Last updated: May 2026
Account users: Email, display name, and hashed password. All users: Journey data (drawn routes, selected options), session identifiers. We do not collect: Payment card details (handled by transport operators directly).
To generate route options, save your journeys, improve our routing engine, and communicate with you about your account. We do not sell your data.
We share data with: transport search APIs (Omio, Amadeus) to find routes — only origin/destination coordinates, not personal info. AI provider (Anthropic) for route optimization — journey data only, no personal identifiers.
We use essential session cookies for login and journey tracking. No advertising or third-party tracking cookies.
You can access, correct, or delete your data at any time. Contact us at the email address on our contact page.
Passwords are hashed with bcrypt. All connections are encrypted via HTTPS. We use parameterised database queries to prevent injection.