What we keep. Why.
A short policy in plain English. GDPR-aligned, hosted in the EU, no third-party trackers without your explicit opt-in, and no data sold to anyone.
- 01
Introduction
PhotoScout (“we”, “our”, “us”) is committed to protecting your privacy. This policy explains what we collect, how we use it, and the rights you have under GDPR.
- 02
What we collect
Account information
When you sign in with Google we receive:
- Your name and email address
- Profile picture, if provided
- Google user ID, used for account identification
Usage data
- Destinations you search for
- Trips and plans you create
- Conversations with the planning agent
- Features you use, and how often
Technical data
- Device type and operating system
- Browser type, for web users
- Approximate location — country or region, not precise GPS
- 03
How we use it
We use your data to:
- Generate personalised trip plans
- Save your trips and conversation history
- Improve recommendations over time
- Send service emails about your account
- Analyse usage to improve the product
- Prevent abuse and protect the service
- 04
Third-party services
- Google Sign-In — authentication
- Anthropic (Claude) — itinerary generation
- DeepSeek — cost fallback for generation
- OpenMeteo — weather forecasts
- Amazon Web Services — hosting and storage in eu-central-1 (Frankfurt)
- Ahrefs Site Explorer — optional, opt-in only. Cross-site SEO referral metrics (analytics.ahrefs.com). Off by default; enable on the cookies page.
We do not sell your data and do not share personal information beyond what each provider needs to deliver the service.
- 05
Storage & security
Your data lives on AWS infrastructure in the EU (Frankfurt). Encryption in transit and at rest is standard. Backups and audit logs are retained per service operational needs.
- 06
Retention
- Account information: while your account is active
- Trip history and conversations: 90 days after last activity
- You can request immediate deletion at any time
- 07
Your GDPR rights
You have the right to:
- Access — request a copy of your data
- Rectification — correct inaccurate data
- Erasure — be forgotten
- Portability — export your data
- Objection — object to specific processing
- Restriction — limit how data is used
To exercise any of these rights, email the address at the bottom.
- 08
Cookies & local storage
We use essential cookies and local storage to:
- Keep you signed in
- Remember your preferences and last destination
- Hold conversation state across page reloads
No third-party tracking without your explicit opt-in. No advertising cookies. Optional analytics — self-hosted Umami and Ahrefs Site Explorer — is off by default and managed on the cookie settings page.
- 09
Children
PhotoScout is not intended for users under 16. We do not knowingly collect data from children. If you believe we have, contact us and we will delete it.
- 10
International transfers
Data is stored primarily in the EU. Some third-party providers (AI model inference) may process data in other regions under standard contractual clauses or equivalent safeguards.
- 11
Changes to this policy
We may update this policy. Significant changes are announced in the app or by email. Continued use after the effective date constitutes acceptance.
Questions or requests? privacy@aiscout.photo
Read the terms