Privacy Policy

This Privacy Policy explains how Kahintochalo (“Kahintochalo,” “we,” “us,” or “our”) collects, uses, and shares information about you when you use our website at kahintochalo.comand the Kahintochalo trip-planning application (together, the “Service”). Kahintochalo is an independently operated product built and run by Anirudh, based in India.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Who we are

Kahintochalo is a group and AI-assisted trip planner. It helps you and the people you travel with build itineraries, budgets, and packing lists, and share them with each other. For the purposes of applicable data protection law (including the EU/UK GDPR and India’s Digital Personal Data Protection Act, 2023), Kahintochalo is the data controller for the personal data described below.

2. Information we collect

a. Account information

We offer sign-in through Google only. When you sign in, we receive and store the following from your Google account via our authentication provider:

• Your name
• Your email address
• Your profile picture (avatar) URL
• A unique account identifier we generate for you

We do not receive or store your Google password. We never ask for or store payment card details.

b. Trip content you create

When you use the Service, we store the content you create so we can show it back to you and your travel companions. This includes:

• Trip details — names, subtitles, dates, cover images, and status
• Itineraries — activities, times, descriptions, tags, and map coordinates (latitude/longitude) for the places you add
• Budgets — categories, amounts, currency, and who paid
• Packing lists and checklists
• Crew and member details you enter, such as names and roles

c. Collaboration data

When you invite someone to a trip, we store the email address you provide for that invitation, along with the invitation’s role and status. If you use a shareable link instead, we store an anonymous invite token rather than an email address. We also keep an activity log within each trip (who changed what, and when) so collaborators can see recent changes.

d. Information collected automatically

• Authentication cookies. We set secure, HTTP-only cookies to keep you signed in (see Section 4).
• Usage and performance analytics. We use Vercel Analytics to collect aggregate, privacy-friendly metrics such as page views and Core Web Vitals (page performance). This does not use cross-site tracking cookies and does not build an advertising profile of you.
• Server logs. Our hosting and database providers automatically record standard technical data such as IP address, browser type, and timestamps for security and reliability.

3. How we use your information

• To provide, operate, and maintain the Service and your account
• To save your trips and show them to you and the collaborators you invite
• To send and manage trip invitations you initiate
• To secure the Service, prevent abuse, and debug problems
• To understand aggregate usage and improve the product
• To respond to your requests and communicate with you about the Service

We do not sell your personal data, and we do not use it for third-party advertising.

4. Cookies

We use cookies only for authentication — to keep you signed in securely as you move between pages. These are set by our authentication provider and are marked HTTP-only and Secure where supported by your browser. We do not use advertising or cross-site tracking cookies. If you block authentication cookies, you will not be able to sign in.

5. Who we share data with

We share data with a small number of service providers (sub-processors) that help us run the Service. They process data on our behalf under their own privacy terms:

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and security of our users or the public.

6. Data retention

We keep your account and trip data for as long as your account is active or as needed to provide the Service. If you ask us to delete your account, we will delete your personal data within a reasonable period, except where we are required to retain it to comply with legal obligations or to resolve disputes. Note that trip content shared with collaborators may remain visible to them where they retain their own copy of a shared trip.

7. Your rights

Depending on where you live, you may have rights over your personal data, including the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your data and account
• Receive a copy of your data in a portable format
• Object to or restrict certain processing, and withdraw consent

To exercise any of these rights, email us at support@kahintochalo.com. We will respond within the timeframe required by applicable law.

8. How we protect your data

We take reasonable measures to protect your data. Access to your trips is restricted by database row-level security so that only you and the collaborators you invite can view them. We use HTTP-only authentication cookies, a strict Content Security Policy, and standard security headers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children’s privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. International data transfers

We use service providers whose infrastructure may be located outside your country, including in the United States. By using the Service, you understand that your data may be processed in these locations. Where required, we rely on appropriate safeguards offered by our providers for such transfers.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Significant changes will be communicated through the Service where appropriate. Your continued use of the Service after an update means you accept the revised policy.

12. Contact us

If you have any questions about this Privacy Policy or how we handle your data, contact us at support@kahintochalo.com.