Your journey awaits
Bagspacked.life
Last updated: 5 October 2026
Bagspacked.life ("Bagspacked", "we", "us") is a personal travel-itinerary tool that helps you keep track of your flights, accommodation, and trip planning by reading booking confirmation emails from your own mailbox. This page explains what information we collect, why, and how it's handled.
We only read booking-related emails you choose to connect, we use that information to build your itinerary, we store it under your own account so only you can see it, and we never sell your data or use it for advertising.
When you create a Bagspacked account, we collect your email address and a securely stored password (via Firebase Authentication) so you can sign in.
If you choose to connect a mailbox (Gmail or Outlook/Hotmail), you'll be asked to grant read-only access to your email via Google's or Microsoft's own sign-in screen. We use this access solely to:
We do not read, store, or otherwise access emails unrelated to travel bookings, and we never send email on your behalf.
In practice, when you press Sync, Bagspacked searches your mailbox for emails from the last 180 days that match known travel-booking senders and phrases, and reads only those matching emails. From each one we save the extracted booking details (for example dates, flight number, hotel name, confirmation number and price) and the email's subject line, which is shown in your sync log. We do not keep a copy of the full email text. If a confirmed travel-insurance or eSIM email has a PDF or image attachment, a copy of that attachment is filed into your Documents section so you have it with your trip; you can delete it at any time.
If you manually import a booking — by pasting email text, or uploading a .eml or .pdf file — we process only the content you provide for that specific import.
To turn the raw text of a booking confirmation into structured itinerary details (dates, flight numbers, hotel names, and so on), the relevant email or document text is sent to Anthropic's Claude API for extraction. This content is used only to perform that extraction for you, in real time, and is not used by Bagspacked or, per Anthropic's standard API terms, to train their models.
If you connect a Gmail account, Bagspacked requests read-only access to your Gmail through Google's own sign-in screen. We use that access only to find and read travel booking confirmation emails so we can show the flights, accommodation and other bookings in your itinerary. It is used only to provide that feature, and only for the account you connected.
Bagspacked's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
You can disconnect Gmail at any time from Settings, which stops all syncing and removes our stored access. You can also revoke Bagspacked's access from your Google Account at myaccount.google.com/permissions.
Bagspacked lets you store travel documents — a passport scan, an insurance certificate, a visa, a ticket — against your account or a particular trip. These files are stored in Firebase Cloud Storage (Google Cloud) in a folder tied to your account, and access rules permit only your signed-in account to open, add or delete them. Links to view a file are generated on demand for you and are not stored or shared.
Uploading documents is entirely optional, and Bagspacked works fully without it. We do not read, scan, analyse or extract data from the files you upload — unlike booking emails, they are never sent to an AI service. Apart from the file name, type, size, the document category you choose, and any expiry date you enter (used to remind you before it expires), we record nothing about their contents.
Documents are never included in a share link. A read-only trip link contains bookings and checklist state only; uploaded documents are excluded from what a shared view can request. You can delete any document from the Documents section at any time, which removes the file itself, not just the listing.
A passport or insurance certificate is sensitive. Only upload one if you want to, and consider a device-level passcode on the phone or computer you use to open them.
Your itinerary data, connected-account tokens, and settings are stored in our Firebase (Google Cloud) database, associated with your account only. Data is not accessible to other Bagspacked users unless you explicitly create a share link (see below).
Mailbox connection tokens are stored securely and used only to perform the syncing you've requested. You can disconnect a connected mailbox at any time from Settings, which removes our access and stops any further syncing.
Bagspacked lets you generate a read-only share link for a trip, so you can send your itinerary to a travel companion. Anyone with that link can view the trip's details, but cannot make changes. You can turn sharing off at any time, which immediately disables the link.
Your data is retained for as long as your account is active. You can disconnect any mailbox connection at any time. To request deletion of your account and all associated data, email us at the address below and we'll process the request promptly.
We rely on Google Cloud and Firebase's security infrastructure, including encrypted connections and authenticated access, to protect your information. No system can guarantee absolute security, but we take reasonable, industry-standard steps to safeguard your data.
Bagspacked is not directed at children, and we do not knowingly collect information from children.
We may update this policy from time to time as the service evolves. We'll update the "Last updated" date above when we do. Continued use of Bagspacked after a change means you accept the updated policy.
Questions about this policy or your data? Email us at admin@bagspacked.life.