Privacy Policy

We collect the following categories of information:

• Trip questionnaire answers.The preferences you provide to build a plan — trip length and dates, group type and size, whether children are in your group and their ages, budget, dining pace and style, cuisine and drink preferences, and dietary needs. Some fields are free text (for example, where you're staying, a memorable meal, venues you already know, and an “other” dietary note).
• Account and contact information. Your email address, collected when you sign in (via a one-time email code or, where enabled, Google sign-in), when you check out, or when you join a plan you were invited to. We do not store passwords.
• Purchase information. Records of your purchases and related metadata. Payments are processed by Stripe — we receive confirmation and limited details but never your full card number.
• Technical and usage information. Your IP address (stored with each plan request to enforce abuse rate limits), basic device/browser information, and — once analytics are enabled — interactions with the Service.
• Referral information. If you arrive through a referral link, we store a referral code (in a cookie and, if you create an account, on your profile) to attribute the referral.
• Generated plans. The itineraries we create for you, saved so you and people you invite can access them.

Some questionnaire fields may reveal sensitive details — for example, dietary restrictions (which can imply health or religious practices) or the ages of children traveling with you. Providing these is optional, and we use them only to personalize your itinerary. We do not use them for advertising or sell them.

• To generate, save, and deliver your personalized itineraries.
• To process purchases and provide customer support.
• To create and manage your account and shared/group plans.
• To protect the Service — including detecting abuse and enforcing rate limits using your IP address.
• To operate referrals and, where applicable, attribute them.
• To understand and improve the Service through analytics (once enabled).
• To comply with legal obligations and enforce our terms.

We share information with trusted providers who process it on our behalf to run the Service. We do not sell your personal information. Our providers currently include:

• Supabase — database hosting and authentication.
• Anthropic (Claude) — generates your itinerary; receives your questionnaire answers as input to do so.
• Stripe — payment processing.
• Google Maps / Places — venue details, hours, photos, and map links.
• Resend — transactional and operational email.
• Vercel — website and application hosting.
• PostHog and Google Analytics 4 — product analytics, governed by your choice in our cookie banner (opt-in for EU/UK/EEA and California visitors; opt-out elsewhere). These are not yet active and will only begin collecting data once we enable them; see our Cookie Policy.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a business transfer (such as a merger or sale of assets).

We use a small number of cookies and similar technologies for essential functionality and (once enabled) analytics. For a full breakdown and your choices, see our Cookie Policy.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing.

• California (CCPA/CPRA). California residents may request access to and deletion of personal information and may opt out of “sale” or “sharing.” We do not sell or share your personal information as those terms are defined under California law.
• Everyone. You can ask us to access, correct, or delete your information at any time.

To exercise any right, email getlocalzonly@gmail.com. We will not discriminate against you for exercising your rights, and we may need to verify your identity before responding.

The Service is intended for adults and is not directed to children. We do not knowingly collect personal information directly from children. If you tell us the ages of children in your travel group, we use that only to tailor your itinerary — it is information you provide as an adult, not information collected from a child. If you believe a child has provided us personal information, contact us and we will delete it.

We keep personal information for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Questionnaire answers entered but not submitted stay only in your browser (see the Cookie Policy). You can request deletion of your account data as described above.

We use reasonable administrative and technical safeguards to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We operate in the United States, and your information will be processed there. If you access the Service from outside the U.S., you understand your information will be transferred to and processed in the U.S., which may have different data-protection laws than your country.

We may update this Privacy Policy from time to time. We will revise the “Effective” date above and, for material changes, take reasonable steps to notify you.