Privacy Policy

1. Who we are

PathChudo ("we") operates a travel planning service. This Privacy Policy explains how we process personal data when you use our website and API.

Contact for privacy requests: [email protected].

2. Data we collect

Account and profile: email, password (hashed), name or display name, public user id, timezone, language, unit and currency preferences, avatar, and related preference data.

Trip and product content: itineraries, days, stops, activities, checklists, packing lists, budgets, share settings, notification settings, and related planning data you create.

If you use collaborators, we process collaborator identities and related sharing data.

Contact and support: messages you send through the Contact form or support channels, including your name, email, topic, and message content.

Google sign-in: Google user identifier, email, and name when you sign in with Google.

Public shared content: information you make visible on shared or public trips (for example title, itinerary details, and cover image).

Third-party people data you enter: names or other details about companions or other people you add to trips or packing lists. Only enter data you are allowed to process.

Security and technical data: login events, IP address, user agent, CSRF and session metadata, and rate-limit signals.

3. Purposes and legal bases

We process data to provide the service (contract), secure accounts and prevent abuse (legitimate interest / legal obligation), send account emails (contract), and comply with law.

Sending data to Open-Meteo, LocationIQ, Unsplash and Sightengine is necessary to provide the feature you request (contract), and for Sightengine also our legitimate interest in keeping the service safe.

We process payment-related data to fulfill paid plans or donations (contract).

We may run optional analytics after you choose Accept in the cookie banner (consent).

We may run optional client diagnostics after you choose Accept in the cookie banner (consent).

4. Core processors and infrastructure

We use providers who process data on our behalf. We do not sell your personal data.

Resend — transactional email (verification, password reset, and similar notices).

Cloudflare — DNS, CDN/Pages hosting, and object storage (for example avatars, covers, and attachments).

Timeweb Cloud — server hosting (EU: Amsterdam / Frankfurt).

MapLibre with OpenStreetMap data — interactive map display. Map tiles are served by CARTO; your IP address and the viewed map area are sent to it.

Open-Meteo — weather forecasts used for packing and planning features (location and date context).

DiceBear — optional avatar image generation; we store the resulting file in our storage.

5. Google sign-in

Google provides identity data (such as email and name) subject to Google's privacy policy. You can disconnect social login where the product allows.

6. Google Calendar sync

If you connect Google Calendar, we process calendar tokens (stored encrypted) and event data needed to sync trip events. You may revoke access from Google account settings and in-app controls where available.

7. Stripe

Stripe processes payment and subscription data. We store plan status and provider identifiers; we do not store full card numbers.

8. Lava

Lava processes related payment data under its terms. We store status needed to fulfill entitlements or donation flows.

9. PayPal

PayPal may process payment data as an independent controller for the donation checkout.

10. AI providers

Prompts and context you submit (trip fields, packing preferences, and similar) may be sent to the configured model provider (for example Anthropic, Google Gemini, or an OpenAI-compatible host).

Do not submit secrets or third-party personal data you are not allowed to process. Model outputs can be inaccurate.

11. Booking import

Text or files you upload (for example booking confirmations) may be parsed using AI and stored as trip content you accept. Only submit materials you are allowed to process.

12. Web Push

If you subscribe to push notifications, we store a browser push subscription endpoint to deliver trip reminders.

13. Unsplash

Search queries may be sent to Unsplash to retrieve cover images. Use of photos remains subject to Unsplash guidelines.

14. Content moderation

User-submitted text and images (for example public trip content or testimonials) may be sent to Sightengine to check for policy violations before publication.

15. Google Analytics

We may measure product usage after you choose Accept in the cookie banner. Event payloads are designed to avoid email or username.

16. Sentry

After you choose Accept, the Sentry browser SDK may send error diagnostics including IP address, URL, stack traces, and technical device context. Data may be processed in the United States (see International transfers). We do not use Sentry Session Replay. Choosing Essential only or resetting consent stops the browser SDK. Server-side Sentry may still process technical logs needed to run the API.

17. LocationIQ

LocationIQ processes location queries (coordinates or search text) to return place results. The LocationIQ key stays on our servers.

LocationIQ processes route waypoints to return geometry and travel estimates.

LocationIQ Static Maps may generate map images for trip PDF day maps.

18. CARTO

CARTO may process IP address and map tile requests to render interactive maps (OpenStreetMap data).

19. International transfers

Primary processing of account and trip data runs in the EU on Timeweb Cloud servers (Amsterdam / Frankfurt). Transfers to the US (Cloudflare, Resend, Sentry and others) rely on the EU-US Data Privacy Framework or Standard Contractual Clauses. Contact [email protected] for details.

20. Retention

Account data is kept while the account is active. After you request deletion there is a 30-day cancellation window; then we permanently delete or anonymize your account data, except records we must keep by law. Residual data in backups or logs may persist for up to 90 days. Security logs are kept for 30 days.

Billing records may be retained as required by law.

21. Your rights

Depending on applicable law (for example GDPR), you have rights to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. We respond to requests within one month. Withdrawal of consent does not affect processing before the withdrawal. You can export your data and delete your account from Settings, or by contacting [email protected]. You may lodge a complaint with a supervisory authority.

22. Children

The service is not directed to children under 16 (or a higher age if required by local law). Do not register if you are under the applicable age.

23. Security

We use HTTPS, hashed passwords, httpOnly authentication cookies, access controls, and encrypted tokens where applicable. No method of transmission or storage is 100% secure.

24. Changes

We may update this Privacy Policy. We will notify you by email or in the service at least 30 days before material changes take effect.

25. Contact

PathChudo — [email protected] — or use the Contact page on the website.