Privacy Policy

Effective date: 5 September 2026

This Privacy Policy explains how Tralendr, operated by The Walking Universe ("Tralendr", "we", "our", "us"), collects, uses, shares, and retains your information when you use our website at tralendr.com, our iPhone and Android apps, and our connectors for AI assistants such as Claude, ChatGPT, Gemini, and Mistral (together, the "Service"). It also explains the controls you have over your information. By using the Service you agree to this policy.

1. Information we collect

1.1 Information you provide

• Account information: your email address, and optionally your name, gender, date of birth, home city, and whether you want our newsletter. We sign you in with a one-time code sent to your email, so we do not store a password you choose.
• Trip content: the trips you create or save, including destinations, dates, the places you add, visit times, notes, and traveller type.
• Support messages: the name, email, and message you send us through our support form or by email.

1.2 Information collected automatically

• Log and device data: such as your IP address, browser or device type, operating system, referring pages, and actions taken in the Service, used for security and to keep the Service working.
• Cookies and similar technologies: used to keep you signed in and, with your consent where required, for analytics. You can manage these through our cookie banner and your browser or device settings.
• Push notification identifiers: if you use our mobile app and allow notifications.
• Location (mobile apps, optional): if you allow location access in our mobile apps, we use your device's location to show where you are on your trip map. At limited moments while you are on a trip — such as opening your trip map or asking for recommendations — we also store an approximate location (accurate to roughly 100 metres, never your precise position) to make recommendations more relevant to where you are. Location is only read while you are actively using the app, never in the background, and you can withdraw permission at any time in your device settings; the app works without it.

1.3 Information from a connected AI assistant

If you choose to connect an AI assistant to Tralendr, then when you ask that assistant to create, read, update, or share a trip, it sends us only the information needed to carry out that request, for example a destination, trip dates, place names, and visit times. We do not receive your wider conversation with the assistant, only the specific tool inputs it sends to us. We also store the access tokens that let the assistant act on your account until you disconnect it. See section 5 for details.

1.4 Information from third parties

• Place details: when you add a place, we look it up through Google's mapping and places services to attach its real location, address, and category to your trip.
• Images: we may show destination or place images from providers such as Unsplash and Pexels.

2. How we use your information (purposes)

• To provide the Service: creating, storing, organising, displaying, and sharing your trips, and turning place names into real locations on a map.
• To operate connections you set up with AI assistants, so a connected assistant can create and update trips on your behalf.
• To sign you in and keep your account secure, including sending one-time login codes.
• To respond to your support requests.
• To send you service messages, and, only if you opt in, occasional product or marketing emails you can unsubscribe from at any time.
• To understand and improve how the Service is used, using analytics.
• To keep the Service safe: detecting, preventing, and investigating fraud, abuse, and security issues.
• To comply with legal obligations and enforce our terms.

3. How we share your information (recipients)

We do not sell your personal information. We share it only as described below.

• Service providers who process data for us, in these categories: hosting and infrastructure (our cloud host and Cloudflare); email delivery (Brevo); analytics (Google Analytics) and consent management (Cookiebot); maps and place data (Google Maps Platform); image providers (Unsplash, Pexels); and push notifications and related services (Firebase). They may only use the data to provide their service to us.
• AI assistant providers you choose to connect, such as Anthropic (Claude), OpenAI (ChatGPT), Google (Gemini), or Mistral. When connected, trip information flows between that assistant and Tralendr to carry out your requests. Those assistants are operated by other companies under their own terms and privacy policies, which govern what they do with your conversation.
• People you share a trip with: if you create a share link for a trip, anyone who has that link can view that trip without an account. Sharing is your choice and can be undone.
• Legal and safety: when required by law, legal process, or to protect the rights, safety, and security of our users, the public, or Tralendr.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honour this policy.

4. How we retain your information (retention)

• Account and trips: kept for as long as your account is active, until you delete a trip or delete your account, after which we remove it from our live systems.
• One-time login codes: expire within about 10 minutes.
• AI assistant access tokens: access tokens are short lived (about one day) and refresh tokens last up to about 90 days. When you disconnect an assistant, its access is revoked immediately, and expired tokens are deleted automatically by a routine cleanup.
• Location information: approximate location points from the mobile apps are deleted automatically after 90 days, and immediately if you delete your account.
• Guest and temporary session data: retained for a limited period and then automatically purged.
• Logs and analytics: retained for a limited period for security, debugging, and product analysis, normally no more than 12 months.
• Backups: residual copies may persist in secure backups for a limited additional period before being overwritten.

We may keep information longer where the law requires it or to resolve disputes and enforce our agreements.

5. Connecting an AI assistant

Connecting an AI assistant is optional. When you connect one, you sign in to Tralendr and approve what the assistant is allowed to do, described in plain terms as viewing your trips, creating and editing your trips, and viewing or updating your basic profile. We then issue access tokens that let the assistant act on your account within those limits.

You can see and revoke connected assistants at any time in the Connected apps section of your Tralendr profile. Revoking access takes effect immediately. The assistant itself is run by a separate company, and its handling of your conversation is governed by that company's own privacy policy.

6. Your rights and controls

• Access and update: view and edit your profile and trips at any time in the app or website.
• Delete your account and data: you can delete your account, which removes your trips, from the delete account page.
• Disconnect AI assistants: revoke any connected assistant's access from the Connected apps section of your profile.
• Marketing: unsubscribe from marketing emails using the link in any such email.
• Cookies: manage your choices through our cookie banner and your browser or device settings.
• Regional rights: depending on where you live, you may have rights to access, correct, delete, port, or object to the processing of your personal data, and to withdraw consent. To exercise these, contact us at [email protected]. You also have the right to complain to your local data protection authority.

7. Data security

We use reasonable technical and organisational measures to protect your information, including encryption in transit and scoped, revocable access for connected assistants. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Where local law sets a higher age of digital consent, that age applies. If you believe a child has provided us information, contact us and we will delete it.

9. International transfers

We operate internationally, and your information may be processed in countries other than your own, including by the service providers listed above. Where required, we use appropriate safeguards for such transfers.

10. Third-party links

The Service may link to third-party sites and services we do not control. Their privacy practices are governed by their own policies, which we encourage you to review.

11. Changes to this policy

We may update this policy as the Service evolves. We will post the updated version here with a new effective date, and for significant changes we will take reasonable steps to notify you.

12. Contact us

Questions about this policy or your data? Contact us at [email protected]. See also our terms of service.