Privacy policy

Your account. A name, an email address and — if you sign in with Google — the profile picture Google shares. You can change your display name and accent colour any time from the account menu.

Your trip content. The trips you create or join and everything in them: destinations and votes, itinerary days, packing and checklist items, expenses, and chat messages. Trip content is never shown to other users outside the trip and is never made public. One thing to know: anyone who has a trip's invite link can join it and see its content — share the link the way you'd share the plan itself.

No advertising, no selling or renting data, no tracking pixels, no profiling. We use Vercel Web Analytics for aggregate, cookie-less page statistics (how many people visited a page — not who they are). The only emails you'll ever get are the sign-in ones — confirmation and password reset — never marketing.

Signing in sets session cookies — they are how the app knows it's you, and the site doesn't work without them. Your browser also keeps a few local preferences (theme, which notifications you've seen) that never leave your device.

Your data lives with two infrastructure providers: Supabase (database and authentication) and Vercel (hosting and the analytics above), in their cloud regions, which may be outside India. If you choose “Continue with Google”, Google handles that sign-in.

Some features call external services from our servers — place search, weather, road routes, elevation and product search. Those providers receive the query (a place name, a product search) but not your identity or account details.

Your content stays until you delete it or leave the trip that holds it. To delete your account and everything tied to it, email jaychouhan.cj7@gmail.com from the address on the account and we'll remove it.

Traffic is encrypted in transit, database access is locked down per trip membership, and we keep the surface area small. No system is perfect; if a breach ever affects your data, we'll notify you as the law requires.

Niklo isn't directed at children under 13, and we don't knowingly collect their data.

If this policy changes, the date above changes with it. Questions: jaychouhan.cj7@gmail.com.