Privacy

What we keep

Only what the service needs to work:

• Your email address, which is how you sign in (we send you a one-time link, there is no password).
• What you choose to add to your profile: a name, a photo, the languages you speak.
• Your conversations with guides or travellers, and what you agree on in them: dates, group size, price, meeting point.
• Whether a day out happened, when we ask you. Your answer stays private.
• Testimonials you leave for a guide.
• Itineraries you ask us to build, and what you wrote to get them.
• Your time zone, so we can show the other person your local time.
• If you are a guide: your public page, its photos, and the area you cover.
• If you use the iOS app with notifications on: your device's notification token.

What we do with it

We use it to run Ikitorii: to sign you in, deliver messages, send the emails that go with them (a new message, a proposal, a reminder), show guide pages, and build itineraries. We never sell it, never show ads, and never share your email address with the person you talk to: conversations show names only.

We count visits to the site with Plausible, which uses no cookies and does not track you across sites. The only cookie we set is the one that keeps you signed in.

Our emails tell us whether they were opened, so we know when a message is not reaching someone.

Who helps us run it

These services process data on our behalf, each only for its part of the job:

• MongoDB Atlas stores the database, and Google Cloud Storage stores photos.
• Mailgun sends our emails.
• Apple delivers notifications to the iOS app.
• Anthropic and OpenAI process the text you ask them to work on: itinerary requests, and suggestions for guide pages. They do not use it to train their models.
• Google Maps Platform and Mapbox look up places and draw maps.
• Cloudflare protects and speeds up the site.
• Plausible measures visits; we host it ourselves.

How long we keep it

For as long as you have an account. Sign-in links expire after 24 hours. When you delete your account, it is gone from the live service at once, and from our backups within 90 days.

Deleting your account

You can delete your account yourself, at any time, from your profile page on the site or in the app. A traveller's account is removed completely, with its conversations, itineraries and testimonials. A guide's page, photos and personal details are removed, but the conversations they had stay with the travellers they talked to, so nobody loses a meeting point they agreed on.

Your rights

You can ask us what we hold about you, to correct it, to send you a copy, or to delete it. Write to [email protected] and a person will answer. If you are in the EU and think we got something wrong, you can also complain to your data protection authority.

Changes

If this page changes in a way that matters, we will say so by email before it applies.