Privacy policy

• Your trip answers. Why you are travelling, who is coming (including children’s ages and any help getting around, if you tell us), where and when, flights you have booked, budget, pace, interests, food needs, how you like to get around, and what to include or avoid.
• The itinerary we generate from those answers.
• Your account, if you create one: your email address and, if you choose, a display name. Passwords are handled by our authentication provider and are never visible to us. If you sign in with Google, we receive your name, email address and profile picture from Google.
• Usage records: when an itinerary was generated, whether it succeeded, how long it took and how much processing it used — to enforce plan limits and keep the service reliable.
• A keyed hash of your IP address, used to limit how often requests can be made, kept with an account when it is created to spot mass sign-ups, and with administrator actions. We do not store your raw IP address.
• Subscription status, if you subscribe. Payment details are collected by Paddle, not by us.
• Product measurement and error records, described below. Neither identifies you.

An itinerary generated without an account is not stored on our servers. It stays in your browser tab. If you choose “Save this trip”, a signed copy of it is kept in that tab until you sign in, and it is then saved to your account. If you close the tab first, it is gone.

To count the free itineraries available without an account, we set a cookie holding a random identifier. It lasts a year and contains nothing about you.

• Sign-in cookies that keep you signed in, and a cookie that tells the page whether you are signed in.
• The anonymous identifier described above.
• In your browser only: your light or dark theme choice, and — for the current tab — interview answers kept while you sign in, a trip waiting to be saved, and the random visit id used for measurement below.

We use no advertising or tracking cookies and no third-party analytics.

To learn whether the product is useful, we count how many visits reach each step: the home page, starting and finishing the interview, seeing a result, the pricing page, and starting a checkout. We do this ourselves, with no analytics company involved.

• A visit is a random id your browser keeps for the current tab only, in session storage — not a cookie. It is deleted when you close the tab and is never linked to your account.
• Each record holds the step, the time, and whether you were signed in (not who you are). Interview and result steps also note the kind of journey (vacation, honeymoon and so on); a home-page visit notes only the website that linked to us and any campaign tag in the link.
• We never record your IP address, browser or device details, cookies, trip answers or destination for measurement. Your IP address is used, hashed, only to limit how often these records can be sent.
• Starting a checkout is recorded by our server, with the plan chosen.

Generation results, saved trips and payments are already part of the records described above; we count those directly rather than tracking them again.

When our server hits an unexpected error, we keep a short record so we can fix it: the kind of page or request (its pattern, never its address or contents), the method, the type of error and a brief message. No request content, cookies or information about you is kept with it.

• Supabase — database and sign-in.
• Vercel — hosting.
• OpenAI — your trip answers are sent to OpenAI’s API to generate the itinerary.
• Geoapify — destination search as you type, and looking up the places in your itinerary by name.
• Google Maps Platform — place details, photographs, travel times and maps. When a map is shown, it loads from Google in your browser.
• Wikimedia Commons — destination and place photographs, fetched by our server; your browser does not contact Wikimedia.
• Paddle — payments, as the merchant of record. Paddle’s own privacy policy applies to what you give them at checkout.

These providers may process data outside your country.

• Saved trips: until you delete them or your account.
• Place details looked up for a trip: up to 30 days, then refreshed or dropped.
• Usage and billing records: as long as needed for plan limits, billing and our legal obligations.
• Measurement and error records: 90 days.

You can ask to see, correct or delete your data, or delete your account, at any time by emailing fuadhasanemon8@gmail.com. We will act on it and confirm when it is done.

The service is not intended for anyone under 16. Information about children is only what an adult enters when planning a family trip.

When this policy changes, the date at the top changes too. Significant changes will be announced on the site. Questions are welcome on the contact page.