Privacy policy

Who is responsible

Kairos is built and run by two people rather than a company. The address at the end of this page is where requests about your data go, and they are answered by a person rather than a support system.

What Kairos stores

Only what planning and living a trip actually needs. There is no advertising profile, and no data here is bought from or sold to anyone.

• Your account — the email address you sign in with, a hashed password, and the first name, last name and profile picture you choose to add.
• Your trips — destinations and dates, stops and journeys, accommodation and travel bookings with their prices, links, times and comments, expenses and who they are split between, the ideas you save and the links they came from, trip statistics, and the other travellers you share a trip with.
• Files you attach — tickets and booking confirmations uploaded to a booking. They are held in private storage that only members of that trip can read.
• Usage data — pages opened, performance timings and error reports, collected through PostHog so the app can be fixed and improved. Session replays are recorded with every input field masked, so what you type is not captured.
• On your phone — a cached copy of your trips so the app works without a signal, and your sign-in token, held in the operating system's own secure keystore.

Why

Your account and trip data are processed to provide the service you signed up for. Usage data is processed on the basis of a legitimate interest in keeping the app working, and is kept to what that needs. Kairos does not profile you and makes no automated decisions about you.

Who else sees it

Travellers you invite to a trip can see that trip's contents, including the bookings, expenses and files on it. Beyond that, your data is only handled by the services Kairos runs on, each acting on our instructions:

• Supabase — accounts, database and file storage.
• Vercel — hosting and performance measurement for the website.
• PostHog, on their European infrastructure — usage analytics and error reports.
• Stadia Maps — map tiles. It receives the part of the map being viewed, not your identity.
• Komoot Photon — city and place search. It receives the text typed into a search box, the area of the trip being searched, the point of a pin you drop on the map, and the name and point of a place you share into the app or save through the connector.
• OpenStreetMap's Overpass API — opening hours. It receives the OpenStreetMap id of a place you save as an idea, and nothing about you.
• Apple and Google — distribution of the app, and the crash reports their platforms collect.

Where it is held

Kairos itself stores nothing on its own hardware. Everything sits with the providers above, which operate internationally and may process data outside your own country under their standard contractual safeguards. Analytics are held on European infrastructure.

How long it is kept

Your account and its trips are kept for as long as the account exists. Deleting your account removes your profile, the trips you alone own, and the files attached to them. Content on a trip shared with other travellers stays with that trip, since it is theirs too — expenses you entered and bookings you added remain, so the trip still adds up for the people still on it.

Your rights

You can ask for a copy of your data, correct it, have it deleted, take it elsewhere, or object to how it is used. You can delete your account yourself from the account screen, on the web and in the app, and it takes effect immediately. For anything else, write to the address below and expect an answer within a month. If the answer does not satisfy you, you can complain to your national data protection authority.

Children

Kairos is for travellers of any age, including younger ones on a family trip. Anyone under 16 needs the permission of a parent or guardian to create an account, and a parent or guardian can write to the address below to have their child's account and data deleted. An account found to belong to a child under 16 without that permission is deleted.

Changes to this policy

If this policy changes in a way that affects you, the date at the top changes with it and the app says so before the change takes effect.

Contact

Questions about any of this, or a request about your data:

kairos-travel@protonmail.com