredding on deletion possible); and
- Least-privilege operator access that is masked by default and audited, so our team sees only what is necessary and access is logged.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the appropriate authorities as required by law.
13. Your privacy rights & how to exercise them
Wherever you live, you can ask us to:
- Access the personal data we hold about you, and know how we use and share it;
- Correct inaccurate personal data;
- Delete your personal data;
- Obtain a portable copy of the data you provided, in a usable format; and
- Opt out of any sale or sharing of personal data or targeted advertising — although, as noted, we do none of these.
To make a request, email hello@anchortrip.app. You can also delete your account from within the app. We will not discriminate against you for exercising your rights.
We will confirm your request and respond within 45 days. If we need more time (up to an additional 45 days) because your request is complex, we will let you know. We may need to verify your identity before acting, to protect your account — typically by confirming control of the email on your account. An authorized agent may submit a request on your behalf where the law allows, subject to verification.
If we decline a request, we will explain why. You may appeal that decision by replying to our response or emailing hello@anchortrip.app with the word "Appeal." We will inform you of the outcome of any appeal within the time the applicable law requires.
14. Your U.S. state privacy rights
Depending on your state of residence, you may have additional rights under a comprehensive state privacy law. We honor these rights for all users to whom they apply.
Virginia residents (Virginia Consumer Data Protection Act). If you are a Virginia resident, you have the right to confirm whether we process your personal data and to access it; to correct inaccuracies; to delete it; to obtain a portable copy; and to opt out of targeted advertising, the sale of personal data, and certain profiling. We do not sell personal data, do not use it for targeted advertising, and do not engage in profiling that produces legal or similarly significant effects. To exercise these rights, email hello@anchortrip.app; we will respond within 45 days. If we decline, you may appeal to us as described above. If you are unsatisfied with the outcome of your appeal, you may submit a complaint to the Virginia Attorney General at oag.state.va.us.
California, Colorado, Connecticut, Texas, and other states with comprehensive privacy laws. If you are a resident of California, Colorado, Connecticut, Texas, or another state with a comprehensive consumer privacy law, you have the same core rights described above — to access/know, correct, delete, and obtain a portable copy of your personal data, and to opt out of the sale or sharing of personal data and of targeted advertising. To reiterate: we do not sell or share your personal information, we run no targeted advertising, and we honor Global Privacy Control signals on our website. To exercise your rights, email hello@anchortrip.app. We respond within the time your state's law requires (generally 45 days) and offer the appeal or complaint process your state provides. California residents also have the right not to receive discriminatory treatment for exercising their rights; because we do not sell or share personal information, we do not offer financial incentives for your data.
15. Children's privacy
Anchor is intended for people 13 years of age and older. If you are under 18, you may use Anchor only with the consent and involvement of a parent or legal guardian. Anchor is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
If a child adds themselves as a user contrary to these terms, or if you believe a child under 13 has provided us personal information, please contact hello@anchortrip.app and we will delete it. Note that a "managed person" you add to a trip (which may include a child) is stored as data you control, not as a child's own account.
16. International users & where your data is processed
Anchor is operated from the United States, and we store and process personal data on servers located in the United States (AWS US regions). If you access Anchor from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your country. By using the Service, you consent to this processing in the United States.
17. How the Service may grow
Anchor is developing. As the Service grows, we may add features — such as paid subscriptions, an AI enrichment agent, affiliate links, or partnerships — that change what information we collect, use, or share. When we do, we will update this policy. Where a change materially affects how we use your personal data, we will provide notice and honor your rights before it takes effect.
18. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and version the policy. If a change is material, we will provide advance notice — for example, by email or an in-app notice — before it takes effect.
Changes apply prospectively. Where a change materially affects how we use your personal data, we will obtain your consent or offer you an opt-out as the law requires, and we will not apply the change retroactively to data already collected without that consent. Your continued use of Anchor after an update takes effect means you accept the revised policy for information handled going forward.
19. Contact us
Questions, requests, or concerns about this policy or your personal data? We are happy to help.
- Email: hello@anchortrip.app
- Postal: Baydo Labs LLC, [BAYDO LABS LLC MAILING ADDRESS]
Baydo Labs LLC is the data controller responsible for your personal data under this policy.