UnPack turns booking confirmations you forward into an organised itinerary. That means we receive the emails you choose to send us — and nothing else. We never connect to your mailbox and cannot read your inbox.
What we collect
- An anonymous account identifier. Signing in with Apple gives us a random identifier for you. If you use Apple's Hide My Email, we never see your real address. Your name and email are only stored if Apple shares them at sign-in, and they are used only to greet you in the app.
- The emails you forward. When you forward a confirmation to your private UnPack address, we receive and store that message so we can read the booking details out of it.
- Receipt photographs, sometimes. Receipts you photograph are read on your device and stay there. Only when your phone cannot read one is the image sent to our processor to be read — and the app tells you when that happens, on screen, at the moment it does.
- Your trips. Itineraries, expenses and receipt images are stored on your device.
What we do not do
- We do not sell or rent your information.
- We do not show advertising, and we do not share anything with advertisers.
- We do not track you across other apps or websites.
- We do not access your email account, contacts, calendar, or location.
How long we keep it
- Forwarded emails: 90 days. The original message is deleted automatically after that. The booking details you confirmed stay in your trips, on your device.
- Receipt images sent for reading: used to produce the result and not retained afterwards.
- Your account: kept until you delete it.
Deleting your account
Open the app, tap the account icon, and choose Delete account. This removes your forwarding address so it immediately stops accepting mail, deletes anything waiting for your review, erases the trips stored on your device, and revokes UnPack's Sign in with Apple authorisation so the app disappears from your Apple Account settings. It cannot be undone.
Who processes your data
UnPack runs on Amazon Web Services in the United States (Oregon). AWS acts as our processor for receiving mail, storing it, and reading receipt images that your device could not read. Apple provides sign-in. Nobody else receives your information.
Security
Your forwarding address is a secret: anyone who learns it could send bookings into your account, which is why it contains sixteen random characters and why you can replace it at any time from the app. Traffic between the app and our servers is encrypted, and your sign-in credential is held in the device keychain rather than ordinary app storage.
Children
UnPack is not directed to children under 13 and we do not knowingly collect their information.
Your rights
You can delete everything from inside the app at any time, as described above. If you are in the UK, EU, or a US state with privacy legislation, you also have the right to ask what we hold about you and to ask us to correct or delete it. Write to us and we will respond.
Changes
If this policy changes in a way that affects how your information is handled, we will update this page and change the date at the top.