Security & privacy
Your trip. Your information. Protected.
From emergency contacts to medical information, The Trip Binder helps keep sensitive details private and available to the people who need them. Encrypted connections, access set by role, and a simple commitment: we never sell your data.
Who sees what
The right information, for the right people
What each person sees depends on their role on the trip.
Parents
See and manage their own child’s record.
A parent linked to a student can view and update that child’s information, including emergency contacts and health information for the trip. Other families’ records are never shown to them.
Chaperones
See the travelers they look after.
Chaperones see the travelers on their trip, including emergency contacts and health information, so they can act in an emergency. An organizer can restrict a chaperone to one group.
Organizers
Run the trips they’re part of.
The teacher or leader running a trip manages its roster and settings, sees the travelers’ health information, and is told when a family changes it.
Our team
Support with safeguards.
Our support tools can look up accounts and trips. Viewing a traveler’s health details there requires a written reason, is recorded, and sends an alert.
How we protect it
Privacy by design
Most of these are on for every trip from day one. Two-factor sign-in and the app lock are yours to switch on.
Encrypted connections
Information travels between your device and our service over HTTPS. Everything the phone app keeps for offline use — trip data, traveler photos, saved documents, unsent messages — is encrypted on the device with a per-account key and erased when you sign out.
Access tailored to each role
The database decides who can read each record, not just the screen. Health information can only be read by the trip’s staff, the traveler’s parents and the traveler, and it is deleted 30 days after the trip ends.
Private files
Permission slips, roster photos and trip album photos are kept in private storage and open through links that expire. Profile pictures and trip cover images are the exception: anyone with their link can see them.
Extra protection for your account
Optional two-factor authentication asks for a code from an authenticator app when you sign in, and the phone app can require Face ID or a fingerprint to reopen.
You’re in control
Delete your account in the app. A school can ask us to delete a trip and its students’ records. Our privacy policy explains what is deleted and what is kept for safety.
We never sell your data
We don’t sell or rent personal information or student data, or use it for advertising. There are no ad trackers or third-party analytics in the app or on this website.
- Sell or rent personal information or student data
- Use student data for advertising or profiling
- Show one family’s child records to another family
- Show a traveler’s health information to anyone outside their trip staff and family
- Store your payment card details