Privacy Policy

Cookies we use

We use only essential, first-party cookies needed to keep you signed in and to protect forms:

• authjs.session-token (and the __Host- variant on HTTPS), your login session, httpOnly, not readable by JavaScript.
• authjs.csrf-token: CSRF/PKCE protection during sign-in, httpOnly, transient.

We set no analytics, advertising, or tracking cookies. Stripe may set cookies on its own domain during checkout. See Stripe's privacy policy.

Data we process

• Account: your name, email and profile image from Google sign-in (verified server-side; we never receive your Google password).
• Travel data: searches, trips, and bookings you make.
• Identity vault: passenger details and passport numbers you choose to store. Passport numbers are encrypted at rest (AES-256-GCM) and are never shown in full to your browser.
• Concierge: your messages, processed by our own AI models running on our own servers. We do not send them to third-party AI providers by default.
• Payments: handled by Stripe; we never see or store your full card number.

Where your data lives

Data is stored in our own database on our own servers. Flight availability comes from our flight partner Duffel; payments are handled by Stripe. We keep the number of outside companies that handle your data to a minimum.

Place names and locations: adapted (filtered and normalized) from GeoNames data and kept on our own servers, used under the Creative Commons Attribution 4.0 license. Places are looked up on our own servers; nothing about you is sent to GeoNames.

Weather forecasts: MET Norway (Norwegian Meteorological Institute, CC BY 4.0). Open-Meteo is a backup, for forecasts and for the rare place name our own index can't resolve. These services receive only the place's coordinates or its name, never anything about you.

Your rights (GDPR)

• Access & portability: download all your data anytime from Account & settings → Download my data.
• Erasure: request account deletion from the same page. We schedule a 30-day grace period (you can cancel within it), then permanently erase your data and cancel any subscription. Step by step, with or without the app: Delete your account.
• Rectification: edit or delete stored identities at any time in the Identity Vault.

Retention

We keep your data while your account is active. After deletion, personal data is erased; limited operational/audit records may be retained where required for security and financial compliance.

Contact

For any privacy request, email [email protected].