Privacy notice
What we collect
If you sign in: your email address and, from Google, your name and profile picture. The traveller details you choose to save (name as on your passport, phone, home city, date of birth, gender, currency, dietary needs and the things you love). Your search history (what you ask it). Your passport, if you add one: encrypted before it is stored, shown to you only masked, and shared only with the airline when it books a flight for you. A record of each trip it books for you, and what it learns from them: the tastes you name, the cities you visit and the hotels you stay at. If you don't sign in, your details stay in your browser.
Why
To book flights, rooms and tables in your name, to keep your trips in one place, and to plan the next trip around what you like. Our legal basis is providing the service you asked for.
What we don't do
We don't sell your data or share it with advertisers. We never see your card details: payments go through the booking provider. Passwords aren't stored; you sign in with Google or a one-tap email link.
Who processes it
Your account is stored with our database and sign-in provider (Supabase). When it books for you, the details needed for that booking go to the airline or hotel booking provider (Duffel, LiteAPI). They act on our instructions or under their own terms for the booking.
To plan, the words of your request (not your account details) go to the services that do the work: the AI model provider (Nebius), the taste data service (Qloo), web search (Anthropic's Claude, Tavily and Wikimedia), and the map services (OpenStreetMap's geocoding and routing). A voice note goes to the speech-to-text provider (Groq) and isn't stored. When you approve an email or a call, the business's address or number, your name and the message go to the email and calling providers (Resend, Vapi). Calls say they're from an AI assistant.
How long we keep it
Until you remove it. You can edit your details, remove any saved preference, clear your search history, remove your passport and delete any trip from your account page at any time.
Your rights
You can ask to see, correct or delete your data, or withdraw consent, under the GDPR, the Nigeria Data Protection Act and similar laws. Reply to any email from us and we'll act within 30 days.