Privacy policy
Last updated Oct 13, 2026 · Terms
The short version
- Manifest reads your Gmail only to find travel bookings and put them on your trip. It can't send, change or delete your email.
- We don't sell your data, show ads, or use your email to train AI models.
- Your trips are private until you share them, and you choose who with.
- You can disconnect Gmail at any time, and delete your account and everything in it yourself, from the Account page in your profile menu.
Who we are
Manifest is a trip-planning app at sharemanifest.com, run by Manifest Services, based in St. George, Utah, United States (“we”, “us”). We decide how the information described here is used. Questions and requests go to privacy@sharemanifest.com.
What we collect
- Your account
- You sign in with Google or with a code we email you; Manifest has no passwords of its own. From Google we receive your name, email address, profile photo and Google account ID. With an emailed code we have only your email address, and a name if you add one. We use them to sign you in and to show the people on your trips who you are. To stop abuse of the sign-in form we count the codes sent to an address, and asked for from a network address, in a scrambled form, for up to two days.
- What you plan
- Trips (name, destination, dates, kind, icon) and everything on them: plans, bookings and ideas, with their times, places, confirmation numbers and notes, and who you’ve invited: when you invite someone by email, we keep the address you typed with that trip until they join, you cancel the invite, or the trip is deleted. Also the other ideas you suggest for a plan and which one you say you’re in on; the people on that trip can see both. When someone brings an idea or a plan changes, we keep a note of it for each person it concerns, to mark it in the app and email them about it, and we keep which trips you’ve asked not to be emailed about.
- Group Planning
- On a trip or event with Group Planning switched on, the people planning it can add details to it and to each activity (a cost, a due date, who’s responsible, links, notes, and contact details, which may be someone else’s), keep a list of options with details of their own, and comment. We keep those, and a record of what each planner added, changed, chose and said, to show them the event’s activity. Only the people planning that event can see any of it. When someone adds a link, our server opens that page once to read its title, which is kept as the link’s label.
- Bookings from Gmail
- If you connect Gmail: see Gmail below for exactly what we read and keep.
- What you import
- Lists, links, screenshots, PDFs and spreadsheets you add with “Import ideas” are read once to find the places in them and are not stored. The ideas you choose to save are.
- Feedback
- If you send feedback, we keep your note along with the page you were on, your device and browser, and the app version, so we can reproduce what you saw.
- Beta requests
- If you ask for a spot in the beta before you have an account, we keep the email address you gave, anything you told us about what you’re planning, and whose trip link you came from, so we can decide and write back. To stop abuse of that form we count requests against a scrambled form of your network address for up to two days; the address itself isn’t kept. If you sign in from a trip’s link instead, we keep your email address and whose trip the link was for.
- How the app is used
- Which screens are visited and a few actions, like creating a trip. See Analytics and cookies.
Gmail
Connecting Gmail is a separate step that you can skip: signing in never asks for it. Nothing below happens unless you connect it.
What we look at
- Manifest asks Google for read-only access. It cannot send, delete, label or change any email.
- It searches your mailbox for messages that look like travel bookings (flights, stays, car rentals, restaurant reservations, tickets), skipping Gmail’s Promotions and Social tabs. The first check covers the last 120 days; you can widen it to a year. After that it looks only at new mail, when you open the app, at most every 15 minutes.
- For each match it first reads only the sender, subject line and Gmail’s short preview. Only messages that still look like a booking are opened: up to 12,000 characters of the message’s text are read and sent to Anthropic’s Claude, which picks out the booking’s details.
What we keep
- For each booking found: what kind it is, its title, dates and times, place, confirmation number and notes, the email’s subject line and sender, Gmail’s ID for the message, and which of your trips it belongs to.
- For messages that matched the search but turned out not to be bookings: the subject line, the sender and the message ID, so we never read them again.
- We do not keep the text of your emails, and we never read attachments.
- A token from Google that lets Manifest keep checking without asking you again. It is stored on our servers and never sent to your browser.
Shared trips
If you’re on someone else’s trip, bookings Manifest finds in your Gmail for those dates appear on that trip for everyone on it to see, marked as found in your Gmail, until someone keeps or removes them.
Turning it off
In Manifest, open your profile menu, then Gmail, then Disconnect. That revokes our access with Google and deletes the stored token. Bookings already on your trips stay until you remove them or ask us to delete them. You can also remove Manifest’s access from your Google account’s permissions page.
Google API Services User Data Policy
Manifest’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In practice, that means:
- We use Gmail data only to find your bookings and put them on your trips: features you can see and use.
- We transfer it only to provide those features (to Anthropic, to read a booking), for security, to comply with the law, or as part of a merger or sale of Manifest with notice to you.
- We never use it for advertising, and never sell it.
- No person reads it unless you ask us to (for example, to fix a booking that came in wrong), it’s needed for security or to investigate abuse, or the law requires it.
- We don’t use it to develop, improve or train AI models, and Anthropic does not train its models on what we send it.
How we use it
- To run Manifest: your calendar, travel times, opening hours, sharing and import.
- To fix problems and decide what to build, from feedback and usage counts.
- To keep the service secure and prevent abuse.
We don’t sell your data, show you ads, or build a profile of you for anyone else.
Analytics and cookies
- Sign-in cookies keep you signed in, and a short-lived one protects the sign-in itself. Manifest doesn’t work without them.
- A time-zone cookie holds the name of your device’s time zone (for example “America/Denver”), so the pages we send you count “today” by your day rather than ours. On a first visit, before it exists, we use the time zone our host estimates from your network address; neither is stored with your account.
- Google Analytics sets cookies to count which screens are used. We send it the kind of screen, never its address: trip names, links and invite codes are removed before anything leaves your browser. Google Signals and ad personalisation are turned off.
- Your browser also remembers small preferences on your device, like whether the ideas list is open.
How long we keep it
We keep your account and what you’ve planned for as long as you have an account. When you delete your account, it and everything in it are deleted straight away (or within 30 days, if you ask us by email instead); copies in our backups are gone within 90 days as those backups are replaced. Files you import are never stored.
Your choices and rights
- Disconnect Gmail, turn off any link you’ve shared, or leave a trip, at any time.
- Delete your account and everything in it, at any time, from the Account page in your profile menu. It happens straight away and revokes Manifest’s access to your Gmail.
- Ask for a copy of your data or a correction by writing to privacy@sharemanifest.com. We’ll answer within 30 days.
- Depending on where you live, you may have further rights, for example under the GDPR or California law, to object to or restrict how we use your data, and to complain to your data protection authority. Write to us and we’ll help.
Security
Everything travels over HTTPS. Access to each trip is enforced by the database itself, so one person can’t reach another’s trips, and the keys to Google, Anthropic and the database live only on our servers. No system is perfectly secure; if something goes wrong that affects your data, we’ll tell you.
Children
Manifest isn’t meant for children under 13, and we don’t knowingly collect their data. If you believe a child has signed up, write to us and we’ll delete the account.
Where your data is processed
Manifest and the companies above store and process data in the United States and other countries where they operate.
Changes to this policy
When this policy changes, the date at the top changes with it. If a change affects how we use data you’ve already given us, we’ll tell you in the app before it takes effect.
Contact
Manifest Services, privacy@sharemanifest.com. See also our terms of service.