Last updated: October 2026
Privacy Policy
SapphireGenie respects your privacy. This policy explains how we handle personal data in line with the EU GDPR, UK GDPR, California's CCPA/CPRA, India's Digital Personal Data Protection Act and other applicable laws.
1. Information we collect
- Account details: your email address, name and sign-in provider (for example Google).
- Trip details: origin, destinations, dates, who is travelling, trip style, budget and interests.
- Saved content: itineraries, edits, hotel choices and items in your cart.
- Technical data: IP address, device and browser type, pages visited and approximate location.
- Browser storage: we keep your sign-in session, plan form answers and recent suggestions on your device so pages load faster. These are essential and not used for advertising.
2. How we use it
- To create and personalise your itineraries, maps and routes.
- To keep you signed in and save your trips across devices.
- To support you, keep the service secure and prevent abuse.
- We do not sell or share your personal data for advertising.
3. Legal bases
We process data to provide the service you asked for (contract), to keep the service secure and improve it (legitimate interests), to meet legal obligations, and with your consent where required.
4. Who we share it with
- AI providers: your trip details are sent to AI models (such as Google Gemini and OpenAI) only to generate your plan.
- Google Maps Platform: place searches, photos and routes.
- Hosting and database providers: secure cloud infrastructure that stores and runs the service.
- Partner sites: when you follow a link to a booking site, that site's own privacy policy applies.
5. International transfers
Your data may be processed outside your country, including in the EU, UK and US. Where required we rely on safeguards such as Standard Contractual Clauses.
6. Your rights
Depending on where you live, you can ask to access, export, correct or delete your data, object to or restrict processing, withdraw consent, and complain to your local data protection authority. California residents will not be treated differently for using their rights.
To make a request, email privacy@sapphiregenie.com. We respond within 30 days.
7. Retention
We keep your account and trips while your account is active. When you delete your account, your data is removed from our systems within 30 days, except where the law requires us to keep it.
8. Children
SapphireGenie is for adults aged 18 and over. We do not knowingly collect data from children.
9. Security and changes
Data is encrypted in transit and access is restricted. We will post any changes to this policy here with a new date.