Privacy
Last changed 27 October 2026
In short: we keep what you put in GAP IT so we can run it for you and the people you travel with. We don’t sell it, and there are no ads. We only send you news, or offers from travel partners, if you say yes, and you can stop them any time. It’s stored in Australia, and a few companies help us run GAP IT. You can see, correct or delete what we hold by emailing hello@gapit.app.
Who we are
GAP IT is run by Fill The Gap Limited (NZBN 9429047576636), New Zealand. We look after your personal information under New Zealand’s Privacy Act 2020. Questions go to hello@gapit.app.
What we keep
- Your account: your name, email address and household. Your password is held by Amazon’s sign-in service; we never see it.
- Your trips: stops, dates, places to stay, bookings you add or forward to your GAP IT address, ideas, votes, chats, spending and notes.
- What you save: links to clips, what the platform says about each clip, the places on your map, and the photos and videos you add.
- What you tell Scout: the trip you describe and your travel preferences, so Scout can suggest what suits you.
- Paying: your plan and its renewal date. Stripe takes the payment and keeps your card details; we never see your card number.
- Running GAP IT: technical logs, such as when requests were made and any errors, kept to find and fix problems. If you allow notifications, the address your phone gives us to send them.
Why we keep it
To run GAP IT for you and the people you plan trips with; to answer you when you write; to tell you about your account, your plan and changes that affect you; to send you news and partner offers, only if you’ve said yes; and to keep GAP IT safe and working. We don’t sell your information, and we don’t share it except as described here.
Emails we send
Some emails come with having an account: codes to sign in, receipts, and things about your trips and your plan. Everything else, you choose, when you join and any time after in Account:
- News and travel ideas from GAP IT, now and then.
- Offers from our travel partners, such as places to stay, tours and travel deals, chosen to match the places you’re dreaming of and the trips you’re planning. We choose the offers and send them ourselves. We never give your email address or your trips to partners.
Both start switched off. We send at most a couple a month, every one has a way to stop them, and you can switch either off in Account at any time. We keep a record of what you said yes to and when.
Who sees it
- Everyone in your household sees the household’s trips.
- People you invite to a trip see the stops you share with them.
- A share link shows the route and the photos you choose to anyone with the link, never costs, bookings or notes. You can turn it off any time.
The companies that help us
These companies handle some of your information for us, only to provide their part of GAP IT:
- Amazon Web Services: where GAP IT runs and your information is stored, in Sydney, Australia; and the sign-in service.
- Anthropic (Claude), in the United States: reads what Scout needs to read (the trip you describe, a booking email you forward, what a clip is of) and answers. Anthropic doesn’t use it to train its models.
- Stripe: takes payments for paid plans.
- Cloudflare: receives the email you forward to your GAP IT address and passes it to us.
- Map services: OpenStreetMap, Photon and LocationIQ find places when you search, and draw the map. They receive what you type into a search, and your phone’s address on the internet, as any website does.
- OSRM and Open-Meteo: road routes between stops, and the weather and sea temperature at a place. They receive the places, not who you are.
- Wikipedia and Wikimedia Commons: photos and facts about places.
- Apple, Google and Mozilla: if you allow notifications, they deliver them to your phone or browser.
- TikTok, Instagram, YouTube and Facebook: when you save a clip, GAP IT asks the platform what the clip is (its title and picture).
Some of these companies are outside New Zealand. We choose ones that protect personal information to a standard comparable with New Zealand’s.
When you open Booking.com or another site from GAP IT, that site sees the visit and handles your information under its own privacy policy. Some of these links are affiliate links, which tell the site the visit came from GAP IT; they don’t give the site anything from your trips.
Cookies and storage on your device
GAP IT keeps your trips and sign-in on your device so it works without a signal. It sets one cookie, “gapit”, which only says someone is signed in on that browser, so gapit.app opens the app rather than this website. There are no advertising or tracking cookies. Stripe sets its own cookies when you pay.
How long we keep it
For as long as you have an account. Your trips are kept even when your household has no plan (locked, until you choose one again), because they’re your memories. If you ask us to close your account, we delete your information within 30 days, except records we must keep by law, such as payment records for tax (seven years). Backups are cleared on their own schedule soon after.
Your rights
You can ask to see the personal information we hold about you, and ask us to correct it or delete it. Email hello@gapit.app from the email you joined with. We’ll answer within 20 working days. If you’re not happy with our answer, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.
Keeping it safe
Your information is sent encrypted and stored with Amazon Web Services. Only the people who run GAP IT can reach it, and only to look after it. If something ever went wrong that could cause you serious harm, we’d tell you and the Privacy Commissioner.
Children
GAP IT is for people 16 and older, or younger with a parent or guardian’s permission. Families can plan trips with children in them; we don’t ask children for their own accounts.
Changes
If we change how we use your information in a way that matters, we’ll tell you before it applies.