Draft as of 11 Oct 2026
Privacy and data Draft
About this document
Calestira is a travel planner. This document explains what data we keep, what it is for and who can see it.
Operator: [to be decided by the operator]. Address and contact: [to be decided by the operator].
Data we keep
- Account: email, name, base currency, and a profile photo if you upload one. Passwords are handled by the authentication provider and we cannot read them.
- Trips: destination, dates, number of travellers, budget, preferences, the itineraries built, their change history and notes you add.
- Travel DNA: survey answers and the scores calculated from them, plus a short description if you ask for one.
- Money records inside a trip: expenses, bill splitting, repayments, personal shopper lists and their orders (including the name and contact buyers enter themselves).
- Members and invitations: the emails you invite, roles and invitation status.
- Subscription: plan, order history and payment status. We do not keep card details.
- Technical data: request logs (time, network address, browser type) for security and troubleshooting.
What it is used for
- Building, showing and keeping the itineraries, budgets and collaboration features you ask for.
- Ordering place recommendations by your Travel DNA. It is weighted below your own choices per trip and never overrides limits such as wheelchair access.
- Running subscriptions, billing and preventing abuse of the service.
- Sending the emails the service needs, such as invitations and account confirmation.
Automated assistance
Some features use an automated text-generation service, for example price estimates, the Travel DNA description and eSIM estimates. Only the data a feature needs is sent, such as a place name, city, country, travel preferences or Travel DNA scores. Your name, email, photo and payment data are not sent.
Results are labelled as estimates and never change the data you entered.
Service providers
We use third-party providers to run the service. They only receive what their task needs:
- hosting and database, including user authentication;
- email delivery;
- map and place data, and weather;
- reference exchange rates;
- payment processing;
- file storage for profile photos;
- an automated text-generation service (see the section above).
Who can see your data
- Only you and the members you invite can open a trip, according to their role (owner, editor, viewer).
- Share links are read-only, can be revoked at any time and show a cleaned version of the itinerary.
- Public personal shopper lists show the title, description and prices you set. Buyers only fill in their own details.
- Your profile photo can only be seen by your own account.
- We do not sell your data and do not use it for advertising.
Cookies and on-device storage
We only use cookies the site needs to work. There are no advertising or tracking cookies, so there is no consent banner.
Sign-in session (starts with sb-) | Keeps you signed in. Removed when you sign out. |
tw-lang | Remembers your chosen language for calls to the server. The page language itself follows the address (/en or /id). |
tw-theme | Remembers the Light, Dark or System theme. |
tw-dna | Remembers that you finished your Travel DNA so it is not re-checked on every page. Bound to your account. |
Offline storage | Trip pages you chose to save for offline use. Removed when you sign out. |
How long data is kept
Account and trip data is kept while your account is active. Automatically calculated price estimates are kept temporarily as a cache for 30 days.
Retention after account deletion, order records and backups: [to be decided by the operator].
Security
- Each account can only read its own data; access rules are enforced at the database level.
- Two-step verification (TOTP) is available in Settings.
- Payments are handled by a payment provider; we do not store card numbers.
- No system is perfectly safe. If an incident affects your data, the notification procedure is: [to be decided by the operator].
Your rights
- View and change your name, email, base currency and photo on the Profile page.
- Delete a trip from its page, and revoke share links and invitations.
- Ask for a copy of your data or deletion of your account: [to be decided by the operator].
- Object to, or withdraw consent for, a particular use: [to be decided by the operator].
Children
Minimum user age: [to be decided by the operator].
Where data is processed
Server regions and cross-border transfers: [to be decided by the operator].
Changes
When this document changes, the date at the top is updated. Important changes will be announced in the app or by email.
Contact
Privacy questions: [to be decided by the operator].
