Who runs the App
Ithaca is operated by Ithaca Travel Co.. Your Advisor decides what personal information to collect about you and why (they are the data controller); we process it on their instructions to run the App (we are the data processor). That's why requests about your data go to your Advisor first — see "Your rights" below.
What we collect
Your name, email, and phone number (from booking with your Advisor); messages you send in the App; photos you upload; checklist items; and trip reviews/ratings you submit.
How it's used
To run the App itself — showing you your itinerary, delivering messages between you and your Advisor, and storing your photos and checklist. We do not sell your data to third parties.
Marketing use — your consent
By default, your photos and reviews are private to your trip and your Advisor. If you turn on "Allow sharing for marketing" in Settings, your Advisor may reuse your photos and reviews publicly (for example, on social media or a website) to promote their business. This is entirely optional and applies to the photos and reviews on all of your trips, past and future; turning it off again withdraws that permission everywhere, and we record the date you last changed this setting.
Who can see your data
Your Advisor, and (for anything on a shared trip) anyone else invited onto that specific trip. Data is stored with Supabase (our database/hosting provider) and, for AI-assisted itinerary and safety features, sent to Anthropic for that specific request — both acting as data processors on our behalf, not using your data for their own purposes.
International data transfers
Our infrastructure providers operate primarily in the United States. If you're located outside the US, using the App means your data may be transferred to and processed there.
Cookies
The App uses only the cookies required to keep you signed in. We don't run advertising or third-party analytics trackers. See the Cookie Policy for the full list.
Your rights
You can view and edit your profile information anytime in Settings, delete photos you've uploaded, and download what's visible to you in the portal (itinerary, messages, checklist, reviews) as a file from the "Your data" section in Settings. Records your Advisor keeps privately about you — travel documents, emergency contact, internal notes — aren't part of that download; to request full account deletion or a copy of those, contact your Advisor.
Depending on where you're located, you may have additional rights under a specific law — for example, the right to access, correct, delete, or port your data, or restrict or object to certain processing (rights along these lines appear in laws like the GDPR and CCPA/CPRA). We'll honor requests along these lines through your Advisor, whether or not a specific law technically applies to you.
Contact
Questions about your own data go to your Advisor in the App. Questions about this policy or the App itself: you can contact us at info@ithacatravel.club.