1. Who We Are

Keryney (“we”, “our”, “us”) is an AI-powered travel itinerary planner operated by Keryney. Our service is available at keryney.com. Questions about this policy can be sent to sawtraveljapan@gmail.com.

2. What We Collect

Account information

Email address, username, display name, and profile photo when you register.

Itinerary content

Travel plans, destinations, dates, activities, notes, and any content you create or import. This may include travel dates that indicate when you are away from home.

Photos and EXIF data

Photos you upload, which may contain GPS coordinates embedded in the image metadata (EXIF). We store these coordinates to power map and location features. We do not share EXIF data in public itinerary views.

Location / GPS tracking

If you enable the GPS tracking feature during a trip, we record your GPS coordinates in association with a specific itinerary. GPS data is stored privately and is never shared publicly, even if the itinerary is made public.

Payment information

We use Stripe for payments. We do not store card numbers; Stripe handles all payment processing under their own privacy policy.

Usage data

We collect minimal first-party usage signals (such as affiliate link clicks) to operate the service. We may introduce additional analytics (e.g., PostHog or Google Analytics 4) in a future update; if we do, we will request consent before any non-essential cookies are set. See Section 6.

3. How We Use Your Data

To provide and improve the Keryney service
To generate AI travel itineraries based on your inputs
To send transactional emails (account confirmation, itinerary ready notifications)
To process payments and manage subscriptions
To display maps and location-based features
To comply with legal obligations

We do not sell your personal data to third parties.

4. Sharing and Visibility

Your itineraries are private by default. You control visibility:

Private — only you can view it.
Unlisted (share link) — anyone with the secret link can view it. Exact dates, accommodation, and flight details are visible to link recipients. Share only with trusted people.
Public — discoverable by other Keryney users. We recommend enabling this only after your trip has ended. Exact travel dates, accommodation names, and other sensitive details are redacted from the public view.

GPS tracks and photo EXIF coordinates are never included in shared or public views.

5. Data Retention and Deletion

You may delete your account at any time from your profile settings. When you delete your account, we remove your profile, all itineraries, photos (including stored files), and GPS data. Some anonymized aggregate data may be retained for analytics. Stripe retains payment records as required by financial regulations.

6. Cookies and Analytics

The current version of Keryney uses only strictly necessary cookies:

Supabase — authentication session cookies (strictly necessary; no consent required)

We do not currently set analytics, advertising, or session-recording cookies. If we introduce such technologies in a future update (for example, PostHog product analytics or Google Analytics 4 acquisition tracking), we will display a cookie consent banner and obtain consent before any non-essential cookies are set, as required under GDPR and UK GDPR. You can also delete existing cookies at any time via your browser settings.

7. Your Rights (GDPR / CCPA)

Depending on your location, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Delete your data (“right to erasure”)
Restrict or object to processing
Data portability
Withdraw consent (for analytics)

To exercise these rights, email us at sawtraveljapan@gmail.com.

8. Third-Party Services

Keryney integrates with the following services, each with their own privacy policies:

Supabase (database, auth, storage)
Stripe (payments)
Groq & Perplexity AI (itinerary generation)
Google Maps Platform (maps, routes)
Resend (transactional email)
Upstash (Redis caching)
Vercel (hosting)
Sentry (error monitoring)
TravelPayouts / Airalo / Booking.com (affiliate links)

9. Security

We use industry-standard measures including encrypted connections (TLS), row-level security on all database tables, private storage with access controls, and rate limiting on sensitive APIs. No system is perfectly secure — please use a strong, unique password and keep your account credentials private.

10. Changes to This Policy

We may update this policy as the service evolves. Material changes will be communicated via email or an in-app notice. Continued use after changes constitutes acceptance.

11. Contact

For privacy questions, email sawtraveljapan@gmail.com.

Privacy Policy