This is a short summary. Our privacy policy and security page are the full versions.
How information is protected
- Information travels between your device and our service over HTTPS.
- Passwords are stored only as one-way hashes. Nobody can read them.
- The database itself decides who can read each record, not just the screen.
- The database decides who can read health information: the trip's staff (within any group restriction), the traveler's parents and the traveler. No setting can widen that. It is deleted 30 days after the trip ends.
- Permission slips, roster photos and album photos are in private storage and open through links that expire. Profile pictures and trip cover images are the exception: anyone with their link can see them.
- The phone app encrypts everything it keeps for offline use and erases it when you sign out.
- Two-factor sign-in and a Face ID or fingerprint lock on the phone app are available. Both are optional.
Who sees what
- Organizers see the whole trip, including every traveler's health information.
- Chaperones see the travelers on their trip, including health information. An organizer can restrict a chaperone to one group.
- Families see and update their own child's emergency contacts and health information, and the organizers are told when they change something.
- Parents see only their own children. Travelers see their own record, never another traveler's.
See Who can see what for details.
AI features
- The schedule importer receives only the file an organizer uploads.
- The support assistant receives your support messages, with email addresses, phone numbers and card numbers removed first. Names are not removed, so please do not paste health details into a support message.
- AI never reads your roster or student records.
See AI features.
What we never do
- Sell or rent personal information or student data.
- Use student data for advertising or profiling.
- Use ad trackers or third-party analytics, in the app or on the website.
- Show one family's child records to another family.
- Store your payment card details.
Schools and the law
The Trip Binder is designed to support schools' FERPA and COPPA obligations. Accounts are for people 13 and older; younger students can be on a roster but cannot sign in. A school or district that needs a signed data privacy agreement, or wants a trip's data deleted, can contact us.
Your choices
You can delete your account in the app at any time, and ask us for a copy of your data. See Delete your account or get a copy of your data.