Privacy Policy

Wicked Funnels (ABN 18 616 868 350) (“we”, “our”, or “us”) operates the Limbo travel planning app and the website at getlimbo.app (together, the “Services”). This policy explains what information we collect, why we collect it, and the choices you have. It applies whenever you use the Services.

• Account information. Your name, email address, and password (stored as a one-way hash), or the basic profile we receive if you sign in with Google or Apple. You can also add an optional avatar photo.
• Trip content. The trips, plans, bookings, checklists, budgets, votes, notes, and photos you create in the app, and the companions you invite to your trips.
• Forwarded booking emails. If you forward a confirmation email to addthis@getlimbo.app, we receive that email and any attachments so we can turn it into a plan for you. See “How forwarded emails are handled” below.
• Device and usage information. Device type, operating system, app version, push notification tokens, crash reports, and analytics about how the app is used, so we can fix problems and improve the product.

• To provide the Services: storing your trips, syncing them across your devices, and sharing them with companions you invite.
• To send you flight status alerts, trip updates, and invitations you have asked for.
• To turn forwarded booking emails into draft plans for your review.
• To send service emails such as verification, password resets, and important account notices.
• To provide support, keep the Services secure, and improve them.

We do not sell your personal information.

Email import is built to be private by default:

• Forwarded emails are stored encrypted (AES-256) on our infrastructure while they are processed.
• AI extracts the booking details (dates, venues, confirmation numbers) and creates a pending plan. Nothing is added to your trip until you review and confirm it in the app.
• Attachments are saved with your trip only if you opt in when confirming the plan.
• Raw emails are automatically deleted within 30 days of processing.
• Pending plans you never confirm expire and are removed after 90 days.
• Email authenticity is verified (DKIM/SPF), and personal identifiers are kept out of the extracted data wherever possible.

Trip content is shared with the companions you invite, according to the permissions you give them. Beyond that, we share data only with the service providers that make Limbo work:

• Google Maps & Places — maps, venue details, and location search.
• AirLabs — live flight data for flight tracking.
• Unsplash — destination photos.
• AI processing providers — extracting booking details from emails you forward.
• SendGrid — sending service emails.
• Amazon Web Services — hosting and secure email receiving.
• Expo — delivering push notifications.

These providers process data on our behalf and under their own privacy commitments. We may also disclose information if required by law.

Some of these providers store or process data outside Australia, including in the United States. When data is transferred overseas, we take reasonable steps to ensure it is handled consistently with this policy.

We keep your account data while your account is active. You can delete trips, plans, and other content at any time in the app, and you can delete your account entirely from Settings or by emailing us. When your account is deleted, your personal data is removed from our active systems within a reasonable period, except where we must keep it to meet legal obligations.

Data is encrypted in transit, passwords are hashed, forwarded emails are encrypted at rest, and access to production systems is restricted. No service can promise perfect security, but we treat your travel plans as private by default.

You can access, correct, export, or delete your personal information. Most of this you can do directly in the app; for anything else, email us and we will help. If you are in a region with specific privacy rights (such as Australia, the EU/UK, or California), we honour the rights that apply to you.

Limbo is not directed at children under 13, and we do not knowingly collect personal information from them. Trip organisers may add child companions to a trip (a name and age) so families can plan together; that information is provided by the adult who manages the trip.

We may update this policy from time to time. The latest version will always be at getlimbo.app/privacy-policy, and we will note the date it was last updated above. If a change is material, we will let you know in the app or by email.

Questions about privacy? Email support@getlimbo.app.

If you have a privacy complaint, email us and we will look into it promptly. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.