Privacy policy

• We store what we need to plan and book your trip — including your family's religious practice and children's details, only with your explicit consent.
• Businesses get booking essentials only (names, ages, party size, allergies). They never see your standards.
• Card details go straight to Stripe. We never see or store your card number.
• You can delete your family profile and trips at any time.

• Account: name, e-mail address and, if you sign in with Google, your profile photo.
• Religious practice (“our standards”): hechsher, nusach, Shabbos and Yom Tov Sheni, separate swimming, Kohanim in the family and similar. This is special-category data under GDPR / UK GDPR; we process it only with your explicit consent, given when you set up your profile, and only to filter and plan your trip.
• Children and travelers: first names, ages or birth dates, allergies and accessibility needs — again only with your consent.
• Trips and bookings: your days, places, orders, tickets, reviews and messages with our support team.
• Payments: handled by Stripe. We keep payment status, amounts and references, not card numbers.

For suppliers we keep public listing details (name, address, hours, photos, certificates, published phone) and private contact details (contact e-mail, phone, WhatsApp) and internal research notes. Private contact details and notes are visible only to our operations team and are never sent to customers' browsers. Payout details are held by Stripe.

• The businesses you book — booking essentials only.
• Stripe, for payments and supplier payouts.
• Our hosting, e-mail and messaging providers, under data-processing agreements.
• Family members you share a view-only Trip Wallet link with.
• Nuitée, our hotel booking partner: for hotel searches, the place, dates, number of guests and children's ages; when you book, the lead guest's name, e-mail and phone. Your card goes straight to Nuitée's payment form — we never see it.
• If you use “Plan it for me”, your trip days and wishes are sent to our AI provider to draft a plan. Your name and e-mail are not.

We do not sell personal data and we do not use advertising trackers.

You can see and change your profile at any time in our standards, withdraw consent, export your data, or ask us to delete it. Where the GDPR or UK GDPR applies you may also object to processing and complain to your data-protection authority. Bookings and payment records may be kept as long as tax and accounting law requires.

We use only the cookies needed to keep you signed in and to run the supplier portal. See the cookie policy.