Privacy Policy

What we collect

• Account data: when you sign in with Google, we receive and store your email, name and profile picture URL. Google is the only sign-in method; we never see your Google password.
• Trip content you create: trip names, dates and notes; member nicknames; stays, daily schedule items (place names, map links, coordinates, times, costs, notes), checklists, orders, bill-split amounts and exchange rates.
• Data other members enter about you: fellow travelers may type your nickname into a trip's member list or record what you owe in a bill split.
• Usage records: the dates you open the Service, which day of the trip it is, and when you claim your place in a trip. These records do not include your IP address, device information or the pages you visit.
• Error reports: technical details when something breaks (error message and where it happened). We do not attach your account or email to error reports.
• AI assistant connection records: the authorization you grant when connecting Claude or ChatGPT, and request IDs used to avoid creating the same trip twice.

How we use your data

• To provide the Service: showing and saving your trips, letting members of the same trip edit together, and calculating bill splits.
• Invitations and collaboration: generating invite links so fellow travelers can claim their place in a trip.
• Improving the product: using usage records to understand whether people keep using the Service during their trips.
• Operations and debugging: using error reports to find and fix problems.

We do not sell your data, use it for advertising, or use it to train AI models.

Who we share data with

We share data only as needed to provide the Service:

• Other members of the same trip: they can see the trip's shared content (such as the daily schedule, group orders and bill splits). Your personal checklist items and personal orders are visible only to you.
• Supabase: our database and sign-in provider, which stores all of the data above.
• Vercel: our web host, which handles every request (and keeps standard access logs).
• Google: when you search for a place, our server sends your search text to Google Places; places in your trip may also be sent to look up coordinates. The place preview map is an embedded Google map, and Google may set its own cookies in your browser.
• OpenFreeMap: map tiles in map view are downloaded by your browser directly from OpenFreeMap, which can see your IP address.
• Exchange-rate service (open.er-api.com): we send only currency codes, never personal data.
• Sentry: receives error reports for debugging.
• AI assistants you authorize (Claude, ChatGPT): only after you connect them, within the scope described in the next section.

When you connect an AI assistant (Claude, ChatGPT)

You can authorize Claude or ChatGPT to connect to the Service so the assistant can help plan your trips in a conversation. Once authorized:

• The assistant has the same permissions as your account. It can only access trips you belong to, never anyone else's.
• It can read your trip list and trip content, create new trips, edit a trip's basic details, add, edit or delete schedule items, stays, checklist items and orders, and add members or rename them.
• It cannot delete a whole trip, change member roles or remove members.
• We receive only the parameters the assistant sends when it calls the Service (for example, an activity to add), never your conversation with the assistant. The conversation itself is handled by Anthropic or OpenAI under their own privacy policies.
• You can disconnect at any time in the assistant's connector settings. To revoke all authorizations, email travelplanner.go.help@gmail.com.

Cookies and browser storage

• Sign-in cookies keep you logged in and are required for the Service to work.
• Browser local storage records whether you've already opened a trip today, so each usage record is logged at most once a day.
• We do not use advertising or cross-site tracking cookies. The embedded Google map may set Google's own cookies.

How long we retain data

• Account data and trip content: until you ask us to delete your account, or the trip's host deletes the trip.
• Usage records and AI assistant request IDs: kept and deleted together with the trip or account they belong to.
• Error reports: automatically deleted from Sentry after 30 days.
• Web host access logs: according to Vercel's retention policy.

Your rights: access, correction, export and deletion

• Access and correction: you can view and edit the content you create directly in the Service.
• Deleting a trip: a trip's host can delete the whole trip in its settings. All related content is deleted and cannot be recovered.
• Deleting your account or exporting your data: for now, email travelplanner.go.help@gmail.com. We will process your request and reply within 30 days.
• When your account is deleted, trips you host are deleted with it. Your nickname and bill-split records in other people's trips are kept (so their split amounts still add up) but are no longer linked to your account.

Security

All connections are encrypted with HTTPS. The database uses row-level access control (Row Level Security): every read and write is checked against your own identity, including access through an AI assistant.

Children

The Service is not directed at children under 13, and we do not knowingly collect personal data from children.

Changes to this policy

We may update this policy. When we do, we'll change the effective date on this page; for material changes that affect your rights, we'll also notify you in the Service.