Privacy policy

Last updated November 7, 2026

MyTinerary is run by Rec-Safe (RECSAFE), a Washington corporation ("we" and "us"). This policy says what MyTinerary keeps about you, why, who else sees it, and what you can do about it. It covers MyTinerary only; our other sites and apps have their own.

What we keep

When you use MyTinerary, we keep:

• the itinerary: its title, the organizer's email address, and its entries (dates, times, places, addresses, and notes)
• the trip group's names, email addresses, and phone numbers, as the organizer enters them
• a scrambled (hashed) organizer password and group PIN, if set
• a log of changes, and the IP addresses of failed sign-ins

Like any website, our servers also keep a short log of the pages asked for (with the IP address, the browser, and the time), to keep the site running and safe. We don't use analytics, advertising, or tracking services.

Why we keep it

Only to run MyTinerary for you: to show you your own things, to send the emails it needs to, and to keep it working and secure. We don't sell or rent your information, we don't show ads, and we don't use it for anything else.

Who else sees it

Anyone with an itinerary's link can read it, and change it if the organizer allows that. Group members with an email address get update emails.

We use these services to run MyTinerary, and each sees only what it needs:

• Amazon Web Services, which hosts our servers in the United States, where everything the app keeps is stored
• Postmark, which sends our emails, so it handles your email address and the message
• public code libraries (such as cdnjs, jsDelivr, or unpkg), which supply scripts and styles that your browser downloads, so they see your IP address
• OpenStreetMap, which supplies map tiles, so it sees your IP address and the area shown
• OpenStreetMap Nominatim, which turns an address into a map position: our server sends it the address only
• Google Maps, which shows maps, so Google sees your IP address and the area shown

We'd share information if the law makes us (a court order, for example), or to protect someone's safety. If Rec-Safe ever handed MyTinerary to someone else, this policy would go with it.

Cookies

MyTinerary uses one cookie, to remember that you've unlocked an itinerary. Google Maps may set its own when a map is shown.

How long we keep it, and deleting it

We keep your information while you use MyTinerary. The organizer can delete entries and make a new link. To have a whole itinerary deleted, email us and we'll do it, apart from anything the law makes us keep (such as payment records). Server logs are kept only as long as they're needed to run and protect the site, and backups are overwritten in time.

Keeping it safe

Every page uses an encrypted connection (HTTPS). Access is limited to the people who need it. No website is perfectly secure, but if something ever goes wrong in a way that puts your information at real risk, we'll tell you, and the authorities when the law requires it.

Children

MyTinerary isn't meant for children under 13, and we don't knowingly keep a child's information. If you think a child has given us theirs, email us and we'll delete it.

Your choices and rights

You can ask us what we keep about you, ask us to correct it, or ask us to delete it, by emailing info@rec-safe.com. We'll answer within 30 days. Depending on where you live (for example in Canada, a US state such as Washington or California, the UK, or the EU), the law may give you more rights, and we honour them for everyone.

Our servers are in the United States, so if you're elsewhere, your information is stored and handled there, under US law. In Canada, if you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

Changes and questions

If we change this policy, we'll change the date at the top, and if a change is big, we'll say so on MyTinerary first. Questions? Email info@rec-safe.com.