Privacy

What we keep, and what we don’t.

Last updated: August 2026. This describes what the app actually does today — not a generic template. Under an airline’s brand, that airline is the controller for the passenger relationship, and its own notice applies alongside this one.

No account

No sign-up, no password, no single sign-on. The app opens on a trip you add yourself, or a booking reference from an airline. We don’t create a profile.

What lives on your device

Your trips — airports, dates, hotel, route, document results — stay in a local database on your phone, not our servers. Saved places and categories live there too. A few preferences (theme, onboarding, passport confirmation) are stored the same way.

What Explore sends, and what it doesn’t keep

A question sends your trip’s city, your filters, and the question — nothing more. Nothing is stored on our servers, and nothing carries over: close the app, or switch trips, and the chat starts clean. Bookmarking saves the answer to your device, like any other place.

What reaches our backend

Document checks send your arrival and departure city plus nationality. Hotel routing sends the airport and hotel address. Weather sends the destination and arrival date. Each call answers one question — none carries your name, email or booking code.

Sources

  • Travel documents and entry requirements come from Sherpa — not generated by a language model.
  • Routing and weather come from third-party services, each with its own privacy policy.
  • Campaigns and offers are defined by the airline. The app surfaces them; it can’t invent one.
  • Destination suggestions resolve to a search, never an asserted link.

What we don’t store as your identity

No full name, passport number, seat number or booking code is kept as a profile. A document check may echo back requirement text, but we never ask for or store a passport number or a scan.

Sponsored suggestions

When a chat answer surfaces a campaign, we log an anonymous event — which campaign, shown or tapped, and a random device id. No name or email attached.

Deletion

Delete your saved trips and places anytime, from inside the app. A few preference flags persist until you uninstall.

Cohort selection

When an airline invites passengers to a pilot, the selection happens inside its own systems. coTraveler never receives age, nationality or any other attribute used to build that list.

Contact

Questions about this page: LinkedIn