Privacy Policy

1. Who runs Winnie

Winnie is operated by the team behind trywinnie.com. If you have a question about your data, email us at hello@trywinnie.com.

2. Information we collect

We collect the minimum needed to plan your trip and improve the product.

Account information

• Google sign-in: name, email address, and profile picture as returned by Google OAuth. This is the only way to sign in.

Trip content

• Your chat prompts, refinements, and the itineraries Winnie generates for you.
• Optional details you share to improve the plan (origin city, dates, budget, travel companions, dietary or accessibility notes).

Automatic technical data

• Device type, browser, approximate location (from IP), and referrer.
• Session recordings and analytics via FullStory, Google Tag Manager, and Vercel Analytics.
• Basic logs (URL, timestamp, response codes) that help us debug and improve reliability.

What we do NOT collect

• Payment or card information (we do not process payments).
• Passwords (Google sign-in uses OAuth).
• Passport, visa, or government ID numbers.
• Data from you before you visit trywinnie.com.

3. How we use your information

• Generate and save your trip itineraries.
• Personalize suggestions based on your stated preferences (budget, travel style, dates).
• Send you a summary email or WhatsApp message about your saved trips if you consented at sign-up (India regulations permit transactional messages tied to the service).
• Improve Winnie: identify bugs, understand which destinations users search for, and refine the AI planner.
• Prevent abuse: rate-limit generation, detect automated scraping, and enforce our Terms of Service.

4. Third-party services we integrate

• Google (OAuth & AI): sign-in and itinerary generation. Google's privacy policy applies.
• Vercel: hosting and edge delivery, and Vercel Analytics for aggregate usage stats.
• FullStory: anonymised session recording for product improvement. You can opt out at any time by emailing us.
• Google Tag Manager and Google Analytics: aggregate traffic analytics.
• OpenStreetMap and Open-Meteo: map tiles and weather data (no personal info sent).
• Booking partners: when you click through to Booking.com, Skyscanner, IRCTC, MakeMyTrip, or RedBus, their site takes over and their own privacy policy applies.

5. Cookies and local storage

Winnie uses cookies and browser local storage for essentials (session, preferences, saved trips) and analytics. Essential cookies cannot be turned off; analytics cookies can be blocked in your browser without breaking core functionality.

6. Data retention

• Account data: kept as long as your account exists.
• Trip itineraries: kept indefinitely so you can return to old trips, unless you delete them.
• Session recordings: retained for up to 90 days, then auto-deleted.
• Logs: retained for 30 to 90 days for debugging and abuse prevention.

To delete your account and associated data, email hello@trywinnie.com from the address on file. We complete deletions within 30 days.

7. Sharing your data

We share data ONLY in these cases:

• With the third-party services above, strictly to run the product.
• When you deep-link out to a booking partner (Booking.com, Skyscanner, IRCTC, etc.), the partner sees your click and any query params in the URL. We never pass your name or email to them without your explicit consent.
• If required by Indian law, a valid court order, or to prevent imminent harm.

We do not sell, rent, or license your personal data. Ever.

8. Your rights

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), and comparable laws in your jurisdiction, you can:

• Request a copy of your personal data (data portability).
• Correct inaccurate personal data.
• Delete your account and personal data (right to erasure).
• Withdraw consent for optional processing at any time.
• Lodge a complaint with the Data Protection Board of India.

Send requests to hello@trywinnie.com. We respond within 30 days.

9. Children

Winnie is not intended for children under 13. If you are a parent or guardian and believe your child gave us personal information, contact us and we will delete it.

10. Data location

Winnie is hosted primarily on Vercel infrastructure. Your data may be processed in India, Singapore, the United States, or the European Union depending on which region serves your request. We rely on standard contractual clauses with our providers where cross-border transfers occur.

11. Changes to this policy

We update this policy as we add features. Material changes will be notified at the top of this page and, when possible, via the email address on your account. Continued use of Winnie after an update means you accept the revised policy.

12. Contact

hello@trywinnie.com