No bank connections, ever
Travel Upgrade has no open-banking integration and asks for no card numbers, no online-banking credentials and no statement uploads. You describe your wallet in your own words.
Pre-flight checks
We ask for less than you would expect.
A rewards optimiser does not need your bank. It needs to know what you hold, what you value, and what you plan to spend. That is all Travel Upgrade asks for.
Local-first by default
Without an account your entire plan stays in this browser's local storage. Nothing leaves the device, and you can export a full JSON backup at any time.
Opt-in cloud sync
Signing in lets you sync a household across devices. Sync is transported over TLS, stored per household, and guarded by optimistic concurrency so two devices cannot silently overwrite each other.
Row-level isolation
Every table denies access by default. A household's records are readable only by its authenticated members, verified server-side rather than in the browser.
Two-factor sign-in
Accounts can enrol an authenticator app for time-based one-time codes, with a recovery path if a device is lost.
Snapshots before damage
Destructive actions — loading the demo household, resetting, restoring a backup — take an automatic snapshot first, and a rolling history of recent snapshots is kept locally.
Honest limits
What Travel Upgrade cannot promise.
- Card, programme and benefit rules are user-entered. Issuers change terms; verify before acting.
- Valuations are yours. Change a perk's price and the ranking changes with it — that is by design.
- This is an information tool, not financial or tax advice, and not a substitute for reading the terms.
- Clearing your browser data removes a local-only plan. Export a backup or sign in to keep a copy.
