Privacy Policy

How we collect, use, and protect your information.

Last updated: November 6, 2026

This Privacy Policy explains how Farpoint Travel LLC ("we," "us"), the data controller for the Service, collects, uses, and shares information about you when you use the Farpoint Travel website at farpointtravel.com, our mobile apps, and related services (the "Service"). Farpoint Travel LLC is a Utah limited liability company and a subsidiary of Lomond Peak Heritage, LLC (lph.group); see Section 4. We've tried to write this in plain language.

1. Information We Collect

Information you provide

  • Account information: your name, email address, and password (stored encrypted/hashed — we never see your plaintext password). Optionally, a phone number.
  • Travel profile (optional): citizenship, passport expiry date, TSA PreCheck, and Known Traveler numbers. You choose whether to provide these; they're used to enhance your itineraries (e.g., relevant embassy info).
  • Trip content: flights, hotels, car rentals, cruises, activities, confirmation codes, journal entries, and photos you add, including booking confirmation emails you choose to forward to your personal import address.
  • Trip invitations: when you invite someone to a trip, the email address you enter is stored with the invitation, together with the role you chose and who sent it, so we can deliver the invitation and check that the right person accepts it.
  • Explore searches: the destination and travel dates you search for when looking up activities, hotels, and restaurants.
  • Reviews: if you submit a review, its rating, title, and text, together with your first name and last initial if we publish it.
  • Messages: messages you exchange with a travel agent or support through the Service.
  • Text-message consent records: if you turn on SMS or WhatsApp alerts, we record the date and time you consented, the IP address the request came from, and the version of the consent disclosure you agreed to, as evidence of your opt-in. If you revoke consent — by replying STOP or by turning the channels off in Settings — we record that time as well.
  • Payment information: if you subscribe to a paid plan on the web, payment is handled by Stripe. We do not store your full card number — Stripe processes and stores it. We retain a customer/subscription identifier and your plan status. If you subscribe in our mobile app, Apple (App Store) or Google (Google Play) processes the payment under its own terms; we receive only transaction and subscription identifiers, the product you bought, and its status — never your card details.

Information collected automatically

  • Usage and device data: log data, device type, and app interactions used to operate and improve the Service.
  • Push tokens: if you enable notifications, a device push token to deliver alerts.
  • Cookies: strictly necessary cookies for authentication and security. See our Cookie Policy.

2. How We Use Your Information

  • To provide, maintain, and improve the Service;
  • To build and display your itineraries and travel journal;
  • To deliver trip invitations you send and to let invitees join your trips;
  • To send you flight alerts, trip reminders, and account notifications through the channels you opt into (push, SMS, WhatsApp, email);
  • To process subscriptions and payments, including subscriptions bought through the App Store or Google Play and agency seat billing;
  • To provide customer support and respond to your requests;
  • To detect, prevent, and address fraud, abuse, and security issues;
  • To comply with legal obligations, including keeping evidence of your consent to text messages.

We do not sell your personal information, and we do not use it for third-party advertising.

3. How We Share Information

We share information only as needed to run the Service:

  • Service providers (processors) who operate parts of the Service on our behalf, under contract and only for these purposes:
    • Vercel (hosting) and Railway (database) — infrastructure, including short-lived, IP-based request counters used for rate limiting and abuse prevention;
    • Stripe — payment processing for web subscriptions and agency seat billing;
    • Apple App Store and Google Play — payment processing for subscriptions bought in the mobile app;
    • Resend — transactional email delivery, including trip invitations;
    • Cloudflare R2 — photo storage, including the images of QR codes found in confirmation emails you forward (check-in codes, e-tickets), which we decode on our own servers and keep with the booking so you can show them at the desk;
    • FlightAware — flight status data;
    • Our own servers — when you open the site from a link in a shared itinerary, we record that the link was used (the link's tag, the page and the time, nothing about you) and, if you create an account in the same browser session, that your account came from such a link. This is first-party counting, with no cookie and no third party;
    • Wikimedia (Wikipedia) — the destination name of a trip, to suggest a landmark photo as the trip's cover image; the photo is loaded from Wikimedia's servers with its licence credit shown;
    • Open-Meteo — the destination name and dates of your next trip, to show its weather forecast on your dashboard and in the app, and the text you type into a location field, to suggest matching places (larger places are matched from a list we host, so most searches never leave our servers);
    • Twilio — SMS and WhatsApp notifications (if you opt in);
    • Expo — mobile push notification delivery;
    • Viator, Amadeus, and Yelp — the destination and travel dates you search for in Explore, to return activity, hotel, and restaurant suggestions;
    • Affiliate partners you choose to visit from Explore (Viator, GetYourGuide, Hotellook/Travelpayouts, Booking.com, Discover Cars, OpenTable, and Google Maps for map searches) — when you tap a partner link, the destination and dates you searched are part of the link we open, and the partner's site may set its own cookies to attribute a booking to us so that we can earn a commission. We do not send them your name, email, or account details, and we do not receive what you book beyond the fact and amount of a commission. Those sites' own privacy policies apply once you are there;
    • Anthropic — only when you choose “Read with AI” for a forwarded confirmation email our parser could not read: the text of that one email is sent to Anthropic's API to extract the booking details. Nothing is sent without that choice.
  • People you share with: if you invite someone to a trip, we email them the invitation with your name (or a generic traveler label if you have not set one) and the trip's name, destination, and dates. Once they accept, collaborators can see that trip's content for as long as your plan includes sharing.
  • Travel agents: if you accept a travel agency's sponsorship of your account, that agency can create and manage trips associated with you and see related trip details until you leave the sponsorship. Agencies are billed by us per client seat through Stripe; the agency sees your name and email, but never your payment details, and you are not charged for a sponsored seat.
  • Our corporate family: our parent company and its other subsidiaries, for group administration such as accounting, tax, legal, insurance, security, and shared IT systems, under this Policy. See Section 4.
  • Legal and safety: when required by law, to enforce our Terms, or to protect rights, safety, and security.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

4. Our Corporate Family

Farpoint Travel LLC is owned by Lomond Peak Heritage, LLC (lph.group), a holding company that also owns URETC LLC (uretc.com, real estate transaction software) and Copper Dwellings Property Management Group LLC (cdpmg.com, Utah property management). Each company runs its own service under its own privacy policy and terms. Your Farpoint Travel data stays with Farpoint Travel LLC; an affiliate receives information from us only as described in Section 3, and never for its own marketing without your consent. If we ever refer you to an affiliate's service, we will say so and ask first.

5. Data Retention

We keep your information for as long as your account is active or as needed to provide the Service. Specific practices:

  • Trips: retained while your account is active.
  • Travel journal and photos: your journal stays on your account and readable on every plan; writing new entries needs Weekender or above. Downgrading never hides or deletes journal entries or photos: they remain readable and exportable on the free plan, and only writing (adding, editing, or deleting entries and uploading photos) requires a paid plan. Journal data is deleted only when you delete your account or ask us to delete it.
  • Trip invitations: an invitation is pending for 14 days. The invitee's email address is stored with the invitation while it is pending and for up to 14 days after it expires (or is declined or revoked), after which it is deleted. Accepted invitations become collaborator records on the trip.
  • Text-message consent records: kept for as long as your account exists, including after you opt out, so we can demonstrate that consent was given and honor your opt-out.
  • Billing records: Stripe, App Store, or Google Play identifiers and your plan history are kept while your account exists and for as long as we must retain them for accounting and fraud-prevention purposes.
  • Account deletion: when you delete your account, or ask us to delete your data, we delete or anonymize your personal information — including trips, journal entries, and photos — within a reasonable period, except information we must retain for legal, accounting, or fraud-prevention purposes.

6. Your Rights & Choices

Depending on where you live (e.g., the EEA/UK under GDPR, California under CCPA/CPRA, orUtah under the Utah Consumer Privacy Act), you may have rights to:

  • Access the personal information we hold about you;
  • Correct inaccurate information;
  • Delete your information;
  • Export/port your data (you can download your travel journal at any time, on every plan, and request a broader export);
  • Object to or restrict certain processing;
  • Withdraw consent (e.g., turn off SMS/WhatsApp/push notifications in Settings, or reply STOP to any text);
  • Opt out of the "sale" or "sharing" of personal information — note we do not sell or share your personal information for advertising.

To exercise these rights, email support@farpointtravel.com. We will not discriminate against you for exercising your rights.

7. Notification Channels

You control which channels we use to reach you (push, SMS, WhatsApp, email) in your Settings. SMS and WhatsApp require you to provide a phone number and your express consent, which you give by enabling those channels in Settings and confirming the consent disclosure shown there. When you do, we record the date and time, the IP address the request came from, and the version of the disclosure you agreed to, as evidence of your opt-in. Standard message and data rates may apply, and message frequency varies with your travel activity. You can opt out at any time by turning the channel off in Settings or by replying STOP to any text message; reply HELP for help. We record the revocation and do not send texts without a live consent record. Opting out of SMS does not affect transactional email or push notifications.

8. Security

We use industry-standard measures to protect your information, including encryption in transit, hashed passwords, and access controls. Trip invitation links are stored only as a one-way hash, so a copy of our database cannot be used to accept an invitation. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

We operate in the United States and use service providers that may process data in the U.S. and other countries. Where required, we rely on appropriate safeguards for cross-border transfers. By using the Service, you understand your information may be processed in the United States.

10. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, provide additional notice.

12. Contact Us

Questions or requests about your privacy? Email Farpoint Travel LLC at support@farpointtravel.com.

Farpoint Travel LLC, 7533 S Center View Ct #6585b West Jordan, UT 84084