Itinery

Privacy Policy

Effective Date: October 17, 2026  ·  Last Updated: October 17, 2026  ·  Domain: https://itinery.net

Welcome to Itinery (https://itinery.net). Itinery is a day-by-day travel itinerary planner and place organization web application. This Privacy Policy explains what information we collect, how we use and protect that information, how our integration with Google services works, and how you can access or delete your data.

1. Information We Collect

1.1 Google Account Information (Google Sign-In / OAuth)

You may use Itinery in Guest Mode without signing in, or you may choose to sign in using Google Sign-In (via Firebase Authentication). When you sign in with your Google Account, we request access only to basic, non-sensitive OAuth scopes (openid, email, and profile) and collect:

  • Unique Google User Identifier (UID): Used to associate your saved travel itineraries with your account.
  • Email Address: Used to identify your account and display your signed-in status.
  • Display Name & Profile Picture URL: Displayed in the application navigation bar so you can see which account is currently active.

We do not request access to your Gmail messages, Google Drive files, Google Contacts, Google Calendar, or any sensitive or restricted Google Workspace scopes.

1.2 User-Provided Travel & Itinerary Content

When you create and organize travel plans in Itinery, we collect and store the content you create, including:

  • Destination names, travel start and end dates, and daily itinerary schedules.
  • Saved places, addresses, coordinates, and travel memo notes that you add to your trips.
  • Public Instagram Reel or Post URLs that you submit for place extraction, along with the resulting text transcripts and extracted place names.

1.3 Local Browser Storage (Guest Mode)

If you choose "Continue as Guest," your travel itineraries and notes are stored solely in your web browser's localStorage on your device. Guest data is not transmitted to our cloud database unless you subsequently sign in and choose to sync your trips.

2. How We Use Your Information

We use the information we collect strictly to operate, maintain, and provide the features of Itinery:

  • Account Authentication & Cloud Sync: To authenticate your identity via Google OAuth and synchronize your travel itineraries across your phone, tablet, and computer using Google Cloud Firestore.
  • AI Place Extraction from Public Links: When you submit a public Instagram Reel or Post URL, our server temporarily processes the publicly available media and caption metadata using the Google Gemini API to transcribe spoken audio, read on-screen text overlays, and identify mentioned travel destinations.
  • Location Verification & Mapping: When you search for a place or verify an extracted location, we query the Google Maps Platform APIs to retrieve coordinates, formatted addresses, ratings, and Google Maps directions links.
  • Security & Abuse Prevention: To enforce per-user access controls and rate-limit automated requests to our extraction endpoints.
Google API Services User Data Policy Disclosure (Limited Use):
Itinery's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. Data Sharing, Transfers & Third-Party Services

We do not sell, rent, lease, or trade your Google user data or personal information to any third party. We do not use your data for targeted advertising, behavioral profiling, or data brokering, and we do not use your personal itineraries to train foundation AI models.

We share data only with the following cloud infrastructure and API service providers strictly as necessary to run the application:

  • Google Firebase (Authentication & Cloud Firestore): Provides secure Google OAuth login and cloud database storage for your itineraries.
  • Google Gemini API: Performs transient transcription and place entity extraction when you explicitly submit a public link or itinerary import request.
  • Google Maps Platform: Resolves place searches, geographic coordinates, and walking route links. Usage of Google Maps features is subject to the Google Privacy Policy.

4. Data Storage, Retention & Security

  • Encryption: All data transmitted between your browser and Itinery is encrypted in transit using HTTPS/TLS. Cloud itinerary data stored in Firebase Firestore is encrypted at rest by Google Cloud.
  • Access Controls: Firestore security rules strictly scope database reads and writes so that authenticated users can only access their own itinerary documents.
  • Immediate Deletion of Transient Media: When you submit a public Instagram link for place extraction, any temporary video, audio, or image buffers used for transcription are deleted immediately after the extraction request completes (both from server memory/temporary files and from the Gemini File API). Only the resulting text transcript, extracted place names, and source URL are saved to your itinerary.
  • Retention Period: We retain your saved itineraries in your account for as long as your account remains active or until you delete them.

5. Your Rights & Data Deletion Instructions

You have full control over your data at all times:

  • In-App Deletion: You can delete any individual activity, saved Reel transcript, or entire itinerary directly inside Itinery using the delete (trash) button. Deleting an itinerary while signed in permanently removes it from our Cloud Firestore database.
  • Revoking Google OAuth Access: You may revoke Itinery's access to your Google Account at any time by visiting your Google Account Permissions page.
  • Complete Account & Cloud Data Deletion: To request complete deletion of your user account record and all associated cloud data stored in Firebase, please email us at jonkhoo@gmail.com from the email address associated with your account. We will permanently delete all associated records within 7 business days.

6. Children's Privacy

Itinery is a general-audience travel planning tool and is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our features or regulatory requirements. Whenever we make changes, we will update the "Last Updated" date at the top of this page.

8. Contact Us

If you have any questions, concerns, or data requests regarding this Privacy Policy or Itinery's data practices, please contact:
Itinery Support
Email: jonkhoo@gmail.com
Website: https://itinery.net