Privacy Policy

1. Information We Collect

Information You Provide

• Account information (email, display name) when you sign in with Google or Apple
• Trip data you create (destinations, dates, itineraries, budgets, saved places)
• Content you upload (screenshots, photos, links, notes) for place extraction

Collected Automatically

• Device type and operating system
• Feature usage counts (for daily rate limiting)
• Precise location (only when you grant permission, used for nearby place recommendations)

2. How We Use Your Information

• Authenticate your account and sync your trip data across devices
• Process uploaded content and search queries through AI to extract travel information and generate recommendations
• Enforce daily usage limits per account
• Respond to support requests

3. AI Processing & Third-Party Services

Polo uses the following third-party services to deliver its features:

• OpenAI: processes your search queries, uploaded photos/screenshots, and trip context to generate travel recommendations. OpenAI retains inputs and outputs for up to 30 days for abuse monitoring and, because Polo participates in OpenAI's model improvement program in exchange for reduced usage costs, may also use them to improve their models. See OpenAI's Privacy Policy and Section 8 below for your opt out rights.
• Google Places & Gemini: place search, photo retrieval, and video analysis. Destination names are transmitted.
• Apify: extracts content from TikTok, Instagram, YouTube, and Facebook links you submit.
• Deepgram: transcribes audio from social media videos you submit.
• Geoapify: powers place name autocomplete.
• Supabase: stores your account, trip data, and usage logs securely.
• RevenueCat: manages in-app subscriptions on iOS and Android.

4. Information We Do Not Collect

We do not collect or sell your contacts, payment details, or health data. We do not use advertising identifiers, third-party ad networks, or data brokers.

5. Data Retention & Deletion

Your trip data is stored locally on your device and in Supabase if you are signed in. You can delete all data at any time via Settings → Data & Storage → Clear All Data. Usage logs are retained for up to 30 days for rate-limiting purposes. Cloud-synced data can be removed by clearing your data and signing out.

6. Data Security

We use encryption in transit and at rest, secure authentication via Supabase, and follow industry-standard security practices.

7. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data. To exercise these rights, contact us at polotravelapp@gmail.com.

8. California Privacy Rights (CCPA/CPRA)

Polo participates in OpenAI's model improvement program: OpenAI may use the search queries and destination context we send it to improve its models, and in exchange Polo receives reduced usage costs. Under California law, receiving something of value in exchange for letting a third party use personal information can count as a "sale" or "sharing" of that information, even though no data is sold for cash and no personal identifiers (name, email, account ID) are included in what is sent.

California residents have the right to opt out of this. To exercise that right today, email polotravelapp@gmail.com with the subject "Do Not Sell or Share My Info" from the email address on your account. This is currently a manual process handled by our team; an automated, self service opt out is planned.

9. Children's Privacy

Polo is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us at polotravelapp@gmail.com.

10. Changes to This Policy

We may update this policy periodically. Changes will be reflected with an updated effective date. Continued use of Polo constitutes acceptance of the revised policy.

11. Contact

For privacy-related inquiries, contact us at polotravelapp@gmail.com.