1. Information We Collect

We collect information you provide directly to us, including:

Account information (email, display name)
Google OAuth data: When you sign in with Google, we receive your email address, display name, and profile picture from Google
Trip details (destinations, dates, budget, group size)
Quiz responses for personality profiling (travel pace, budget preferences, activity interests, dietary restrictions)
Usage data and preferences

2. How We Use Your Information

We use the information we collect to:

Generate personalized travel itineraries
Match group preferences for trip planning
Improve our AI recommendations
Communicate with you about your trips
Ensure the security of our platform

3. Quiz Data Privacy

Your quiz responses are private. Individual answers are never shown to other trip members. Only aggregated, anonymized preference data is used by our AI to generate group itineraries. You can delete your quiz responses at any time.

4. Data Sharing

We do not sell your personal information. We share data with the following third-party services:

OpenAI: We send trip details (destination, dates, budget, group preferences, personality scores, dietary restrictions) to generate itineraries. We do NOT send your email address or personal identity to OpenAI.
Google Analytics: We use Google Analytics (ID: G-YT3SPPV50Q) to understand how visitors use our site. This collects anonymous usage data such as pages visited and time on site.
Google reCAPTCHA: We use reCAPTCHA v3 to prevent automated abuse. This may collect interaction data to distinguish humans from bots.
Hosting Providers: Our backend is hosted on Railway and our frontend on Netlify. These services store and process data necessary to operate the website.

5. Cookies and Local Storage

We use your browser's localStorage to store authentication tokens (JWT) for keeping you logged in. We do not use cookies for tracking purposes. However, third-party services may set their own cookies:

Google Analytics may set cookies to track site usage
Google reCAPTCHA may set cookies for bot detection

6. Data Location

Your data may be stored and processed in the United States and other countries where our service providers operate. This includes:

OpenAI servers for itinerary generation
Railway (backend hosting) and Netlify (frontend hosting) infrastructure
By using our service, you consent to the transfer of your data to these locations

7. Guest Users

Guest users who join trips via shareable links have their data stored temporarily. Guest sessions expire after 30 days of inactivity. Guests can convert to full accounts to retain their data permanently.

8. Data Retention

We retain your data for as long as your account is active. You can request deletion of your account and all associated data at any time through your account settings or by contacting us.

9. Security

We implement industry-standard security measures including encryption, secure authentication, and regular security audits to protect your information.

10. Your Rights

You have the right to:

Access your personal data
Correct inaccurate data
Delete your account and data
Export your data
Opt out of marketing communications

EU Users (GDPR)

If you are in the European Union, you have additional rights under GDPR including:

Right to access and receive a copy of your personal data
Right to rectify inaccurate personal data
Right to erasure (right to be forgotten)
Right to restrict processing of your data
Right to data portability
Right to object to processing

California Users (CCPA)

If you are a California resident, you have rights under the CCPA including:

Right to know what personal information we collect
Right to delete your personal information
Right to opt-out of the sale of personal information (note: we do not sell your personal information)
Right to non-discrimination for exercising your rights

To exercise any of these rights, please contact us at flyingbearsjapan@gmail.com

11. Age Requirements

Our service is intended for users who are 18 years of age or older. Users under 18 may use our service only with the consent and supervision of a parent or legal guardian. We do not knowingly collect personal information from children under 13.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us at flyingbearsjapan@gmail.com

Privacy Policy