privacy

what we collect

From Google sign-in: your email address and name.

From your Gmail (via the gmail.readonly scope): the Subject, From, and Date headers of messages from a fixed list of travel vendors (Booking, Marriott, Hilton, Hyatt, IHG, Airbnb, Vrbo, Expedia, Kayak, Resy, OpenTable, Tock, Delta, United, American, Southwest, JetBlue, Amex Travel, Chase Travel). We do not fetch the body of any email. We call the Gmail API in format=metadata mode, which means the body never leaves Google's servers.

From extraction: a row per travel email, containing vendor, destination, start date, end date, price tier, signal type (hotel, flight, restaurant, rental), the source message ID, and the original subject line. That is all.

From you, as you use the app: your inferred Travel DNA cards, your trip queries, the recommendations we score for you, and your thumbs up or down on each one.

From your device: anonymous analytics events (page views, button taps) and crash diagnostics. No precise location, no contacts, no other Google data.

what we do not collect

Email bodies. Calendar entries. Contacts. Drive files. Photos. Health data. Precise location. Any Google scope other than gmail.readonly. Any inbox-resident content from senders outside the travel-vendor list above.

what we use it for

Two things. We build your Travel DNA — a short profile of how you tend to travel. And we score hotels and restaurants in a destination you enter against that profile. Nothing in this product is advertising-driven. We don't sell what we know.

who else sees it

Four service providers, each scoped to the part of the job they do:

• Google — the source of your sign-in and the Gmail headers we read. Google's terms govern that side.
• Anthropic — runs the extraction prompt that turns each header set into a structured travel signal, and runs the scoring prompt that turns your Travel DNA plus a destination into recommendations. We send Anthropic the header text and the structured signals we hold on you. We do not send email bodies because we do not fetch them.
• PostHog — product analytics. Page views, button taps, trip submissions, feedback events. US-hosted.
• Sentry — error and crash diagnostics. US-hosted.

That is the complete list. We do not sell data, we do not share it with advertisers, and we do not feed it into a third-party recommendation network.

how long we keep it

Until you delete your account. There is no separate retention schedule. Travel signals and Travel DNA are recomputed on demand and overwritten when you rescan, but they live in our database until deletion.

deleting your account

Visit /account/delete to remove your travel signals, Travel DNA, trips, recommendations, and feedback. The only thing we keep is your referral code lineage — the code you joined with, and the codes you have issued — so that members who joined through you stay linked.

contact

Questions, requests, or a written confirmation of deletion: support@thestayed.com.