Privacy Policy

Kairo is a travel planner operated by Shashwat Koranne, an individual based in California, USA (“Kairo”, “we”, “us”). This policy explains what we collect when you use the Kairo website, why, and the choices you have. For people in the European Economic Area, the UK and Switzerland, we are the “controller” of your personal data.

Questions or requests: [email protected].

When you sign in with Google

Your name, email address and profile photo. We never see your Google password.

What you choose to tell us

• Profile: a bio, home city and airport, the country of your passport (used only to check entry rules), links to your social profiles, and personal interests.
• Travel preferences: things like pace, budget, food, places to stay, flight preferences, who you usually travel with, children’s ages, and accessibility or walking needs.
• Your profile: your username, whether your profile is public or private, whether people can find you in search, and which of your saved places you mark as loved, with any short note you add.
• People: your friends and friend requests, who you follow, who follows you, follow requests, and anyone you block.
• Trips: destinations, dates, must-see places, itineraries, messages you send to the trip planner, places you save, your wishlist, and bookings you track (including any notes, addresses or confirmation links you add).

All of this is optional except what a feature needs to work (a trip needs a destination, for example). Accessibility needs and children’s ages are only used to plan trips that work for you, and you can remove them at any time in your profile.

Collected automatically

• Usage counts: anonymous page views through Vercel Web Analytics, which uses no cookies.
• How the app is used: through Google Analytics, pages visited and actions such as making a plan, sharing a trip or following someone, with your browser, device type and approximate location (from your IP address). It isn’t linked to your name or email, and isn’t used for advertising.
• Security data: your IP address, used for a short time to limit abuse (for example, too many requests in an hour).
• Reports: if you report a shared trip or profile, what you tell us and, if you’re signed in, your account.
• Records of AI use: how much AI processing each request used, so we can keep costs and fair-use limits in check.

We don’t use your device’s GPS location. Where we show things near you, we use the home city you gave us.

• To plan, save and update your trips, and to show the right flights, stays and things to do for your dates.
• To personalise recommendations, for example places that suit your interests or are close to home.
• To keep the service secure, prevent abuse and enforce fair-use limits.
• To understand, in aggregate, which features are used, so we can improve them.
• To reply when you contact us.

Kairo gets better as more trips are planned. When an itinerary is created, the places in it (their names, locations and categories) are added to a shared library used to plan future trips for everyone. Generated itineraries may also be reused for another traveller who chooses exactly the same destination and settings.

Neither includes your name, email, profile or anything else that identifies you. Avoid writing personal information into must-see places or trip notes.

Your profile. Every account has a profile and a username, made from your name when you sign up (you can change it). Anyone can see its basics: your first name, profile photo, username, and how many friends and followers you have and how many people you follow.

Your profile is private unless you make it public. On a private profile, your bio and the trips you put on it are seen by your followers and friends, and the places you chose to show there only by your friends. On a public profile, anyone can see them, and search engines may show them. Your profile never shows your email, full name, home city or social links, and never shows trips you haven’t shared.

Finding people. Signed-in people can search for you by name or username and see your profile basics. You can turn this off with “Let people find me” in your settings; your profile link still works for anyone you give it to.

Following and friends. Following is one-way and doesn’t need your approval; you can remove a follower or block them. Connecting is a friend request you accept or decline; once you accept, you’re friends and follow each other. Your lists of friends, followers and people you follow are visible only to you. If you block someone, any follow, request or friendship between you ends, they can’t find, follow or connect with you, and your profile and shared trips show as not found to them while they’re signed in.

Sharing a trip. Every trip is yours alone until you share it. You choose, trip by trip: only me, on my profile (seen by whoever can see your profile), or anyone with the link (anyone you send it to, even without an account). You can stop sharing at any time, and its page stops working straight away. A shared trip shows:

• its cities, how many days it lasts, and the day-by-day plan with its places and photos;
• places you marked as loved in those cities, with your note;
• your first name, profile photo and username.

It never shows where you stay, your flights, your travel dates, bookings, notes, budget or planner settings. Once a trip is over, its month and year are shown (for example “May 2027”). While you have a shared trip to a city coming up, places to stay you loved there are left off your profile.

When someone uses your shared trip to start their own, they get a private copy of the plan as shown above. If you later delete your trip or stop sharing it, copies already made stay with the people who made them.

We don’t sell your personal information or share it for advertising. Apart from what you choose to share yourself (above), we share it only with the services that run Kairo for us, and only what each one needs:

• Anthropic (AI): your trip details, preferences and planner messages, to write and edit itineraries. Under its commercial terms, Anthropic doesn’t use this data to train its models.
• Google Analytics: usage data as described above, to see how Kairo is used and improve it. Advertising features are off.
• Vercel (hosting and anonymous analytics), Neon (database) and Cloudflare (image storage): to store and serve the app and your data.
• Google: sign-in; Maps and Places, to show maps and look up places (your browser loads Google Maps directly).
• Travel Buddy (entry rules): only your passport country and the destination country, to check what you need to enter. When its monthly allowance is used up, Anthropic checks official government websites instead, with the same two countries. Neither receives account information, and the answer is shared with everyone holding the same passport.
• OpenStreetMap, Open-Meteo, Wikipedia and Viator: place names, coordinates or destinations, to find locations, weather, photos and things to do. They receive no account information.

Booking partners. When you follow a link to Google Flights, Booking.com, Viator or another partner, you leave Kairo and that partner’s privacy policy applies to anything you give them. Some links tell the partner the visit came from Kairo, so we may earn a commission. They don’t tell the partner who you are.

We may also disclose information if the law requires it, to protect someone’s safety, or as part of transferring the service to a new owner, who would have to honour this policy.

We use two kinds of cookie: the one that keeps you signed in, which the service needs to work, and Google Analytics cookies, which tell us how Kairo is used. We don’t use advertising cookies. In the European Economic Area, the UK and Switzerland, Google Analytics cookies are only set if you allow them, and we ask once; you can change your answer by clearing this site’s data in your browser.

Your browser also stores a few conveniences locally, such as photos already loaded or a card you dismissed. Clearing your browser’s site data removes them.

• Your account, profile and trips: until you delete them or ask us to delete your account.
• A trip you delete is removed with its itineraries straight away.
• When you delete your account in your profile settings, your personal information is deleted straight away. If you ask us by email instead, we do it within 30 days. We keep only what the law requires.
• Shared pages stop working as soon as you make a trip private, delete it, or delete your account.
• Reports about shared pages are kept while we review them and for up to a year after.
• Security records that include your IP address (rate limits) are deleted within two days.
• The shared library of places doesn’t identify you, so it stays.

Wherever you live, you can:

• See and edit your profile and preferences in your profile settings, and download them as a file.
• Delete any trip from My trips, or make a shared trip private again.
• Make your profile private or public, or stop people finding you in search, in settings.
• Remove a follower or friend, decline requests, or block someone, from People.
• Delete your account yourself in profile settings.
• Ask us for a copy of your data, to correct it, or to delete your account, by emailing [email protected] from the address you sign in with.
• Object to, or ask us to restrict, how we use your data.

We’ll reply within 30 days. We may need to confirm the request comes from you. Using these rights never changes the service you get.

The European Economic Area, the UK or Switzerland

We use your data to provide the service you asked for (contract, including showing the trips you choose to share), to keep it secure, review reports and improve it (legitimate interests), and, for optional profile details such as accessibility needs, because you chose to give them to us (consent, which you can withdraw by removing them). You have the rights of access, correction, deletion, restriction, portability and objection, and you can complain to your local data protection authority.

California

In the last 12 months we have collected the categories described in “What we collect”: identifiers, account and profile information, preferences, trip activity and usage information, for the purposes in “How we use it”. We don’t sell or share personal information as the CCPA defines those terms, and we use sensitive information only to provide the service. You have the right to know, delete and correct your information, and you won’t be treated differently for using those rights.

Elsewhere

Many countries, including Canada, Brazil, India and Australia, give you similar rights. We honour the requests above for everyone.

Kairo and the services above process data mainly in the United States. When data leaves your country, we rely on safeguards such as the European Commission’s standard contractual clauses that these providers offer.

Data is encrypted in transit, sign-in is handled by Google, and access to the database is restricted. No service is perfectly secure; if a breach affects you, we’ll tell you as the law requires.

You must be at least 16 to create an account. We don’t knowingly collect information from anyone younger. If you think a child has signed up, email [email protected] and we’ll delete the account. Children’s ages that a parent adds to plan a family trip are used only for that.

If we change this policy, we’ll update the date at the top. If a change materially affects how we use your information, we’ll tell you in the app before it takes effect.

Shashwat Koranne, California, USA. Email [email protected].