SmartTrips.app is a map-first AI trip planner operated by Eastbase Studio, which is responsible for the personal information described in this policy. This policy explains what we collect, how we use it, where it goes, and the choices you have. You can reach us at support@eastbase.studio.

We collect account information such as your email address, authentication provider details, preferences, and subscription status. We also process the trip content you create, including destinations, travel dates, routes, places, budgets, notes, collaborators, and shared itinerary data.

We also collect usage, device, browser, approximate location, diagnostics, and security information to operate the product, prevent abuse, measure feature performance, and improve reliability.

We use information to provide the planner, save and sync trips, generate AI-assisted suggestions, enable sharing and collaboration, process exports, manage subscriptions, provide support, prevent abuse, and improve the service.

We do not sell your personal information, and we do not use it for cross-context behavioral advertising.

Trip content can reveal a lot about you and the people you travel with — destinations, travel dates, budgets, preferences, who is coming along, accessibility needs, dietary needs, and free-text notes. Keep this in mind when you create, share, or publish a trip.

Please do not store passport numbers, government ID numbers, medical details, precise home addresses, payment card numbers, passwords, or other credentials in trip notes or other free-text fields. They are not needed to plan a trip, and notes travel with the trip when you share, collaborate, or export.

Some features use third-party AI providers (currently OpenAI and Google). When you generate or revise a plan, extract places from a link, note, or screenshot, or create Trip Visuals, relevant trip content is sent to these providers to produce the result. The Reality Check runs on our own servers and does not send your trip to an AI provider.

We do not use your trip content to train our own AI models. Personalization such as your Travel Taste Profile is calculated from your own saved trips on our servers and is not a trained model. Content sent to AI providers is processed under those providers’ own terms.

We use a small set of cookies and similar browser storage. Essential ones keep you signed in (Better Auth session) and remember a template referral so a later upgrade is attributed correctly. When enabled, Cloudflare Turnstile adds an anti-abuse check on selected forms such as messy-input capture and collaborator submissions.

When configured, we use PostHog for product analytics to understand which features are used and where the planner can improve. This may set a cookie or local storage entry to recognize a returning session, and events from signed-in users are linked to the account, so analytics are pseudonymous rather than anonymous. Session recording, broad autocapture, and automatic pageview capture are turned off, and server-side events are sent with IP geolocation disabled. Aggregate traffic measurement (Vercel Web Analytics) is cookieless.

You can clear or block cookies in your browser and device settings; blocking essential cookies will break sign-in and saving. We do not use cookies for cross-context behavioral advertising, and we do not currently show an in-product cookie banner or consent manager.

To support offline travel, the app can store some pages on your device through a service worker so they reopen without a connection. This covers public and unlisted trip pages and the Today Mode travel-day view after you open them; private, owner-only pages are not cached for offline use, and map tiles and live data are not stored this way.

Today Mode also keeps your travel-day progress — skipped stops, running-late adjustments, and the selected day — in your browser’s local storage and in the page link on your device, so you can refresh and resume. This on-device data stays until you clear your browser data or uninstall the app.

We share information with providers that help us run the service, only as needed to operate it: hosting and traffic analytics (Vercel), database (Neon Postgres), authentication (Better Auth with Google sign-in), AI (OpenAI and Google), maps and geocoding (Mapbox), weather (Open-Meteo), place photos (Wikimedia Commons), product analytics (PostHog), error monitoring (Sentry), anti-abuse (Cloudflare Turnstile), generated-media storage (Cloudflare R2), and payments (Lemon Squeezy).

These providers process information under their own terms and only to provide their service to us. Affiliate booking links pass limited context, such as a destination and dates, to the partner when you choose to use them.

Paid checkout and billing are handled by Lemon Squeezy as merchant of record. Lemon Squeezy processes payment details, tax information, invoices, receipts, and buyer support data under its own buyer terms and privacy notice.

We receive subscription and entitlement information from Lemon Squeezy so the app can unlock the correct plan features. We do not store full payment card numbers.

Private trips are limited to your account and invited collaborators. Unlisted trips are reachable by anyone with the link. Public trips, templates, and creator pages can be viewed by anyone and may be indexed by search engines.

Anything you make public or unlisted, including notes, is visible to people who can reach the link. Do not include sensitive personal information in shared or public trips unless you are comfortable making it available to viewers.

We keep account and trip information while your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, and maintain backups. You can request account or data deletion by contacting support@eastbase.studio.

You can edit or delete trips, change a trip’s visibility, revoke collaborator links, and use your browser and device settings to control cookies and local storage. Some processing is required for the service to work.

SmartTrips.app serves users in the United States. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use cookies for those purposes either.

Depending on your state, you may have the right to access the personal information we hold about you, request a copy, correct it, ask us to delete it, and, where a business sells personal information or uses it for targeted advertising, opt out. Because we do neither, there is nothing in those categories to opt out of. We will not deny service, charge a different price, or provide a lower quality of service because you exercised these rights.

To make a request, email support@eastbase.studio from your account email. We may need to verify your identity before acting, and we will respond within the timeframe required by applicable law.

For privacy requests or questions, contact us at support@eastbase.studio.