Privacy Policy

We store only what the app needs to work:

• Account details — your email address and, if you sign in with Google, the basic profile Google returns (name and avatar). Passwords are hashed by our authentication provider; we never see them.
• Trip content — everything you type into a trip: dates, accommodation legs, flights, key bookings, park days, itinerary items and notes, ideas, budget entries, packing, shopping and dining lists, quick notes and their audio recordings.
• Files you attach — confirmation PDFs, boarding passes and photos you upload to stays, flights or bookings. These are held in private storage and are only reachable through short-lived links generated for trip members.
• Feedback and contact messages — the message, the optional email you supply, and the page you sent it from, so we can reply.
• Basic technical logs — standard server and error logs used to keep the service running and fix bugs.

We do not run advertising trackers, and we do not sell or rent your data to anyone.

• You, on any device you sign in from.
• People you invite to a specific trip using an invite link or share code. They can view and edit that trip only — never your other trips or your account.
• Anyone holding a public share link, if you choose to create one. Public share links are read-only, unlisted, and can be revoked at any time from trip settings. Treat the link like a password: anyone who has it can view that trip.
• Us, only where strictly necessary — for example to investigate a bug you report, restore data, or comply with a legal obligation.

Access is enforced in the database itself with row-level security, so a request for a trip you are not a member of is rejected by the server, not just hidden by the app.

The Trip Assistant and the voice-note transcription are optional features. They only run when you ask them to — nothing is sent to an AI provider in the background.

• Trip Assistant: when you ask for suggestions we send your question along with basic trip context — trip name, dates, the areas or parks you have saved, your stays, and the names of items already on your list — so the answer is relevant to your trip.
• Voice notes: if you choose to transcribe a recording, that audio clip is sent to a speech-to-text model and the resulting text is saved to your trip.
• We never send your email address, your name, your uploaded files, or your other trips.
• Requests are routed through the Lovable AI gateway to the underlying model providers. They process the request to return a response; suggestions are generated text and can be wrong, so always confirm opening times, prices and reservations with the venue.

• Export — download a complete JSON copy of your profile and every trip you belong to, from your Account page.
• Delete — permanently delete your account from your Account page. Trips only you belong to are deleted with all their content; trips shared with others are handed to a remaining collaborator so their planning is not destroyed.
• Revoke sharing — turn off a public share link or remove a collaborator at any time in trip settings.
• Correct or ask questions — use the Contact form and we will help.

Deletion is immediate and irreversible in the live database. Encrypted infrastructure backups may retain a copy for a short rolling period before being overwritten.

Trip data is kept for as long as your account exists, because a trip planner is only useful if your plans are still there when you return. Feedback and contact messages are kept while we are acting on them. Delete your account and the associated data goes with it.

We use a small number of providers to run the service: cloud hosting and database/authentication /file storage infrastructure, and an AI gateway for the optional assistant and transcription features. They process data on our instructions only.

Questions about this policy, or want your data removed? Use the Contact link in the app, or the feedback button on any page, and we will get back to you.