Privacy Policy

Summary

We collect the minimum we need to give you a working travel plan. Your email for auth, your trips in our database, your purchases in RevenueCat. No advertising, no third-party trackers on this website, no selling data.

Who we are

Ittineria is operated by the individual developer behind the app. You can reach us at support@ittineria.com for any privacy request.

What we collect

• Account. Email address and a hashed password, or the identifier returned by your chosen social sign-in. Stored in Supabase Auth.
• Trip content. Trips, destinations, activities, accommodations, transport connections, and any notes you add. Stored in our Supabase Postgres database.
• Subscription state. Purchase events and entitlements from the App Store / Play Store, mirrored via RevenueCat.
• AI usage counts. A small counter per account used to enforce monthly AI quotas.
• Diagnostics. Crash reports and basic platform metadata (OS version, app version). No advertising identifiers.
• Waitlist. If you sign up on this website, your email is stored in a dedicated waitlist table until launch.

What we don't

• No advertising network integrations.
• No behavioural tracking, no user-level analytics, no cookies on this website.
• No sale of your personal data to anyone, ever.
• No access to your contacts, photos, or microphone.

Third-party services we use

• Supabase — hosts our database and handles authentication. Located in the EU.
• OpenAI — processes AI suggestions. When you request an AI suggestion, the relevant trip context (cities, dates, preferences, free-text prompt) is sent to OpenAI. We do not send your email or account identifier.
• RevenueCat — processes purchase events passed to us by Apple / Google. Holds subscription state keyed to an anonymous user identifier.
• Nominatim (OpenStreetMap) — geocoding. Queries contain only the place names you type. No PII.
• Open-Meteo — weather forecasts. Queries contain only coordinates. No PII.
• Unsplash — destination images. Queries contain only city names. No PII.
• Cloudflare — hosts this website and provides aggregate traffic analytics (pageviews, referrers, country). No cookies, no individual user tracking, no cross-site identifiers.

Retention

Your account and trip data persist until you delete your account. Waitlist emails are retained through launch and deleted within 30 days after we send the launch announcement (or sooner on request).

Your rights

You can request an export of your data or deletion of your account by emailing support@ittineria.com from the address on the account. We respond within 14 days.

Cookies on this website

This marketing site does not set cookies of its own. Cloudflare Web Analytics is used for aggregate pageview counts and is cookieless by design. The only outbound request the page makes beyond loading assets is to our own /api/waitlist endpoint when you submit the form.

Changes

If we change anything material, we'll update the effective date at the top and, if you have an account, notify you inside the app.

Contact

support@ittineria.com