Privacy policy

Account: email address, hashed password, optional display name, preferred language, and creation and update dates.

Trip: destination, number of days, trip type, budget, preferences, generation language and generation status.

Itinerary: days, activities, place names and categories, descriptions, time slots, addresses, coordinates, ratings and associated photos.

Credits: balance, credits used and transaction history (bonus, generation or refund) linked to an itinerary.

Analytics: when you consent, we collect PostHog usage events, page views, technical browser and device information, campaign parameters and, after login, a user identifier associated with your email address.

We use this data to authenticate users, save itineraries, verify available credits, generate personalized plans, display your dashboard and diagnose errors.

Destination and preference data is used to search for relevant places and to ask the artificial intelligence provider to produce a coherent itinerary.

Analytics data is used to understand service usage, measure key journeys, improve the experience and identify friction points.

Place searches may be processed by Google Places to provide suggestions, addresses, coordinates, ratings and photos.

Information needed for generation may be sent to an artificial intelligence provider to produce the itinerary.

Analytics is processed by PostHog. The application is configured to use PostHog’s European host when analytics is enabled.

Hosting, the database and technical logs may be processed by infrastructure providers selected to operate the service.

PostHog is disabled by default and only starts collecting events after you accept from the cookie banner. You can decline non-essential analytics from the same banner, then reopen the settings from the footer.

If you accept, PostHog may use local storage and cookies to keep your choice, recognize a session, measure page views and link anonymous events to your account after login.

Cookies strictly necessary for the operation of the service, such as authentication or security, may be used without consent when they are essential.

Account, credit and itinerary data is kept while the account remains active or as long as needed to provide the service.

You can request deletion of your account or your data at getyourways@outlook.com. This deletion may be handled manually.

Depending on your country, you may request access to, correction, deletion, restriction of, or objection to the processing of your data.

To exercise these rights, contact getyourways@outlook.com. We may verify your identity before processing the request.

Passwords are stored in encrypted form and protected access relies on token-based authentication.

No transmission or storage method is completely fail-safe, but the service applies reasonable technical measures to protect your data.