Duffel Bag Privacy Policy
Effective November 2, 2026.
Duffel Bag runs its AI on your phone. Your chats, documents and photos stay on your phone unless you use Duffel Bag Pro, which is online. Duffel Bag AI LLC does not sell your personal data, show ads or track you across apps.
On your phone
The app stores these on your phone:
- Your chats and the AI's replies
- Guides you install or make, documents you add, and their search indexes
- Photos you take or choose, the objects you outline in them and their notes
- Settings, offline maps and the AI models you download
Chat with the phone's own model, photo recognition and estimating where a photo was taken all run on your phone. Your phone's backups (for example iCloud Backup) may include this data, under Apple's terms and your backup settings.
What goes online, and why
| What | Sent to | Why |
|---|---|---|
| Requests for AI models | Hugging Face (huggingface.co), and our server for one model file | Downloading the app's AI models. Hugging Face sees your IP address and which file, under its privacy policy. |
| A check that the app is a genuine copy, from Apple (App Attest) or Google Play (Play Integrity) | Google's Firebase App Check, then our server with each request | Making sure requests come from the real app. Firebase receives your device's attestation and IP address, not your messages, photos or account. |
| Requests for guides and maps | Our server | Listing and downloading guides and offline maps. |
| Your Duffel Bag Pro subscription's transaction (signed by Apple) | Our server, with each request | Checking that you're subscribed and tracking your monthly Pro budget. We never see your payment details; Apple handles payment. |
| Pro chats: your messages, the photos and documents you attach, any location you add, and excerpts from your guides when Pro searches them | Our server, then OpenAI | Answering you. OpenAI's models write Pro's replies and run its web searches, under OpenAI's policies for business customers. Some photo steps run on Anthropic's Claude models inside Amazon Web Services (Amazon Bedrock). |
| Guides you ask Pro to make: the name and description you give | Our server, which uses Anthropic's Claude models inside Amazon Web Services (Amazon Bedrock), and Wikipedia and Wikimedia Commons | Writing the guide from Wikipedia articles and Commons photos. Only you can download a guide made for you. |
| Sign in with Apple (optional): Apple's identifier for you and the email Apple shares, which may be a private relay address | Our server | Connecting your Pro chats and subscription across your devices. |
| Anonymous usage events (which screens you open, which features you use, and whether steps like the tour, a download or a Pro purchase finish) and crash reports | Google Firebase (Analytics and Crashlytics) | Seeing where the app fails and which features get used, so we can fix and improve it. Firebase receives a random app-instance id, your device model, iOS version, app version and country, not your messages, photos, guides, location or any account. No advertising identifier is collected, and we don't use this to track you across apps or sites. Events wait on your phone while you're offline and are sent when you're online, under Firebase's privacy terms. |
| A reply you report, and the question before it | Our server | Reviewing replies people flag as harmful or wrong. |
Pro asks before it's turned on for the first time. With Pro off, chat uses only the phone's model and your chats stay on your phone.
Our server runs on Amazon Web Services in the United States. Like most servers, it logs each request's IP address, device type and what was asked for. Apple handles app downloads, updates and payments under Apple's privacy policy. Links you open from the app open in your browser under that site's policies.
How long we keep it
- Pro conversations: until you delete them.
- Photos you send Pro: deleted after 30 days.
- Replies waiting to reach your phone: deleted once delivered, or after 30 days.
- Request logs: 3 months.
- Usage events: 14 months. Crash reports: 90 days.
- Guides made for you and reports: kept while the service runs, until you delete them.
- Your Pro budget: past months until you delete them; the current month's is kept while your subscription runs, so the budget can't be reset.
Permissions
The app asks for a permission only when you use the feature that needs it, and you can change it any time in iOS Settings.
| Permission | Used for | Leaves your phone? |
|---|---|---|
| Camera | Taking photos to chat about or save to your documents | Only photos you send to Pro |
| Photo library | Choosing photos to chat about or save to your documents, and saving photos you take | Only photos you send to Pro |
| Location | Showing where you are on offline maps and pointing the compass at true north | Only if you add your location to a Pro chat |
The app can estimate where a photo was taken from what it shows. That estimate is made and kept on your phone.
Your choices
Delete chats, documents and photos in the app, or delete the app to remove everything it stored on your phone. To delete what our server holds for you (your Pro conversations, photos you sent Pro, guides made for you, Sign in with Apple link and reports), tap Delete my Pro data in the app's Settings. To get a copy of it, or if you can't use the app, email support@duffelbag.ai and we'll handle it within 30 days. Cancel your subscription in your Apple account settings.
Children
Duffel Bag is meant for adults and is not directed at children. We do not knowingly collect information from children under 13.
Changes
If we change this policy we will post the new version at duffelbag.ai/privacy-policy with a new effective date, and update it before any version of the app sends data in a new way.
Contact
Duffel Bag AI LLC, support@duffelbag.ai.