Privacy Policy

1. Who we are

Journery is a collaborative travel-planning platform operated by its creators located in Peru. Since a formal legal entity has not yet been registered, the creators and operators of the platform act as the data controllers. For privacy questions, contact us at [email protected].

2. Information we collect

• Account information. When you sign in with Google, we receive your name, email address, profile picture, and a Google account identifier.
• Trip content. Trips and itinerary items you create (flights, places, food, events, bookings, accommodation), descriptions and notes, shared expenses and budgets, uploaded booking documents and receipt images, and invitations.
• Location data.Coordinates of places you add to a trip, and — only if you turn it on — your device's live location shared with other members of that trip. Live location sharing is opt-in and stops the moment you disable it.
• Usage and device data. Log data such as IP address, browser type, and actions taken in the app, used for security, debugging, and product analytics.
• Cookies. See section 6.

3. How we use your information

We use the information above to:

• provide, operate, and maintain the Service;
• enable collaboration, sharing, and invitations between trip members;
• power AI features (see section 4);
• operate the credits and subscription/billing system;
• secure the Service, prevent abuse, and debug issues;
• communicate with you about the Service; and
• comply with legal obligations.

4. AI features

Some features send trip data — including itinerary items, destinations, spendings, and the prompts you write — to Google's Gemini API to generate day plans, place suggestions, budget estimates, receipt extraction, and travel insights. AI output is generated automatically, may be inaccurate or incomplete, and is not professional travel, financial, or legal advice. We are not responsible for any decisions made, actions taken, or losses incurred based on these AI suggestions.

5. Third-party services

We rely on the following service providers, each of which processes data under its own terms:

• Google — Sign-In / OAuth (authentication), the Gemini API (AI generation), and Google Maps Platform (maps, places, time zones).
• Supabase — database, file storage, and hosting infrastructure.
• Open-Meteo — weather forecasts (receives destination coordinates only).
• open.er-api.com — currency exchange rates (receives currency codes only).
• Upstash — rate limiting, where enabled.

We do not sell your personal information.

6. Cookies

Journery currently uses only strictly-necessary cookies: an authentication session cookie, a journery-locale language-preference cookie, a theme-preference cookie, and a journery-cookie-consent cookie that records your choice in the consent banner. We do not currently use advertising or cross-site tracking cookies. If this changes we will update this Policy and obtain consent where required.

7. Sharing within trips

Trip content is visible to the members you invite to that trip. If you enable a public share link, a read-only version of the trip and its calendar feed becomes accessible to anyone who has the link, until you disable it.

8. Data retention

We keep your data while your account is active. When you delete your account we delete your personal data as described in section 9; certain records may be retained where required by law or for legitimate security and business purposes.

9. Your rights

Depending on where you live — including the EU/EEA and UK under the GDPR, and California under the CCPA/CPRA — you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. You can delete your account and associated personal data at any time from the Account page. To exercise other rights, contact us at [email protected]. You may also lodge a complaint with your local data-protection authority.

10. International transfers

We and our service providers operate in the United States and other countries. Your data may be processed in countries other than the one in which you live, which may have different data-protection laws.

11. Children

The Service is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal data.

12. Changes to this Policy

We may update this Policy from time to time. We will post the revised version with a new "Last updated" date and, for material changes, take additional steps to notify you.

13. Contact

Questions about this Policy? Email [email protected].