Privacy Policy
Effective date: May 8, 2026
Pecas is a small product, run by one person. We collect what's needed to operate the app, and nothing else. We don't sell your data, we don't run ads, and we don't share your trip details with anyone outside the handful of services that keep the app running.
What we collect
- Account info from Google. When you sign in with Google, we receive your name, email address, and profile photo URL. That's the full extent of what Google passes to us.
- Trip data you create. Trip names, destinations, dates, itineraries, gear lists, expenses, and the names of people you invite. This is what the app exists to store.
- Basic usage logs. We log AI generation requests (timestamp, which feature, success/failure) so we can enforce rate limits and debug failures. We do not log the contents of your trips as part of these usage logs.
How we use it
Operating the app — that's it. Your data is used to render your trips, sync them across your devices, and (if you choose) share them with people you invite. We don't use it for analytics segmentation, advertising, or model training.
Who else touches your data
Pecas relies on a small set of third-party services to run. Each one receives only what it needs:
- Supabase — stores your account and trip data, handles authentication.
- Google — handles sign-in (you're authenticating with your Google account).
- Anthropic — receives the trip parameters (destination, dates, type) to generate suggested itineraries, gear lists, and cost estimates. It does not receive your account info or other trips.
- Mapbox — receives partial destination strings as you type to power the autocomplete dropdown.
- Unsplash — receives the trip name/destination to fetch a hero photo. No account info is sent.
- Vercel — hosts the static app and serves it to your browser.
- Google Analytics (GA4) — receives anonymized page-view and event data so we can see which parts of the app are used. We do not send it your name, email, or trip contents.
Cookies and local storage
We use your browser's local storage to keep you signed in (the Supabase auth token) and remember which screen you were on so a refresh doesn't knock you back to the trip list. We also use Google Analytics 4 to measure aggregate traffic and feature usage — this drops a small number of analytics cookies on your device. If you'd rather not be counted, most browsers offer a "do not track" setting that GA4 respects, or you can use any standard tracker-blocking extension.
How long we keep it
Trip and account data is kept until you delete your account. Usage logs are kept for 90 days for rate-limit enforcement, then aged out.
Your rights
You can request a copy of your data, or full deletion of your account and all associated trips, by emailing hello@pecas.co. We'll respond within 7 days.
Children
Pecas isn't intended for anyone under 13. If you believe a child has created an account, email us and we'll remove it.
Changes to this policy
If we change anything material — what we collect, who we share with, or what we do with it — we'll update the effective date at the top and, if you have an account, send you an email.
Contact
Questions, requests, or concerns: hello@pecas.co.