Privacy Policy

This Privacy Policy explains what personal data SavvyTravel collects, how we use it, and your rights. By using the SavvyTravel app or website you agree to this policy.

1. Data we collect

• Account data — email address, full name, and hashed password when you register. If you sign in with Apple, we receive only the anonymised Apple-issued user ID and, optionally, your name.
• Trip and itinerary data — trip names, destination names, travel dates, style preferences, and video URLs you submit for import.
• Video metadata — when you import a TikTok or Instagram Reel link, we fetch publicly available metadata (caption text, creator handle, thumbnail URL) on your behalf using third-party retrieval services (TikWM and yt-dlp). We do not store or re-host the video itself.
• Location data — when you open the in-app map or enable proximity alerts, SavvyTravel requests foreground location access (while the app is in use). If proximity alerts are active, background location access may also be requested. Location data is used solely to show your position on the trip map and to trigger proximity notifications for saved places. We do not sell or share your location data with advertisers.
• Device data — push notification token (for proximity alerts), device OS version, and app version. Collected automatically when you enable notifications.
• Usage data — crash reports and anonymous usage events for debugging. These do not contain trip content or location history.

2. How we use your data

• To provide and improve the SavvyTravel app and its features.
• To generate AI-powered itineraries using your trip details (see Section 3).
• To send proximity alert notifications when you are near a saved location.
• To authenticate your account and keep it secure.
• To respond to support requests.

3. Third-party AI processing (Gemini / Google)

When you request an AI-generated itinerary, SavvyTravel sends the following data to Google Gemini (a Google Cloud service) to generate the day-by-day schedule:

• Trip name and destination
• Travel dates and duration
• Travel style preference you selected (e.g., relaxed, packed, food-first)
• Extracted location names from imported videos

No personally identifying information (email, name, account ID) is sent to Gemini. Responses are processed on our backend (Railway) and stored in your account. Google's data handling for Gemini API requests is governed by the Google Cloud Data Processing Addendum.

4. Video and TikTok metadata processing

When you paste a TikTok or Instagram Reel link, SavvyTravel retrieves publicly available metadata for that URL via TikWM (a third-party public-video API) and, as a fallback, yt-dlp (an open-source retrieval library running on our servers). This is equivalent to fetching the public webpage of that video.

• We retrieve: caption text, video title, thumbnail image URL, and creator handle.
• We do not download, store, or re-serve the video file itself.
• Thumbnail images may be cached on our Cloudflare R2 storage (see Section 5) to reduce latency on subsequent loads.
• Only links you explicitly submit are processed. SavvyTravel does not scrape your TikTok or Instagram account.

5. Storage — Cloudflare R2

Trip data, itineraries, and cached thumbnails are stored on Cloudflare R2 object storage, served from Cloudflare's global edge network. Cloudflare's privacy practices are described at cloudflare.com/privacypolicy. Our backend API runs on Railway infrastructure (region selected for low-latency US delivery).

6. Data sharing

We do not sell your personal data. We share data only with the processors described above (Google Gemini, Cloudflare R2, Railway) to operate the service. We may disclose data if required by law.

7. Data retention

Your account data and trip content are retained until you delete your account. When you delete your account (via Settings → Delete Account in the app), all personal data and trip content associated with your account is permanently deleted from our servers within 30 days.

8. Your rights (GDPR / UK GDPR)

If you are located in the EU or UK, you have the right to access, correct, or delete your personal data; to object to or restrict certain processing; and to data portability. To exercise these rights, email support@savvytravel.app. You may also delete your account directly in the app at any time.

9. Children

SavvyTravel is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect data from children. If you believe we have inadvertently collected data from a child, contact us at support@savvytravel.app and we will delete it.

10. Changes to this policy

We may update this policy. Material changes will be notified via the app or email. The effective date at the top of this page reflects the most recent revision.

Contact

Questions or requests: support@savvytravel.app