Privacy Policy

What we store

Your email address and password (hashed — we never see it). The trips you create and everything attached to them: bookings, confirmation references, dates, locations, costs, travellers you add, preferences, checklists and any documents you save. Your conversations with the concierge. A device token if you turn on push notifications.

Who can see it

Only you, plus anyone you invite to a trip. Other Altair users can never see your trips, and we don't browse them either.

If you choose to publish a trip as a shareable brochure, that page becomes readable by anyone who has the link — no account and no password needed — so treat the link itself as the key and only send it to people you want to have it. The published page shows your itinerary, stops, dates, costs, traveller names and checklist. It never includes confirmation references, booking PINs, passport details or dates of birth. Published pages are not indexed by search engines, and unpublishing stops the link working immediately.

Who we send data to

We use a small number of third parties to run Altair. Each receives only what it needs for its job.

• Supabase hosts our database.
• Anthropic (Claude) is the only AI service Altair uses, and the only third party that receives the contents of your trip. Because it sees the most, it has its own section below — see AI processing.
• Google Geocoding receives a booking's location text so we can identify the place accurately, fetch the right destination photography, and show your bookings on the map on your trip screen.
• MapTiler serves that map's imagery. Loading it tells MapTiler which part of the world you are looking at, but we never send it your bookings, your name or any traveller's details. Maps appear only on screens that are yours — your trip screen, and the preview you see while choosing a brochure design. A published brochure never shows one, so nobody you send a brochure link to loads a map or reaches MapTiler.
• Unsplash receives destination names so we can show that photography.
• Open-Meteo receives a destination's coordinates and dates so we can show seasonal weather and short-range forecasts.
• Viator (activities), Aviasales (flights) and Stay22 (stays) receive the destination and dates when you search for something to do, a flight or a place to stay — never your name or any traveller's details.
• Resend delivers our account emails.
• Expo delivers push notifications.
• Sentry (EU region) receives crash and error reports. It also derives an approximate location (country and nearest city) from the network address your report arrives from; we have disabled storage of the address itself, but this coarse location is added by Sentry and cannot be switched off.
• PostHog (EU region) receives anonymous product-usage events — only if you turn on “Help improve Altair” in the app’s Settings. It is off unless you switch it on.

Sentry and PostHog are both configured to strip personal data before it leaves your device, and neither receives traveller details, documents or trip content. We never send payment details, passwords or medical information to any third party.

AI processing

Altair’s concierge, booking reader and trip stories are powered by Claude, an AI service run by Anthropic. It is the only AI provider we use. We call it from our own servers — your device never contacts it directly.

On by default, explained before anything is sent. Altair’s AI features are central to how the app works, so they are switched on when you create your account. The first time one of them runs, Altair shows you what gets sent and to whom, and gives you the choice to keep them on or turn them off there and then — nothing goes to Claude until you have answered that. You can turn them off at any time in Settings under “Altair AI”; the concierge, booking reader and trip stories stop, and the rest of Altair — your itinerary, bookings, checklist, travellers, brochure and sharing — carries on working.

What is sent: what you type into the concierge; the trip you are working on — its title and dates, your stops, and each booking’s type, provider, times, location, cost and notes; and who is travelling — first names, their relationship to you, and a broad age band such as “child” or “adult”.

What is never sent: your travellers’ exact dates of birth or phone numbers, your booking confirmation references or PINs, your brochure share link, and anything from your travellers’ dietary, allergy, medical, accessibility, nationality or passport details.

One thing we cannot filter. If you paste or upload a booking confirmation so Altair can read it, that document is sent as it is. We have no way to know in advance what your airline or hotel printed on it, so please have a look before uploading anything you would rather not share. We do not store identifier numbers found in it — passport, national insurance or card numbers are discarded and never saved — but the original document does reach Claude in order to be read.

Training. Anthropic processes this for us as our provider under its commercial terms. It does not use anything sent through its API to train its models, and it retains that data only briefly for safety monitoring before deleting it.

How we collect it

All of it comes from you, directly, in the app. You type it in, paste it, or attach a file — a booking confirmation, a traveller’s details, a note on a stop. Altair does not buy data about you, does not import it from data brokers or social networks, does not read your email or your calendar, and does not track you across other apps or websites. The only things generated rather than given are technical: a crash report if the app fails, and — if you switch it on — anonymous usage events.

How third parties must handle it

Every company listed above processes your data on our documented instructions, for the single purpose described next to its name, and for nothing else. Each is engaged under a data processing agreement — the contract required by Article 28 of the UK and EU GDPR — which binds them to protections equivalent to the ones in this policy: they may not sell your data, may not use it for their own advertising or profiling, must keep it secure, must restrict who inside their organisation can see it, must tell us promptly if it is ever breached, and must delete or return it when we ask. Where a provider is outside the UK or EEA, that transfer is covered by an adequacy decision or by Standard Contractual Clauses.

Children

Altair is built for families, so trips often include children as travellers. That information is entered by the adult managing the trip, is visible only to that trip's members, and is never used for advertising or profiling.

Your rights

Under UK data protection law you can ask for a copy of your data, ask us to correct it, or ask us to delete it. You can delete individual trips and bookings yourself at any time.

Contact

Questions about any of this, or to make a data request, use the Contact page.