This version adds hotel texts (sections 1, 4 and 5), which start on November 16, 2026. Everything else in it took effect on November 2, 2026. For a copy of an earlier version, write to support@caratinternational.net.
TickKet is a travel companion that organizes your trips, reservations, and receipts in one place, can hold your loyalty program balances, and lets you search for places near your trip with Hugo. This policy explains what we collect, why, how long we keep it, and how to delete it.
TickKet is operated by Carat International LLC ("TickKet," "we," "us"). It covers the TickKet app for iPhone and Apple Watch, and the TickKet web app at tickket.app.
The short version
- We never ask for, receive, or store your loyalty, airline, hotel, or banking passwords. There is no field in TickKet to enter them.
- We never see your payment card. Subscriptions are billed by Apple; we only learn whether your subscription is active.
- We do not sell or share your personal information, and the TickKet app contains no advertising, analytics, or data-broker tracking of any kind. Our marketing website uses Google advertising cookies; see section 4.
- Some features use AI from Anthropic. In TickKet for iPhone from version 1.0.6, Hugo asks before it uses AI. Section 4 names every company that handles your data and what each one gets.
- You can delete your account and its data from inside the app at any time.
1. What we collect and why
| Data | Why we collect it |
|---|---|
| Name and email address | To create and operate your account. |
| Phone number (optional) | Only if you opt in to SMS travel alerts. Used solely to send those alerts. |
| A contact’s name and mobile number (optional) | Only if you use Share my alerts to send your flight updates to someone else. You choose the person and enter their number. We text them an invitation, and we send them nothing else unless they reply YES. We use their number only to text them your boarding, delay and landing alerts, to text them once when you stop, and, from November 16, 2026, hotel texts if you turn them on (see Hotel texts below). We do not use it for marketing, we do not share it, and you can remove them at any time in Alert channels. They can reply STOP or NO at any time to stop all TickKet texts. |
| Hotel texts (optional, from November 16, 2026) | Part of TickKet Plus. If you turn on hotel texts for a trip, we keep that choice and the people it covers. Unless a person already agreed to hotel texts when they accepted your invitation, we text them once to ask. Only someone who replies YES (Y, START and UNSTOP count as YES) within 7 days gets hotel texts. Someone who does not reply keeps getting your flight updates without hotel texts. A reply of NO stops every TickKet text to them, flight updates included, just as STOP does. When you save a room number for that trip's hotel (which marks you checked in) or tap Check out, your iPhone tells us the trip, the hotel and whether you checked in or out, never the room number. We then send each person who agreed a text with your first name and the hotel's name, never your room number, address or confirmation code, and we keep a note that the text went so it is not sent twice. |
| Forwarded booking emails (subject, sender, and contents) | The core feature of TickKet. You forward a confirmation, or point a travel portal at your private TickKet address, and we read it to build your itinerary. That includes any PDFs or pictures in the email, such as a screenshot of a boarding pass. Anthropic's AI reads each one for us (section 4). |
| Trips and reservations | Flight, hotel, car, and dining details, so we can show your itinerary and send the alerts you enable. |
| Receipt images and extracted details | Merchant, amount, date, and category, so each receipt is filed to the right trip for expense reporting. |
| Loyalty balances | Program name, points, optional status tier, and when it was updated. You add these yourself, or by forwarding a loyalty statement to your TickKet balances address. We use them to show your balances and give a rough estimate of what a balance is worth. The support chat also sees them so it can answer questions about your balances. In versions of the TickKet app before 1.0.5 and in the web app, Hugo's chat can also use them to answer questions about your programs. |
| Location | With your permission, for local weather, nearby places (including Hugo searches near you), travel context, and to remember your city when you sign in on another device. In TickKet for iPhone, your location is rounded to about 1 kilometre on your iPhone before it is sent. In the web app, your browser may send a more exact location; we use it only for that request and keep only a copy rounded the same way. When you use the web app's location button, your browser also sends your exact location straight to BigDataCloud to find the name of your city. We do not keep precise GPS coordinates or location trails linked to you. |
| Other content you create | Notes, and what you type into Hugo: a place search in TickKet for iPhone from version 1.0.5, or a chat message in earlier versions of the app and in the web app. Hotel room numbers and Wi-Fi details are covered in section 2. |
| Support messages | If you contact support, we keep your message and our reply so we can respond. The support chat is answered by AI from Anthropic; TickKet for iPhone from version 1.0.6 tells you so before you start. |
| Your AI choice | Whether you allowed Hugo to use AI, which version of the notice you saw, and when. We keep it with your account so TickKet follows your choice on every device you use. |
| Text message records | When we text an invitation, or from November 16, 2026 a question about hotel texts, to someone you share alerts with, we keep a record of what we sent and of their reply, with their mobile number and your account. We also keep a record when any number replies STOP or START. We keep these records so we can show that a person agreed and so we always honour a STOP (section 5). |
| Account and device identifiers | Your account ID, and a push notification token for each device you enable alerts on. |
| Your phone's time zone | TickKet for iPhone sends it so live flight times read correctly on your phone. |
| Subscription status | Whether your Apple subscription is active, so we know which features to enable. |
| Feature usage counts | How many AI requests and Hugo searches your account has made, solely to apply your Hugo search allowance and other fair-use limits, and to control cost. |
| Technical logs | Basic error and request metadata for security and debugging, retained up to 30 days. |
2. What we deliberately do not collect
- Passwords for any airline, hotel, loyalty program, or bank; no such field exists in TickKet.
- Payment card numbers or bank details. Apple processes subscription payments; we never receive them.
- Background location or location history. TickKet never tracks your location in the background and does not keep a history of where you have been.
- Advertising identifiers, cross-app tracking data, or data-broker profiles.
- Crash or analytics telemetry. TickKet contains no third-party analytics or advertising SDKs.
- Your hotel room number. If you save one in TickKet, it stays on your device. If you type your room number into Hugo, it is sent with that search or message, like anything else you type into Hugo; TickKet does not keep it. Earlier versions of TickKet also send a saved room number along with questions to Hugo; from October 15, 2026 we discard it when it arrives, and it is not passed to Anthropic.
- Hotel Wi-Fi details. They are not sent to us. In TickKet for iPhone, a Wi-Fi network or password you saved stays on your iPhone and is removed when you sign out or delete your account; the app is removing these fields, so it will no longer ask for them. In the web app, Wi-Fi details you type stay in that browser and are removed when you sign out. The web app's Wi-Fi card scan has been switched off.
- Photos of documents, whiteboards and rental car dashboards. The web app's scan for these has been switched off, so it accepts no new photos and sends none to Anthropic. Photos you saved before November 2, 2026 stay in your account until you delete them in the web app or delete your account.
- Your TSA PreCheck setting. It is stored on your iPhone, and copied to your Apple Watch so its estimates match. It is never sent to us.
- What your Apple Watch shows. If TickKet is installed on your Apple Watch, your iPhone copies to it what TickKet shows there: your upcoming flights (flight number, airports, destination city, dates, times, status and delays), gates and terminals, your seat, layovers and connection times, TickKet's leave-by, boarding and security estimates, your PreCheck setting, your hotel's check-out time, the day of your trip, your destination's weather, and the name of your hotel or airport for the ride button. It goes from your iPhone to your Watch over Apple's connection between your devices, without passing through our servers, and stays on your Watch until your iPhone replaces it. Confirmation codes, your name, hotel room numbers, Wi-Fi details and street addresses are never sent to your Watch. TickKet clears it from your Watch when you sign out or delete your account.
3. How we use it
We use the data above only to operate TickKet for you: building your itinerary, sending the alerts and texts you have turned on, filing receipts, running Hugo's place searches (and Hugo's chat in versions of the app before 1.0.5 and in the web app), providing support, enforcing fair-use limits, and keeping the service secure. We do not use your data for advertising, and we do not track you across other companies’ apps or websites. We do not use your data to train AI models, and our contract with Anthropic does not allow Anthropic to use it to train its models either.
4. Companies that handle your data
These are the companies that handle data for TickKet, what each one does, and what it gets.
Service providers that work for us.
| Company | What it does for TickKet, and what it gets |
|---|---|
| Cloudflare, Inc. | Runs TickKet's servers, stores TickKet's data, and receives the emails sent to your TickKet address. It gets everything TickKet keeps (section 1) and every email sent to your TickKet address. |
| Anthropic, PBC | Its AI, Claude, reads forwarded booking emails and loyalty statements, answers the support chat, and turns a Hugo search into a place search. It gets: an email you forward: the whole email, including its subject, sender, text and any PDF or pictures; the support chat: your messages, plus your plan and its renewal date, your country, when you joined, your TickKet forwarding address and your loyalty balances; a Hugo search: only the words you type. In TickKet for iPhone from version 1.0.6, Hugo asks first. If you choose Not Now, or turn off AI in Hugo in Settings, Hugo searches Google Maps without AI, and Hugo sends nothing to Anthropic on any device; in the web app and in versions of the app before 1.0.5: Hugo's chat messages with your trip details (flights, seats, confirmation codes, hotels and reservations), your loyalty balances, your receipts and spending when you ask about them, and your location if you share it; receipt pictures and your receipt list, to read, sort and search them; screenshots of loyalty balances; your destination and hotel address for a safety briefing; and the name of an airport or a restaurant, to list that airport's lounges or to find that restaurant's menu or booking page. Hugo's AI-written heads-up about flight changes in TickKet on the web has been retired, and nothing is sent to Anthropic for it. We never add your account's name, email address or password. Anthropic sees them only if they appear in an email you forward or in something you type. |
| Twilio Inc. | Sends text messages (SMS): the alerts you turn on, and invitations and alerts to the people you share alerts with. It gets your mobile number, the mobile number of each person you share alerts with, and the text of each message, which for some alerts includes a link to a picture of your flight and, in an invitation, a link to TickKet's contact card. From November 16, 2026 this includes the hotel texts you turn on. |
| Resend | Sends TickKet's email to you. It gets your email address and the email itself: password reset links, receipt PDFs you ask for, replies to email you send us, and notices about your account or this policy. |
Companies whose own privacy policies apply.
| Company | What it does for TickKet, and what it gets |
|---|---|
| Apple Inc. | Bills your subscription through the App Store, delivers notifications and Live Activity updates, and provides Apple Weather and Apple Maps. Apple handles your subscription payment itself; we only learn whether it is active. For notifications it gets your device's notification token and the content of each alert or Live Activity update. For Apple Weather it gets the location of a city (on your trip, or your home city) and the dates. For Apple Maps, your iPhone sends it a place's name and location, or a hotel's address for your trip's map pictures. Apple's Privacy Policy at https://www.apple.com/legal/privacy/ applies. |
| Google LLC | Google Maps Platform finds places for Hugo, restaurants and nearby places. For that it gets the search words and a location to search around (your location rounded as in section 1, your hotel, a city or an airport), never your name or email address. Google Drive stores the backup copies of TickKet's database that we keep only to recover from a failure (section 5). They hold everything TickKet keeps (section 1). Google's Privacy Policy at https://policies.google.com/privacy applies to Google's handling of those searches and backups. |
Data services that get no account details.
| Company | What it does for TickKet, and what it gets |
|---|---|
| FlightAware | Flight status. It gets a flight number and date. |
| AeroDataBox | Backup flight status, which we reach through an API marketplace. It gets a flight number and date. |
| Open-Meteo | Backup weather, sunset times and city lookups, and air quality in the web app. It gets a city's name or location. |
| OpenStreetMap Foundation (Nominatim) and the U.S. Census Bureau | Placing a hotel, a reservation or a city on the map. They get the hotel's or the reservation's name and address, or the city's name. |
| Ticketmaster | Events near your destination, for Hugo's chat in the web app and in versions of the app before 1.0.5. It gets an area and dates. |
| FAA, NOAA, Google News, Wikipedia, Zippopotam.us and BigDataCloud | Airport delay programs, typical weather for far-off dates, news headlines for a city, city pictures in the web app, a ZIP code you type in the web app, and the web app's location button (section 1). They get no account details. In the web app your browser contacts Wikipedia, Zippopotam.us, BigDataCloud and Open-Meteo directly, so they also see your IP address. |
The service providers that work for us are bound by contract to use your data only to provide their service to TickKet and to protect it to a standard at least equal to this policy. Apple and Google handle what they receive under their own privacy policies. The data services in the last group get no account details. These companies may store and process data in the United States and other countries.
Advertising cookies on our marketing website. This applies to caratinternational.net only, not to the TickKet app. Our marketing site uses Google Ads cookies so we can see which adverts bring people to the site and whether they join our launch list. These cookies may be used by Google to show you TickKet adverts elsewhere. They record your visit to the website; they cannot see anything inside the app, your trips, your receipts or your account.
You can opt out of personalised Google advertising at adssettings.google.com, or block cookies in your browser settings. Blocking them does not affect the app or your account in any way.
Other apps you choose to open. When you ask TickKet to open another company's app or website, TickKet passes it only what that step needs, straight from your device, and that company's own privacy policy applies from there.
- Get boarding pass copies your confirmation code to your iPhone's clipboard, on that iPhone only and for five minutes, then opens your airline's app. For some airlines, the link it opens also carries the code and your departure airport, and that link opens only in the airline's own app.
- Rides. A ride button opens the Uber app with only the drop-off filled in: your airport, your hotel, or a place you chose, by its name and its address or location. Uber works out your pickup itself. If the Uber app is not installed, TickKet opens its App Store page.
- Texting your room. When you save a new room number in TickKet for iPhone and you share your alerts with someone, TickKet can offer to text them your room. If you say yes, your own Messages app opens with a text you can change or cancel: the hotel's name, your room number and a Google Maps link to the hotel. It is sent from your phone only if you tap Send. TickKet never receives the text.
- Maps, restaurants and search. Buttons that open Apple Maps, Google Maps, OpenTable or a Google search pass the place you asked about (its name, and its address or location where TickKet has them) and, for a table, your party size and time. Directions for a place from a Hugo search open Google Maps. From version 1.0.6 of TickKet for iPhone, the place itself opens in Google Maps, where its phone number, hours and website are. Version 1.0.5 instead looks up the place's name and location in Apple Maps, from your phone, to show its phone number and website.
Apart from these hand-offs, we share your data with no one else, except where required by law, to protect the service from abuse, or in a business transfer, in which case this policy continues to apply.
5. How long we keep it
| Data | Retention |
|---|---|
| Trips | Until you delete them or delete your account. If you have more than 50 trips, saving a new one removes the trip that ended longest ago. A trip that has not ended is never removed this way. |
| Receipts, balances, preferences, saved content | Until you delete them or delete your account |
| Forwarded booking emails | Read for booking details. We keep the booking, not the message, with two exceptions. For restaurant, activity and other bookings that are not a flight or hotel, we keep the text of the email (up to about 8,000 characters) with that booking so you can see the original. If we cannot find a booking in an email, or cannot file it, we keep its text for up to 180 days from when it arrived so a person at TickKet can see what went wrong. It is deleted then, or with your account if you delete it sooner. |
| Your last known city and rounded location | Up to 180 days |
| Support chat in the app | Until you clear the conversation or delete your account |
| Hugo searches | We do not keep the words you type with your account. A short, general search such as "coffee near my hotel" (no numbers, six words or fewer) may be remembered for up to 30 days in a form that is not linked to you, so repeat searches are faster. If Anthropic cannot read a search, Hugo searches Google with your words as typed, and remembers for one hour, with your account, that the AI could not read them, so they are not sent to Anthropic again. Place results are not stored. |
| Email to our support address | Up to 180 days from when it arrived. Copies of messages that arrived on or before October 15, 2026 may also remain in our support mailbox until we clear them; ask us and we will delete yours. |
| A contact's name and mobile number for Share my alerts | Until you remove them, or you delete your account. Text message records and the do-not-text list are kept as described below. |
| Text message records | 5 years from when each record was made, even after a person stops texts, you remove them, or you delete your account, because we may need to show that a person agreed. |
| Do-not-text list | A number that replies STOP (or STOPALL, NO, END, QUIT, CANCEL or UNSUBSCRIBE) stays on this list for 5 years so TickKet does not text it again, unless the person texts YES, Y, START or UNSTOP. |
| Hotel texts (from November 16, 2026) | Your choice to send hotel texts for a trip: until about a week after the trip ends. A note that a hotel text was sent: until 3 days after check-out. A note that we asked a person about hotel texts: up to 400 days. Deleting your account deletes all of these. |
| What Anthropic keeps | Anthropic's published policy is to delete what we send it within 30 days, unless its safety systems flag it as misuse (then up to 2 years) or the law requires it to keep it. It may not use it to train its models. |
| Your AI choice | Until you change it or delete your account |
| Your phone's time zone | Up to 3 days |
| Feature usage counts | Up to about 13 months |
| Database backups | Up to 120 days, used only to recover from a failure |
| Technical logs | Up to 30 days |
| Account record | Until you delete your account |
6. Deleting your account and your data
In the app: Settings → Delete account. You will be asked to confirm, and then your account and its data are permanently deleted: trips, receipts, loyalty balances, preferences, saved content, and your private TickKet email address. This cannot be undone.
You may also email support@caratinternational.net and we will delete your account within 30 days.
Deleting your account also deletes the text of emails TickKet could not read, your devices' notification tokens, and your expense report records. Four things are not removed at that moment: email you sent to our support address (section 5 says how long it is kept), text message records and the do-not-text list (kept as section 5 says, so we can show that a person agreed and keep honouring a STOP), our technical logs (up to 30 days), and our database backups, where deleted data can remain for up to 120 days. We keep backups only to recover from a failure and use them for nothing else; if we ever restore one, we delete again any account that was deleted after that backup was made. Pictures of your flights that TickKet made on or before October 15, 2026 for alerts texted to people you share your alerts with may also remain after your account is deleted; each one is deleted automatically within 90 days of when it was made. Ask us and we will delete your support email sooner.
Deleting your TickKet account does not cancel your Apple subscription. Apple manages billing, so cancel separately on your iPhone: Settings → your name → Subscriptions → TickKet. Refund requests go to Apple at reportaproblem.apple.com.
You can also delete individual trips and receipts at any time in the app, without deleting your account. To remove a single loyalty balance, email support@caratinternational.net and we will remove it, or delete your account to remove everything at once.
7. Your rights and choices
- Access and correction: your data is visible in the app and can be edited or removed there. For a copy, email us.
- Deletion: see section 6.
- Notifications: every alert type has its own toggle in Settings; SMS alerts are off unless you opt in, and you can reply STOP at any time. The person you share alerts with can also reply STOP at any time.
- Location: you can decline or revoke location access in iOS Settings; location-based features stop working.
- AI: in TickKet for iPhone from version 1.0.6, Hugo asks before it uses AI, and you can turn off AI in Hugo at any time in Settings; Hugo then searches Google Maps without AI. Forwarded emails are read by Anthropic's AI only when you forward one, and the support chat only when you send a message; to reach us without AI, email support@caratinternational.net.
- Email import: you can disconnect work-travel importing at any time in Settings.
Depending on where you live (for example, the EU or UK under GDPR, or California under the CCPA/CPRA), you may have rights to access, correct, delete, or port your personal information, and to complain to a supervisory authority. We honor these requests for all users regardless of location and will respond within 30 days. We do not "sell" or "share" personal information as those terms are defined under the CCPA.
8. Security
Data in transit is encrypted with TLS. Sign-in uses industry-standard methods and OAuth tokens are stored encrypted. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you as required by law.
9. Children
TickKet is not directed to children and may not be used by anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
10. Changes to this policy
We will post updates on this page and change the "last updated" date above. For material changes we will notify you in the app or by email at least 14 days before they take effect.
11. Contact
Questions or requests about this policy or your data:
support@caratinternational.net
Carat International LLC
200 S 21st St, Ste 400A
Lincoln, NE 68510
United States
© 2026 Carat International LLC.