Privacy Policy

Day Tripper, by Battle Creek LLC · Last updated 14 October 2026

This policy describes what Day Tripper collects, why, where it goes, and how to get rid of it. It describes the app as it actually works today. Where something is planned but not yet built, it says so rather than reserving the right in advance.

What changed on 14 October 2026

What changed on 24 September 2026

Since the version of 25 August 2026, and each described in full below:

These took effect in the app before this page was updated, which is not what the “Changes” section below promises. We are sorry for that, and it is why this list is here.

Who we are

Day Tripper is operated by Battle Creek LLC. For any privacy question, or to ask about the data held about you, contact jonah@battlecreek.work.

What we collect

Account information

Signing in is handled by Kinde, an identity provider. Kinde holds your email address and password. We never see your password.

What we store is:

Invites by email. If you gave us your email so we could give you free access, it sits on an invite list until it is used. When you next use the app while you are on that list, we ask Kinde for the email you signed in with, compare the two, and if they match we record the free access on your account and delete your email from the list. Your email is not stored on your account either way. If you never sign in, ask us and we will remove it.

What you put in the app

What we do not collect

Where your data goes

RecipientWhat reaches themWhy
Kinde Your sign-in credentials and email They run the sign-in itself. We hold their identifier for you, not your password.
Fly.io Everything listed above They host the server and the disk your data sits on, in the United States.
Open-Meteo The place name you type for a destination, including as you type it, and a trip's coordinates and dates — never your name, account, or anything identifying Finding the place you mean, and weather forecasts so a list can react to the conditions. Our server makes these requests, so your device's address is not sent.
Anthropic The activity (or the name you gave it, if you named it yourself), the trip length, the general forecast, and the generic names of items already on your list — never your name, account, destination, or dates Filling a gap when you have no history to draw on. Sent only then; a trip backed by one of your kits reaches no model at all.
Sentry When something goes wrong: the error, the code path it happened in, and which page of the app you were on — never your name, account, destination, coordinates, or anything you typed So we find out the app is broken without waiting for someone to write in. Sent only on a failure; a normal visit sends nothing.

That is the complete list. There are no other third parties.

When something breaks

If the app or the server hits an error, a report is sent to Sentry so we can find and fix it. The report describes the failure — what went wrong and where in the code — not you.

We strip identifying information before the report leaves us, and we test that we do: sign-in tokens, your account identifier, your name or email, and your trip's destination and coordinates are all removed. If that stripping ever fails, the report is thrown away rather than sent. Nothing is sent when the app is working normally.

Artificial intelligence

Day Tripper is deliberately built so that most lists involve no AI at all. Items are retrieved from your own history and from anonymous community statistics first; a language model is only consulted to fill a genuine gap, which in practice means a brand-new activity you have no history for.

When a gap needs filling, we send a short description of the trip to Anthropic, who run the language model. What is sent is: the activity (for example "hike" — or, for an activity you named yourself, the name exactly as you typed it), the trip length in days, whether the forecast is wet, cold or hot, and the generic names of items already on your list (for example "Socks", "Rain jacket") so the model does not suggest them again.

What is never sent: your name, your email, your account, any identifier, your destination, its coordinates, or your travel dates. The request carries no way to tell one person from another, and Anthropic does not use it to train their models. If you name an activity yourself, that name is sent as you typed it, so keep it to the activity (“Rock climbing”) rather than anything personal.

If that request fails for any reason, the app falls back to the same fixed built-in table it used before — you still get a list.

Community statistics

The app can tell you that other people packed a given item for an activity — and, as it learns, for a general area and time of year. These are built from packing events and packing history across all users, and they are aggregated and anonymous:

Deleting your account

You can delete your account from inside the app: Account → Delete account. It is immediate and it is not reversible.

Deleting removes your kits, your trips, your packing lists, your packing history, your stored weather lookups, and your account record. Item names you invented are deleted too, unless another person's list already relies on one — in that case the item survives as an anonymous entry with the link to you removed, because deleting it would break someone else's list.

Your contribution to community statistics is not stored against you. It is recalculated from packing events and packing history, and once yours are gone the next recalculation — within about six hours — no longer counts you.

One thing deletion does not do: your Kinde sign-in continues to exist, because it is held by Kinde rather than by us. If you sign in again you get a new, empty account — not your old one back. To remove the sign-in itself, email us at the address above.

How long we keep things

Your data is kept until you delete your account. There is no separate retention period and no archive: deletion is a deletion.

Security

All traffic between the app and the server is encrypted in transit. Every request that touches your data requires a valid sign-in token. Data is stored on an encrypted volume at our hosting provider.

We should be equally clear about the limits: this is a small operation, the database is a single file on a single machine, and we do not claim certifications we do not have.

Children

Day Tripper is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will delete it.

Your rights

Depending on where you live you may have rights to access, correct, export, or delete your data. Deletion is built into the app. For anything else, email jonah@battlecreek.work and we will respond within 30 days. We will not charge you for it, and we will not treat you differently for asking.

Changes

If this policy changes materially — a new recipient of your data, a new category collected — we will update the date at the top and describe the change in the app before it takes effect.