This policy explains what Iter collects, why, who it goes to, and what you can do about it. It applies to the Iter mobile app, the website at itertravelapp.net, and any email we send you. Iter is operated by Iter Travel App LLC, 276 Fifth Avenue, Suite 704, PMB 70186, New York, NY 10001, USA. Privacy questions go to privacy@itertravelapp.net.
Short version. Iter learns your travel taste from how you answer onboarding and use the app, and uses that to plan trips for you. Your Taste Profile is yours: you can see it, reset it, export it and delete it. We do not sell your personal data. We do not collect passport, traveler or payment details, because bookings happen with our partners, not with us. We use a small set of vendors to run the app and to measure our marketing, and each one is named below.
1Who this covers
Iter is for adults. You must be 18 or older to create an account. We do not knowingly collect data from anyone under 18; if you believe we have, email privacy@itertravelapp.net and we will delete it.
2What we collect
You give us. Your name, email address, and sign-in provider (email, Apple or Google). Your onboarding answers: travel style, energy, pace, vibe, who you travel with, where you like to stay, destinations you love, and your home region. Anything you type into Iter’s planning chat. Trips you create, including dates, destinations, itinerary edits, wishlists, and the names of travel companions you add. Support messages. Your email marketing choice.
Collected as you use Iter. Taste signals: which options you chose, how long each answer took, how much of a video you watched, which travel cards you opened or saved, and which itinerary items you kept or changed. Device and app data: device model, operating system, app version, language, time zone, a device identifier, push-notification token, crash reports, and app-usage events. Approximate location: the city you are in, when you allow location access, derived from your device and kept at city level. Advertising identifier: on iOS only after you allow tracking in the system prompt; on Android as permitted by your device settings.
Before you have an account. Onboarding runs before sign-up. During it we hold your answers under a random anonymous ID. When you create an account the anonymous ID is linked to it; if you never do, the anonymous record is deleted after 30 days.
We do not collect. Passport or ID numbers, traveler names for bookings, payment card details, contacts from your phone, precise GPS coordinates, or your sex, gender or date of birth. Please do not enter health, religious, political or other sensitive details in the planning chat; Iter does not need them.
3Why we use it
| Use | Data involved | Basis, where a legal basis is required |
|---|---|---|
| Build your Taste Profile and plan trips | Onboarding answers, taste signals, chat, trips | Performance of our contract with you |
| Improve Iter’s recommendations and its own models | Taste signals, chat, itinerary edits, de-identified where possible | Legitimate interest; you may object |
| Run, secure and debug the app | Device data, crash reports, logs | Legitimate interest |
| Send trip and account notifications | Email, push token | Performance of contract |
| Send marketing email | Email, only with your separate opt-in | Consent; unsubscribe any time |
| Measure whether our advertising works | Install, registration and app-open events; advertising ID with permission | Consent for tracking; legitimate interest for aggregate measurement |
| Meet legal obligations and defend claims | Account and consent records | Legal obligation; legitimate interest |
4Who receives it
We share personal data only with vendors that process it for us under contract, and with partners you choose to book with. We do not sell personal data. We do not share your Taste Profile, chat or trip contents with advertising companies.
| Vendor | Purpose | Location | Data |
|---|---|---|---|
| Amazon Web Services | Hosting, storage, backups | Sweden, USA | All app data |
| Google Firebase (Analytics, Crashlytics, Messaging) | App analytics, crash reports, push | USA | Device data, usage events |
| Google Maps and Places, Geoapify | Place search and maps | USA, Germany | Search text, approximate location |
| Anthropic | AI chat model | USA | Chat text, trip facts, taste summary; no account identifier; not used to train models |
| OpenAI | AI planning model | USA | Trip facts, taste summary; no account identifier; not used to train models |
| SerpAPI | Flight and hotel price search | USA | Route, dates |
| Viator, Duffel, LiteAPI | Experience, flight and hotel listings | USA, UK | Route, dates, city; no identifier |
| Pexels | Destination images | USA | Destination names |
| Meta | Advertising measurement | USA | Install, registration and app-open events; advertising ID only with tracking permission |
| AppsFlyer | Install attribution | USA, Israel | Install and registration events |
| SendGrid, Twilio | Transactional email and SMS | USA | Email, phone, message content |
| Apple, Google | Sign-in, app distribution | USA | Sign-in token |
We also disclose data when the law requires it, to protect Iter or its users from fraud or harm, and to a successor if Iter is sold, merged or reorganized, in which case this policy continues to apply.
5Booking partners
When you tap through to book a flight, hotel or experience, you leave Iter and deal directly with Viator, the airline, the hotel provider or another partner. That partner collects your traveler and payment details under its own privacy policy. Iter receives confirmation that a booking was made and, for some partners, a commission. We do not receive your card details or passport information. Links to partners may carry the destination, dates and a partner reference so the partner can credit the referral; they do not carry your name or account identifier.
6Cookies and tracking on the website
The website uses Google Tag Manager to load analytics and advertising measurement tags. Details, and controls where required by law, are in the Cookie Notice at itertravelapp.net/cookies. The app does not use cookies; its tracking is described in Sections 2 and 4.
7Your choices and rights
Everyone, wherever you live, can:
- See and edit your account and Taste Profile in Settings.
- Reset your Taste Profile in Settings, which erases all taste signals and starts fresh.
- Export your data as a file from Settings.
- Delete your account in Settings, or at itertravelapp.net/delete-account. Deletion erases your account, Taste Profile, chats, trips and wishlists within 7 days, and from backups within 30 days.
- Turn off location, notifications and, on iOS, tracking in your device settings.
- Unsubscribe from marketing email with the link in any message.
- Object to our use of your data for improving Iter’s models by emailing privacy@itertravelapp.net.
- Ask us anything about your data. We answer within 30 days, free of charge, and you may appeal our decision by replying to it.
We honor browser Global Privacy Control signals on the website. We treat “Do Not Track” signals the same way.
US state residents. Residents of California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with privacy laws have rights of access, correction, deletion, portability and to opt out of sale, sharing and targeted advertising. Iter does not sell personal data. Meta and AppsFlyer measurement may count as “sharing” for cross-context advertising under California law; you opt out by declining tracking on your device or emailing privacy@itertravelapp.net. We do not use your data for profiling that produces legal or similarly significant effects. We will not discriminate against you for exercising any right.
Residents of Canada, Australia, New Zealand, Singapore, Mexico, Argentina and Chile. You have the rights of access, correction, deletion and complaint under your national law. Contact privacy@itertravelapp.net first; if unsatisfied, you may complain to your national privacy authority.
European Economic Area, United Kingdom and Switzerland. Iter is not offered in these regions. If you use Iter there anyway, GDPR and UK GDPR rights apply as described above, and you may complain to your supervisory authority.
8How long we keep it
| Data | Kept until |
|---|---|
| Account, Taste Profile, chats, trips, wishlists | You delete your account, then 7 days |
| Inactive accounts | 24 months without sign-in, then a warning email, then deletion 30 days later |
| Server and application logs, crash reports | 90 days |
| Analytics and attribution events | 14 months |
| Support messages | 12 months after the ticket closes |
| Marketing list after unsubscribe | A suppression entry only, so we never email you again |
| Backups | 30-day rolling; deleted data leaves backups within 30 days |
| Consent records (terms version, timestamp) | 3 years after account deletion |
9Security
Data travels over encrypted connections and is stored encrypted at rest. Passwords are hashed. Access to production data is limited to two named people and protected by multifactor authentication. No system is perfectly secure; if a breach affects your data we will notify you and the authorities as the law requires.
10Where data is processed
Iter is a US company. Data is stored in the United States and Sweden and processed by the vendors above in the countries listed. By using Iter you understand that your data is transferred to those countries.
11Changes
We will post changes here with a new effective date. For material changes we will notify you in the app or by email before they take effect, and where the law requires it we will ask for your consent again.
12Contact
privacy@itertravelapp.net · Iter Travel App LLC, 276 Fifth Avenue, Suite 704, PMB 70186, New York, NY 10001, USA