What we collect, why, and how to delete it.

• We store only what's needed to run the product: your email, your trips, your chat history.
• We never sell your data. We never share it with advertisers.
• When you book through a partner link, that booking happens on the partner's site (Booking.com, Skyscanner, etc.) under their privacy terms — not ours.
• You can export everything or delete your account at any time from Settings.

When you create an account, we store your email and (optionally) your name and password hash. Passwords are hashed with bcrypt — we cannot read them.

When you plan a trip, we store the trip details, the AI-generated itinerary, your edits, and any bookings you log manually. When you chat with the AI assistant, we store the conversation so you can come back to it.

We do not store: your payment card details, your bookings on third-party sites, your real-time location.

The AI assistant and itinerary generator are powered by Anthropic's Claude API. When you generate an itinerary or send a chat message, the relevant trip context is sent to Anthropic's servers to produce a response.

Per Anthropic's API terms, prompts and responses are not used to train their models. You can read Anthropic's privacy policy at anthropic.com/privacy.

We deep-link to real booking providers (Booking.com, Skyscanner, Kayak, Airbnb, Google Flights, Google Maps, Uber) when you search. Clicking a result opens that site in a new tab. Any data you enter on those sites is governed by their own privacy policies — we do not see or store it.

For weather forecasts we call Open-Meteo. For currency conversion we call Frankfurter. Neither receives any personal data about you.

We use a single first-party cookie to keep you logged in (JWT). We do not run third-party analytics, advertising trackers, or fingerprinting scripts. There is nothing to "accept" — the cookie is essential for the product to function.

• Access: download all your data from Settings → Export.
• Erasure: delete your account from Settings → Danger Zone. All trips, itineraries, and chats are removed.
• Rectification: update profile info from Settings.
• Portability: exports are in standard JSON.
• Object: email hello@aitripplanner.app with any objection.

Our database is hosted in [region — to be confirmed at launch]. All connections use TLS. At rest, the database is encrypted by the hosting provider.

The service is not directed at children under 13. We do not knowingly collect data from anyone under 13.

If we materially change this policy, we'll email registered users at least 14 days before the change takes effect.

Privacy questions or concerns: privacy@aitripplanner.app