Privacy Policy
The short version: we collect the minimum needed to run the service, we don’t sell your data, and you can ask us to delete everything.
What we collect
- Account data — your email address, optional display name, and a securely hashed password (or your Google account identity if you sign in with Google). Collected only when you create an account.
- Usage data — the destinations you search for and generate itineraries for, the pages you visit on this site, and technical logs including your IP address. We use this to enforce fair daily usage limits, prevent abuse, and understand which destinations are popular. We use no third-party analytics services.
- Saved content — itineraries you choose to save to your library or share.
- Outbound click data — when you click a booking link, we record which venue was clicked, the destination URL, and your IP address, so we can measure which recommendations are useful and receive affiliate commissions.
- Cookies — a single session cookie to keep you signed in. No advertising or cross-site tracking cookies.
How we use it
To generate and store your itineraries, keep you signed in, enforce usage limits, improve recommendations, and earn affiliate commissions on bookings you choose to make. That’s the complete list. We do not sell or rent personal data to anyone.
Third parties
- Google Gemini generates itineraries. Your destination, dates, and interests are sent to it; your identity, email, and IP address are not.
- Open-Meteo provides weather data. Only the destination city is sent.
- Hellotickets and other booking sites receive standard web request data when you click through to them, and their own policies apply from that point. Affiliate links are marked “partner link”.
- Google handles authentication if you choose “Continue with Google”.
Retention
Account and saved-itinerary data is kept while your account exists. Rate-limiting counters are deleted within days. Generation and click logs are kept for service analytics.
Your rights
You can request a copy of your data or complete deletion of your account and everything associated with it at any time — email admin@onedayin.app. If you are in the EU/EEA or UK, you also have the rights of access, rectification, erasure, portability, and objection under the GDPR, and the right to lodge a complaint with your supervisory authority.
Contact
Questions about this policy: admin@onedayin.app.