TickKet is a travel companion that organizes your trips, reservations, and receipts in one place, and can hold your loyalty program balances so Hugo, our AI concierge, can answer questions about them. This policy explains what we collect, why, how long we keep it, and how to delete it.
TickKet is operated by Carat International LLC ("TickKet," "we," "us"). It covers the TickKet iOS app and the TickKet web app at tickket.app.
The short version
- We never ask for, receive, or store your loyalty, airline, hotel, or banking passwords. There is no field in TickKet to enter them.
- We never see your payment card. Subscriptions are billed by Apple; we only learn whether your subscription is active.
- We do not sell or share your personal information, and the TickKet app contains no advertising, analytics, or data-broker tracking of any kind. Our marketing website uses Google advertising cookies; see section 4.
- You can delete your account and its data from inside the app at any time.
1. What we collect and why
| Data | Why we collect it |
|---|---|
| Name and email address | To create and operate your account. |
| Phone number (optional) | Only if you opt in to SMS travel alerts. Used solely to send those alerts. |
| A contact's name and mobile number (optional) | Only if you use Share my alerts to send your flight updates to someone else. You choose the person and enter their number. We use it solely to text them your boarding, delay and landing alerts, and to text them once when you stop. We do not use it for marketing, we do not share it, and you can remove them at any time in Alert channels. |
| Forwarded booking emails (subject, sender, and contents) | The core feature of TickKet. You forward a confirmation, or point a travel portal at your private TickKet address, and we read it to build your itinerary. |
| Trips and reservations | Flight, hotel, car, and dining details, so we can show your itinerary and send the alerts you enable. |
| Receipt images and extracted details | Merchant, amount, date, and category, so each receipt is filed to the right trip for expense reporting. |
| Loyalty balances | Program name, points, optional status tier, and when it was updated. You add these yourself, or by forwarding a loyalty statement to your TickKet balances address. We use them so Hugo, our AI concierge, can answer questions about your programs and give a rough estimate of what a balance is worth. |
| Approximate location | With your permission, and rounded on your iPhone before it is sent, for local weather, nearby places, and travel context. We do not collect precise GPS coordinates or location trails. |
| Other content you create | Notes and your messages to Hugo, our AI concierge. Hotel room and Wi-Fi details you save stay on your iPhone and are never sent to us. |
| Support messages | If you contact support, we keep your message and our reply so we can respond. |
| Account and device identifiers | Your account ID, and a push notification token for each device you enable alerts on. |
| Subscription status | Whether your Apple subscription is active, so we know which features to enable. |
| Feature usage counts | How many AI requests your account has made, solely to enforce fair-use limits and control cost. |
| Technical logs | Basic error and request metadata for security and debugging, retained up to 30 days. |
2. What we deliberately do not collect
- Passwords for any airline, hotel, loyalty program, or bank; no such field exists in TickKet.
- Payment card numbers or bank details. Apple processes subscription payments; we never receive them.
- Precise or continuous GPS location.
- Advertising identifiers, cross-app tracking data, or data-broker profiles.
- Crash or analytics telemetry. TickKet contains no third-party analytics or advertising SDKs.
3. How we use it
We use the data above only to operate TickKet for you: building your itinerary, sending alerts you have enabled, filing receipts, answering questions through Hugo, providing support, enforcing fair-use limits, and keeping the service secure. We do not use your data for advertising, and we do not track you across other companies' apps or websites.
4. Who processes data for us
We use a small set of service providers, each only for what is listed:
| Type of provider | What they do for TickKet |
|---|---|
| Cloud hosting and infrastructure | Hosting, data storage, and email routing |
| AI processing | Reading forwarded booking emails and receipt images, and powering Hugo |
| App store and platform services | Subscription billing and push notification delivery |
| Places data | Place information for restaurants, landmarks and nearby-location features |
| SMS delivery | SMS alerts, only if you opt in |
| Email delivery | Sending email from TickKet to you |
| Flight status data | Flight status lookups (flight numbers and dates, not your identity) |
| Weather and news data | Weather and news (city or topic queries, not your identity) |
Each of these providers is contractually bound to process your data only on our instructions, for the purpose listed above, and to protect it to a standard equivalent to this policy. We will name any specific provider on request.
Advertising cookies on our marketing website
This applies to caratinternational.net only, not to the TickKet app. Our marketing site uses Google Ads cookies so we can see which adverts bring people to the site and whether they join our launch list. These cookies may be used by Google to show you TickKet adverts elsewhere. They record your visit to the website; they cannot see anything inside the app, your trips, your receipts or your account.
You can opt out of personalised Google advertising at adssettings.google.com, or block cookies in your browser settings. Blocking them does not affect the app or your account in any way.
We share your data with no one else, except where required by law, to protect the service from abuse, or in a business transfer, in which case this policy continues to apply.
5. How long we keep it
| Data | Retention |
|---|---|
| Trips, receipts, balances, preferences, saved content | Until you delete them or delete your account |
| Forwarded booking emails | Parsed for booking details, then discarded; we keep the extracted trip, not the message |
| City-level location | Up to 180 days |
| Support messages | Up to 180 days |
| A contact's name and mobile number for Share my alerts | Until you remove them, or you delete your account |
| Technical logs | Up to 30 days |
| Account record | Until you delete your account |
6. Deleting your account and your data
In the app: Settings → Delete account. You will be asked to confirm, and then your account and its data are permanently deleted: trips, receipts, loyalty balances, preferences, saved content, and your private TickKet email address. This cannot be undone.
You may also email [email protected] and we will delete your account within 30 days.
Deleting your TickKet account does not cancel your Apple subscription. Apple manages billing, so cancel separately on your iPhone: Settings → your name → Subscriptions → TickKet. Refund requests go to Apple at reportaproblem.apple.com.
You can also delete individual trips and receipts at any time in the app, without deleting your account. To remove a single loyalty balance, email [email protected] and we will remove it, or delete your account to remove everything at once.
7. Your rights and choices
- Access and correction: your data is visible in the app and can be edited or removed there. For a copy, email us.
- Deletion: see section 6.
- Notifications: every alert type has its own toggle in Settings; SMS alerts are off unless you opt in, and you can reply STOP at any time.
- Location: you can decline or revoke location access in iOS Settings; location-based features stop working.
- Email import: you can disconnect work-travel importing at any time in Settings.
Depending on where you live (for example, the EU or UK under GDPR, or California under the CCPA/CPRA), you may have rights to access, correct, delete, or port your personal information, and to complain to a supervisory authority. We honor these requests for all users regardless of location and will respond within 30 days. We do not "sell" or "share" personal information as those terms are defined under the CCPA.
8. Security
Data in transit is encrypted with TLS. Sign-in uses industry-standard methods and OAuth tokens are stored encrypted. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you as required by law.
9. Children
TickKet is not directed to children and may not be used by anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
10. Changes to this policy
We will post updates on this page and change the "last updated" date above. For material changes we will notify you in the app or by email at least 14 days before they take effect.
11. Contact
Questions or requests about this policy or your data:
[email protected]
Carat International LLC