Privacy · last updated May 2026

What we keep. Why.

A short policy in plain English. GDPR-aligned, hosted in the EU, no third-party trackers without your explicit opt-in, and no data sold to anyone.

  1. 01

    Introduction

    PhotoScout (“we”, “our”, “us”) is committed to protecting your privacy. This policy explains what we collect, how we use it, and the rights you have under GDPR.

  2. 02

    What we collect

    Account information

    When you sign in with Google we receive:

    • Your name and email address
    • Profile picture, if provided
    • Google user ID, used for account identification

    Usage data

    • Destinations you search for
    • Trips and plans you create
    • Conversations with the planning agent
    • Features you use, and how often

    Technical data

    • Device type and operating system
    • Browser type, for web users
    • Approximate location — country or region, not precise GPS
  3. 03

    How we use it

    We use your data to:

    • Generate personalised trip plans
    • Save your trips and conversation history
    • Improve recommendations over time
    • Send service emails about your account
    • Analyse usage to improve the product
    • Prevent abuse and protect the service
  4. 04

    Third-party services

    • Google Sign-In — authentication
    • Anthropic (Claude) — itinerary generation
    • DeepSeek — cost fallback for generation
    • OpenMeteo — weather forecasts
    • Amazon Web Services — hosting and storage in eu-central-1 (Frankfurt)
    • Ahrefs Site Explorer — optional, opt-in only. Cross-site SEO referral metrics (analytics.ahrefs.com). Off by default; enable on the cookies page.

    We do not sell your data and do not share personal information beyond what each provider needs to deliver the service.

  5. 05

    Storage & security

    Your data lives on AWS infrastructure in the EU (Frankfurt). Encryption in transit and at rest is standard. Backups and audit logs are retained per service operational needs.

  6. 06

    Retention

    • Account information: while your account is active
    • Trip history and conversations: 90 days after last activity
    • You can request immediate deletion at any time
  7. 07

    Your GDPR rights

    You have the right to:

    • Access — request a copy of your data
    • Rectification — correct inaccurate data
    • Erasure — be forgotten
    • Portability — export your data
    • Objection — object to specific processing
    • Restriction — limit how data is used

    To exercise any of these rights, email the address at the bottom.

  8. 08

    Cookies & local storage

    We use essential cookies and local storage to:

    • Keep you signed in
    • Remember your preferences and last destination
    • Hold conversation state across page reloads

    No third-party tracking without your explicit opt-in. No advertising cookies. Optional analytics — self-hosted Umami and Ahrefs Site Explorer — is off by default and managed on the cookie settings page.

  9. 09

    Children

    PhotoScout is not intended for users under 16. We do not knowingly collect data from children. If you believe we have, contact us and we will delete it.

  10. 10

    International transfers

    Data is stored primarily in the EU. Some third-party providers (AI model inference) may process data in other regions under standard contractual clauses or equivalent safeguards.

  11. 11

    Changes to this policy

    We may update this policy. Significant changes are announced in the app or by email. Continued use after the effective date constitutes acceptance.