Kairos is a travel planner. This policy explains what it stores about you, why, and what you can ask to have done with it. It covers both the Kairos website and the Kairos app.
Who is responsible
Kairos is built and run by two people rather than a company. The address at the end of this page is where requests about your data go, and they are answered by a person rather than a support system.
What Kairos stores
Only what planning and living a trip actually needs. There is no advertising profile, and no data here is bought from or sold to anyone.
- Your account — the email address you sign in with, a hashed password if you set one, and the first name, last name and profile picture you choose to add. If you sign in with Apple or Google, they give Kairos your account identifier with them, your email address (with Apple, possibly a private relay address that forwards to you) and your name. A profile picture, like a trip's cover photo, is stored at a public address: anyone holding its link can open it, but these addresses are not listed anywhere.
- Your trips — destinations and dates, stops and journeys, accommodation and travel bookings with their prices, links, times and comments, expenses and who they are split between, the ideas you save and the links they came from, trip statistics, and the other travellers you share a trip with.
- Files you attach — tickets and booking confirmations uploaded to a booking. They are held in private storage that only members of that trip can read.
- Usage data — screens and pages opened, performance timings and error reports, collected through PostHog and, for the app's timings and crash reports, Expo, so the app can be fixed and improved. It is tied to your account's id, your email address is no longer sent with it, and PostHog is told not to work out a location from your connection. You can turn it off on each phone from the account screen. On the website, session replays are recorded with all text and every input field masked, so neither your trips nor what you type is captured; the app records none.
- On your phone — a cached copy of your trips so the app works without a signal, and your sign-in token, held in the operating system's own secure keystore.
Why
Your account and trip data are processed to provide the service you signed up for. Usage data is processed on the basis of a legitimate interest in keeping the app working, and is kept to what that needs. Kairos does not profile you and makes no automated decisions about you.
Who else sees it
Travellers you invite to a trip can see that trip's contents, including the bookings, expenses and files on it. Beyond that, your data is handled by the services Kairos runs on, which act on our instructions, and by the app stores and any AI assistant you choose to connect, which follow their own policies:
- Supabase — accounts, database and file storage.
- Vercel — hosting and performance measurement for the website.
- PostHog, on their European infrastructure — usage analytics and error reports.
- Expo — delivery of app updates, and the app's performance timings and crash reports: how long it takes to open and to draw each screen, which screens are opened, and what failed in a crash. Each phone asks it for the latest version of the app, which shows it the phone's IP address and an installation id, not your identity or your account; the timings and crash reports carry the same installation id with the phone's model, system version and language, and stop with usage data when you turn it off. Expo is based in the United States.
- Stadia Maps — map tiles. It receives the part of the map being viewed and, like every service the app calls directly, your device's IP address — not your identity.
- Komoot Photon — city and place search. It receives the text typed into a search box, the area of the trip being searched, the point of a pin you drop on the map, and the name and point of a place you share into the app or save through the connector. From the app, it also sees your device's IP address.
- OpenStreetMap's Overpass API — opening hours. It receives the OpenStreetMap id of a place you save as an idea and your device's IP address, not your identity.
- Apple and Google — distribution of the app, the crash reports their platforms collect, and confirming who you are when you choose to sign in with them. When you delete an account signed in with Apple on an iPhone, Kairos asks Apple to revoke its access to your Apple account.
- The AI assistant you connect, if you set up the connector — Kairos sends nothing to an AI provider on its own. Once you add your connector link to an assistant such as Claude or ChatGPT, that assistant's provider receives whatever it reads through the link: all your trips, including the names, bookings and expenses of the travellers who share them with you. What it does with them is governed by that provider's own policy.
Where it is held
Kairos itself stores nothing on its own hardware. Everything sits with the providers above, which operate internationally and may process data outside your own country under their standard contractual safeguards. Analytics are held on European infrastructure, except the app's performance timings and crash reports, which Expo processes in the United States.
How long it is kept
Your account and its trips are kept for as long as the account exists. Deleting your account removes your profile, the trips you alone own, and the files attached to them. Content on a trip shared with other travellers stays with that trip, since it is theirs too — expenses you entered and bookings you added remain, so the trip still adds up for the people still on it.
Your rights
You can ask for a copy of your data, correct it, have it deleted, take it elsewhere, or object to how it is used. You can delete your account yourself from the account screen, on the web and in the app, and it takes effect immediately. For anything else, write to the address below and expect an answer within a month. If the answer does not satisfy you, you can complain to your national data protection authority.
Children
Kairos is for travellers of any age, including younger ones on a family trip. Anyone under 16 needs the permission of a parent or guardian to create an account, and a parent or guardian can write to the address below to have their child's account and data deleted. An account found to belong to a child under 16 without that permission is deleted.
Changes to this policy
If this policy changes in a way that affects you, the date at the top changes with it and you are told before the change takes effect.