Ubi / TravelPlanner

Privacy Policy

Last updated: 6 November 2026

Your discoveries are personal. This policy explains the data used by the TravelPlanner beta and the Ubi website.

Who is responsible?

Tommaso Galli operates the current private beta and is responsible for the processing described here. For privacy questions and requests, contact tommaso.galli@gmail.com.

Data we process

• Account and authentication: email, profile name, Apple or Google sign-in identifiers, account status and login activity. Existing passwords and server-side session tokens are stored as hashes. Native device tokens use the operating system's protected storage.
• Your travel library: destinations, saved places, maps, notes, edits, sharing permissions and any conversations you initiate.
• Your choices: interface language, budget, interests, food preferences and other travel-profile details you choose to provide. Avoid including medical, religious or other sensitive information in notes or AI requests unless needed for your request.
• Operations and security: request logs, IP addresses, errors, authentication attempts, service usage and credit-ledger records.
• Optional website analytics: public-page visits and device/browser information when you consent, as described in the Cookie Policy.

Why we use it

We process account and library data to provide the service you request, including authentication, personalisation and authorised sharing. We use limited technical information for legitimate interests in security, abuse prevention and reliable operation. We use consent for optional website analytics and any optional processing that requires it, and process information where necessary to comply with legal obligations.

Location and preferences

The app requests location permission to show where you are on a map. We do not maintain a history of your movements. You can change device permissions in system settings. Travel preferences remain associated with your account and are not automatically included in maps shared with other users.

Services and recipients

Apple and Google may process the identity information needed for the sign-in option you choose; this does not grant access to your mailbox, contacts or documents. Google Places provides venue searches. The iOS app uses Apple Maps; map providers for other clients depend on the client being used. Venue images may load from external sources or a server cache, with available attribution.

When an AI feature is enabled and you request it, the relevant destination, prompt and necessary context may be sent to the AI provider identified for that feature. The operator's personal Andrea connection is separate from other accounts. Public paid generation and purchases for new users are currently disabled.

Technical hosting and infrastructure providers process data as needed to operate the service. We do not sell personal data. Behavioural advertising is not currently enabled; introducing advertising or additional providers requires updating the disclosures and applicable controls before activation.

Sharing

Maps are accessible to their owner and accounts granted access. Knowing a legacy itinerary link alone does not bypass those permissions. Sharing a map does not expose the owner's private conversations, preferences or credits. Owners can revoke access; recipients may retain information they independently copied or saved.

International processing

Some third-party services may process information outside your country, including outside the European Economic Area. Where required, transfers must use an applicable adequacy decision or appropriate safeguards such as standard contractual clauses. Contact us for details of the providers and safeguards relevant to your use.

Retention and deletion

Account and library data remain while needed to operate your account, until deletion is requested or another retention requirement applies. Security information and any records legally required may have distinct retention periods. Backup copies follow the backup lifecycle. We will explain applicable retained categories and timing when processing a deletion request; this beta does not promise immediate removal from every backup.

See Delete your account for the current request process, including when you no longer have the app.

Your rights

Depending on the applicable law, you can request access, correction, deletion, restriction or portability of your information, and object to processing based on legitimate interests. You can withdraw optional analytics consent using Cookie settings. We may verify your identity before acting on a request. You can also complain to your supervisory authority, including Italy's Garante per la protezione dei dati personali.

Updates

This policy describes the features currently available in the private beta. We will update it as the product, providers or processing change, and provide additional notices or request consent where required.