Privacy Policy
Effective date: [EFFECTIVE DATE]
Kelvo ("Kelvo," "we," "us," or "our") provides a tool for planning group trips. This policy explains what information we collect, why we collect it, and how it's used when you visit our website or use our services (the "Service").
Information we collect
We collect information you give us directly, and some information automatically when you use the Service.
Account and trip information
- Email address, used for login and verification
- Trip details: dates, home city, response deadline
- Member responses: budget range, travel interests, passport / nationality (used only to flag visa requirements), and availability
- Votes cast on destination options
Payment information
If you unlock a full itinerary, payment is processed by Stripe. We do not receive or store your card details — Stripe handles that directly and shares with us only what's needed to confirm payment (e.g. amount, trip, and status).
Automatically collected information
Standard technical data such as IP address, browser type, and usage of the Service, collected for security and to keep the Service running reliably.
How we use this information
- To operate trip planning: shortlists, voting, and itineraries
- To generate destination suggestions and full itineraries, including using AI (Google Gemini) to draft itinerary content from the trip and member details above
- To send trip invitations, verification, and other transactional emails (via Resend)
- To process payments for itinerary unlocks (via Stripe)
- To maintain security and prevent abuse of the Service
- To fix bugs and improve the Service
We do not sell your personal information, and we do not use your data to serve you ads.
Who can see your information
Trip details and responses you submit are visible to other members of the same trip — that's how the Service works. Budget figures are used in aggregate for filtering destinations; individual responses may still be visible to the trip organizer. Your email address is not shared with other trip members unless you choose to share it yourself.
Service providers we use
- Supabase — database, authentication, and hosting of trip data
- Stripe — payment processing
- Resend — transactional email delivery
- Google Gemini — AI-generated itinerary content
Each provider processes data only as needed to provide their part of the Service, under their own privacy and security practices.
Data retention
We keep trip and account data for as long as your account or trip is active, and for a reasonable period afterward in case you return. You can request deletion at any time — see "Your rights" below.
Your rights
You can request access to, correction of, or deletion of your personal information by contacting us at [CONTACT EMAIL]. Depending on where you live, you may have additional rights under local law (for example, GDPR in the EU/UK or the CCPA in California), including the right to data portability and the right to object to certain processing.
Children's privacy
The Service is not directed to children under 16, and we do not knowingly collect personal information from them.
Changes to this policy
We may update this policy from time to time. If we make material changes, we'll update the effective date above and, where appropriate, notify you directly.
Contact us
Questions about this policy or your data? Reach us at [CONTACT EMAIL].