Privacy

Effective October 10, 2026

Your trips are yours. Onla works fully offline with no account, sells nothing to anyone, shows no ads, and does no cross-app tracking. This page explains the whole picture.

On your device, by default

Everything you put in Onla — trips, itineraries, ideas, documents — lives in a database on your device. You can use Onla with no account at all, forever, entirely offline. You can export all of it, or delete all of it, from the You tab at any time.

If you sign in (optional)

Signing in exists for one reason: backing up your trips and syncing them across your devices. When you do:

• Your email address is used to sign you in (a one-time code — no password) and to identify your account.
• Your trips and itineraries are stored on our servers (hosted on Supabase) so your other devices can pull them. Access is scoped to your account alone.
• Documents you attach (tickets, confirmations) are stored in private cloud storage, accessible only to you.

Sign out any time — your trips stay on your device.

Importing bookings

Onla can read a booking confirmation and file it to the right trip. This is optional, needs an account, and is off until you allow it: the first time you import a booking, Onla asks, and nothing is read before you say yes.

To read a confirmation, Onla sends the email, photo, or PDF you chose to Google's Gemini, an AI service, which picks out the reservation details (flight, hotel, dates, confirmation number). A confirmation can include your name and booking details. Onla uses Google's paid Gemini API, and under its terms Google does not use this content to improve its products; Google logs it for a limited time to prevent abuse and to meet legal requirements. Onla uses what comes back for nothing but filling in your trip, and nothing is ever added to a trip without your explicit review and approval. There are two ways in:

• Email: a confirmation you forward to your Onla import address reaches us through Cloudflare's email routing. If you have allowed reading, the extracted booking waits in your private review inbox, with the email's subject and sender, until you file or dismiss it; the rest of the email is not kept. If you have not allowed reading, the email is discarded unread. We keep a record of the addresses you've forwarded from so your future forwards reach your account.
• Photos and documents: when you photograph or share a confirmation, the image is uploaded to your private storage just long enough to read it, then the temporary copy is deleted. If you choose not to have it read, a shared file can still be saved to a trip as a document. A document already saved on a trip is never read on its own; it is read only if you ask, from that document's menu.

Your choice is saved with your account, along with the date you made it, so it applies on all your devices. You can turn reading off again at any time with the switch in the You tab; bookings already on your trips stay where they are.

Notifications

If you allow notifications, we store a push token for your device so we can tell you when a forwarded booking is ready to review. Decline, and everything still works — arrivals just wait quietly in the app.

Places, weather, and photos

When you search for a destination, Onla asks mapping, geocoding, weather, and photo services (such as Pexels for destination imagery) about that place. These lookups carry the place — not your identity.

Diagnostics

If Onla crashes, an anonymous crash report is sent (via Sentry) so we can fix it. These reports carry no personal information — we've turned that off explicitly.

What we don't do

• No ads, and no data ever sold or shared for advertising.
• No tracking you across other apps or websites.
• No reading your data for any purpose beyond the features above.

Your controls

• Export all data — the You tab, anytime, no questions.
• Delete all data — the You tab; removes the cloud copy too when signed in.
• Sign out — your trips remain on your device.
• Booking reading — off until you allow it; turn it off again in the You tab, anytime.

Children

Onla is not directed at children under 13, and we don't knowingly collect their information.

Changes & contact

If this policy changes materially, the date above changes with it. Questions, concerns, or requests: feedback@onlatravel.com.