Privacy policy

RouteGenius is run by [your name or company], [postal address]. We are the controller of the personal data described here. Questions and requests: routegeniusapp@gmail.com.

• Your account: your email address and name, and how you sign in. Needed to give you an account.
• Your trips: dates, days, stops and addresses, bookings, stays, lists, expenses, and the names of the people you add to a trip. Needed to plan and track your trips.
• Sharing: when you join someone's trip, the name you give is shown to its owner.
• Payments: if you buy a plan, what you bought, when, the amount, and whether it was refunded. Your card details go to the payment provider, never to us.
• Receipts and voice notes you import: read once to extract the expenses, which you review before they are saved. The file itself is deleted from our systems within a day (a week if processing failed).
• Usage counts: how many times a day features are used across everyone (for example “12 trips created”, “40 people active”), to know what to improve. They say nothing about who did what. To count each person once a day, we note that you were active for one day, then forget it.
• Error reports: when something breaks, what went wrong and on which page, so we can fix it. Without your name, email, what you typed or uploaded.

We process this data because you asked us to provide the service (performance of a contract, GDPR Art. 6(1)(b)), and keep payment records because tax law requires it (legal obligation, Art. 6(1)(c)). We don't sell it, use it for advertising, or track you across other sites.

Names of other people you add to a trip, such as family members, are entered by you. Please only add people who are fine with that.

• Clerk (USA): sign-in and account management.
• Google Gemini API (Google Cloud): reads imported receipts and voice notes, drafts trip plans, and turns pasted plans that aren't in RouteGenius's format into itineraries. For a plan it gets what you asked for, the trip's dates and days already planned, and, unless you untick it, the places, stays and pace of your last few trips (never expenses, notes or names). We use the paid service, under which Google does not use the content to improve its products. [confirm the paid tier is enabled]
• Paddle (UK): sells plans to customers outside Israel as our reseller (merchant of record), takes the payment and handles sales tax. It is the seller on your receipt.
• PayPlus (Israel): takes payments from customers in Israel and issues their invoices.
• Google Maps Platform: address suggestions, finding addresses on the map, driving routes and maps. When you type an address or open a map, your browser connects to Google, which sees your IP address.
• Open-Meteo (Switzerland): weather forecasts. From four weeks before a trip, our server asks it for the forecast at the map position of the trip's stops; nothing else about you or the trip is sent.
• Your browser's speech recognition: when you dictate a voice note and see the words appear, your browser turns the speech into text, and only the text reaches us. Your browser's maker handles that audio under its own terms: Chrome sends it to Google, Safari to Apple (or handles it on your device). If you'd rather not, choose “Record audio instead”, and the recording comes to us and Google Gemini as described above.
• Sentry (Functional Software, USA): receives the error reports described above, with your browser type and language but not your IP address, account or content. [confirm Sentry's data region (EU or US) and IP storage is off]
• [hosting provider] and [database provider]: run the app and store its data in [region].

Some of these are in the USA. Transfers are covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. [check per provider]

Your itinerary links to Booking.com for places to stay and to GetYourGuide for tickets and tours. The link carries only the place and dates, and our partner ID. If you book through it, the partner may pay us a commission; we don't learn who you are or what you booked. Once you open their site, its own privacy policy and cookies apply.

Until you delete it. Deleting a trip deletes everything in it. Deleting your account deletes your account and all trips you own, and removes you from trips others shared with you. What you added to someone else's trip stays with that trip, since it is its owner's data. A plan that renews is cancelled first. Payment records are kept for [7 years], as tax law requires, and then deleted. Backups are overwritten within [backup retention].

We only use the cookies needed to keep you signed in, and one that remembers the language you chose (English or Hebrew). There are no analytics or advertising cookies, so there is nothing to consent to.

So that your trips open without a signal, your browser keeps a copy of the trip pages you open in RouteGenius, on your device only. Signing out deletes it.

You can see, correct and delete your data in the app at any time. On the Your data page you can download all of it as a file, or delete your account. You can also ask us to restrict or stop processing, or object to it, by writing to routegeniusapp@gmail.com. We answer within a month.

You may complain to a data protection authority, for example the one where you live. [name your lead authority, if any]

Accounts are for adults. Children can be added to a trip by name, but don't sign up themselves.

If this policy changes in a way that matters, we will tell you in the app before it takes effect.