Legal

Privacy Policy

Your data is yours. Here's exactly what we collect, why, and how we keep it safe.

Last updated: May 2026.

1. What We Collect

  • Account info: name, email, phone, profile photo, password (hashed).
  • Payment info: handled by Stripe — we store only the last four digits, expiry and card brand.
  • Trip & savings data: destinations, budgets, savings goals, expense splits.
  • Concierge interactions: the prompts you send and the answers you receive.
  • Location: only when you grant permission, to power maps and nearby suggestions.
  • Device & analytics: device model, OS, IP, and how you use the app.

2. Why We Collect It

  • To run the Platform and keep your account secure.
  • To personalise destinations, itineraries and savings tips.
  • To process subscriptions and refunds.
  • To improve the AI concierge and detect abuse.
  • To send transactional emails and (with consent) marketing.

3. Cookies & Similar Tech

We use cookies and local storage to keep you signed in, remember preferences, and measure how the Platform performs. You can clear or block them in your browser, though some features may break.

4. Third-Party Integrations

  • Stripe — payments and refunds.
  • Firebase / Supabase — authentication, database, file storage.
  • Google Maps — place data, geocoding and distance estimates.
  • OpenAI APIs — language understanding for the AI concierge.

These providers process your data under their own privacy policies. We send only what's needed to make the feature work.

5. Sharing & Selling

We do not sell your personal data. We share it only with the providers above, with law enforcement when legally required, and with a successor entity in the event of a merger or acquisition.

6. Your Rights (GDPR / CCPA)

  • Access, correct, export or delete your data.
  • Opt out of marketing or analytics processing.
  • Object to or restrict certain processing.
  • Lodge a complaint with your local data protection authority.

To exercise any right, email privacy@luxeescape.me. We respond within 30 days.

7. Account Deletion

You can delete your account from Profile → Settings at any time. We remove your personal data within 30 days, except records we must keep for tax, fraud prevention and legal reasons.

8. Data Retention

We keep your data for as long as your account is active and for a reasonable period afterwards to satisfy legal obligations. Aggregated, anonymised data may be kept longer for analytics.

9. Security

Data is encrypted in transit (TLS) and at rest. Access to production systems is limited and audited. We test and patch regularly. No system is 100% secure — please use a strong, unique password and enable two-factor when available.

10. Children

The Platform is not directed to children under 16. If you believe a minor has shared data with us, contact privacy@luxeescape.me and we will remove it.

11. International Transfers

Your data may be processed outside your country. Where required, we use standard contractual clauses or other approved safeguards.

12. Changes

We'll post material updates here and in-app. Your continued use of the Platform means you accept the updated policy.