Privacy Policy

ZENPATH LIMITED, a company registered in England and Wales under company number 07110278, registered office First Floor 10 College Road, Harrow, Middlesex, England, HA1 1BE, is the data controller for personal data processed through Travel Upgrade. For anything about data, email privacy@travelupgradeapp.com.

No card numbers. No online-banking or loyalty-account credentials. No transaction feeds.

Travel Upgrade has no open-banking connection and no link to any loyalty programme. There is nowhere in the product to enter a card number, a bank password or a programme login, and nowhere in our database to store one. That is designed and automatically tested, not merely left out of the interface. You type balances and expected spending yourself.

• Your plan data — the cards, accounts, loyalty balances, benefit valuations, household members and expected spending you enter. We need it to produce a plan. That is performance of our contract with you.
• Your account — email address, an optional display name, and authentication records. Needed to give you an account and keep it secure.
• Support correspondence — what you send us and our replies, kept so we can deal with the matter and learn from it.
• Security and audit records — limited records of security-relevant events such as sign-ins and administrative access, to protect accounts. Our legitimate interest in keeping the service secure; we hold a written assessment of that interest and keep the records minimal.

We do not profile you for advertising, we do not sell data, and we do not share it with card issuers or loyalty programmes.

Without an account: everything stays in your browser's local storage on that device. Nothing is uploaded. You can export a full JSON backup at any time.

With an account, if you opt in to sync: your household plan is stored in our managed cloud database so you can use it on more than one device. Sync is opt-in — creating an account does not upload your plan until you ask it to. Each household's records are isolated by row-level access rules enforced on the server, not in the browser.

You can record other people in your household because trips are planned for the people taking them. We ask for as little as possible: a country and a spending currency, plus, for a child, a first name or nickname and at most an age band.

We do not operate an active notice and rights flow for other adults yet, so we do not claim to have written to anyone — and we do not ask you to promise that you did. Instead, no identifiable detail about anyone but you is stored in your account. You can keep detailed planning for another adult on your own device, or record them as a generic traveller placeholder (for example “Traveller 2”, with no contact details) so the plan can be saved to your account. Our database enforces this, not just our app.

Any adult recorded in a household can contact us at privacy@travelupgradeapp.com to see, correct, restrict, object to or delete their own data, without needing an account. We deal with them directly and we do not tell the subscriber their reasons. Deleting their data may change the plan the subscriber sees. See information for household members.

We keep suppliers to a minimum. We currently use:

• a managed application and database platform, which hosts our database and authentication;
• a cloud hosting and content-delivery provider, which serves the website and app;
• an email delivery provider for account and service email;
• Google, if — and only if — you choose to sign in with a Google account.

Each supplier acts under a written processing agreement and only on our instructions. Depending on the supplier, processing may take place in the UK, the European Economic Area or the United States. Where data leaves the UK we rely on the safeguards UK data protection law allows, such as adequacy regulations or the International Data Transfer Agreement or Addendum. We will name each supplier and its processing regions here as we confirm the detail; we do not want to state a region we have not verified.

• Plan data: while your account is open, and deleted with it.
• Account records: while your account is open, then removed on deletion.
• Support correspondence: up to two years.
• Security and audit records: up to twelve months.
• Records we must keep by law, such as any future accounting records, for the period the law requires.

You can delete your account and its data from within the app, and locally stored data is removed by clearing it in the app or clearing your browser storage.

You have the right to:

• see the data we hold about you;
• correct anything inaccurate;
• have it deleted;
• restrict how we use it;
• receive it in a portable form;
• object to processing we base on legitimate interests;
• withdraw consent where we have relied on it.

Email privacy@travelupgradeapp.com. We respond within one month. There is no charge. If you are unhappy with how we have handled your data, please tell us first — then, if you are still unhappy, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

We use encryption in transit and at rest, row-level access rules so that one household's data is inaccessible to another, hashed passwords, optional authenticator-app two-factor sign-in, access limited to those who need it, and logging of administrative access.

No credential for any third-party account exists anywhere in our system. The product is designed and automatically tested so that no such field can be captured.

If a personal data breach occurs we assess the risk it poses. Where the law requires it we notify the Information Commissioner's Office without undue delay and, where feasible, within 72 hours of becoming aware of it. Where the breach is likely to result in a high risk to your rights and freedoms we tell you without undue delay.

We set no analytics or advertising cookies. We use only what is strictly necessary to run the service: keeping you signed in, keeping the site secure, and remembering your own local preferences and plan data in your browser's storage. If we ever want to set a cookie that is not strictly necessary, we will ask you first.

Travel Upgrade is for adults; you must be 18 to hold an account. A subscriber may record that a child is part of the household, because family trips need planning for the people taking them. We ask for a first name and an age band, and nothing more. If you believe we hold more than that about a child, tell us at privacy@travelupgradeapp.com and we will remove it.

If we change this policy in a way that materially affects you we will email you and give you notice before it takes effect. The current version and its date are always shown at the foot of this page.