Privacy Policy

1. What We Collect

• Email address, and optionally your name and profile photo if you sign in with Google or Apple
• Trip details you enter (destination, dates, budget, travel style, airports, points balances)
• The briefings we generate for you, and the research behind them
• Usage data (trips created, features used, tokens and cost per research run)
• Device location — only while you use a feature that needs it (see section 2)
• Diagnostic data: crash reports and error traces (Sentry)

2. Location

RouteIQ does not track you and does not keep a location history. Location is used in exactly two places, each with your permission and only while you are using it:

• Nearby search — when you ask for something near you, your coordinates are sent with that request to find matching places.
• Road-trip co-pilot (Rex)— while that screen is open, the app reads your position roughly every 30 seconds (or every 100 m) so answers such as "what's near me" stay correct, and stops when you leave the screen.

Those coordinates are passed to our geocoding requests (OpenStreetMap-based, via Photon and Nominatim) to resolve places. They are not written to your account, not attached to your trip, and not stored as a movement history. Results may be cached on your device.

3. What We Don't Collect

• Payment or card information — RouteIQ is free and takes no payments, so there is none to collect
• Passwords — sign-in is passwordless (email one-time code, Google, or Apple); we never see a password
• Advertising identifiers, and no advertising or tracking cookies
• Your contacts, photo library, health data, or browsing history
• Background location — location is read only while a location feature is on screen

4. How We Use Your Data

• To research and generate your trip briefings
• To save your trips so you can return to them
• To enforce abuse and usage limits
• To monitor cost, errors and performance, and to improve the service

We do not sell your personal data, and we do not use it for advertising.

5. AI Processing

Your trip details are sent to AI providers to generate your briefing: OpenRouter, which routes to models from Google, DeepSeek, xAI and Alibaba, plus xAI for voice conversations. Voice audio is processed in real time and is not retained by RouteIQ. These providers have their own privacy policies and their terms govern the prompts they receive.

6. Meeting Assistant

If you use the optional meeting assistant, a transcription bot (Recall.ai) joins the call you choose. It appears in the meeting under its own name, and the transcript it produces is stored with your trip. Everyone on that call should be told the bot is there — that is your responsibility as the person joining it.

7. Data Storage and Retention

Your data is stored on Supabase (managed PostgreSQL and storage) with row-level security, and served through Vercel. Trips are private to your account by default. We keep your trips until you delete them or delete your account; usage records are kept for cost and abuse accounting and are anonymised when your account is removed.

8. Sharing

We do not sell your personal data to third parties. A trip briefing can be shared via a link you generate: anyone holding that link can read that briefing, so treat it as public. Clearing the link revokes it. Your trip list, account and anything else stay private.

9. Cookies and Analytics

Cookies are used only to keep you signed in. Product analytics (PostHog) stores events in your browser's local storage — no cookies, no session recording, no autocapture, no cross-site tracking. Error diagnostics (Sentry) capture technical data about failures, not your trip content.

10. Your Rights

You can delete your account and every trip, briefing and usage record attached to it at any time in the app (Settings → Delete account). You can also ask us for a copy of your data. EU and UK users have additional rights under GDPR, and California users under the CCPA — contact us and we will honour them.

11. Third Party Services

RouteIQ uses:

• Supabase — database, authentication and file storage
• OpenRouter — routing to the AI models that do the research (Google, DeepSeek, xAI, Alibaba)
• xAI — real-time voice conversations
• Recall.ai — the optional meeting transcription bot
• Vercel — hosting and request logs
• PostHog — product analytics
• Sentry — crash and error monitoring
• Resend — transactional email (sign-in links)
• Photon and Nominatim (OpenStreetMap) — place search and geocoding
• Cloudflare — DNS

12. Contact

Questions about your data? Reach us via routeiq.vip.