← Back to Keryney

Privacy Policy

Last updated: July 10, 2026

1. Who We Are

Keryney (“we”, “our”, “us”) is an AI-powered travel itinerary planner operated by Keryney. Our service is available at keryney.com. Questions about this policy can be sent to support@keryney.com.

2. What We Collect

Account information

Email address, username, display name, and profile photo when you register.

Itinerary content

Travel plans, destinations, dates, activities, notes, and any content you create or import. This may include travel dates that indicate when you are away from home.

Photos and EXIF data

Photos you upload, which may contain GPS coordinates embedded in the image metadata (EXIF). We store these coordinates to power map and location features. We do not share EXIF data in public itinerary views.

Location / GPS tracking

If you enable the GPS tracking feature during a trip, we record your GPS coordinates in association with a specific itinerary. GPS data is stored privately and is never shared publicly, even if the itinerary is made public.

Payment information

We use Stripe for payments. We do not store card numbers; Stripe handles all payment processing under their own privacy policy.

Usage data

We collect minimal first-party usage signals (such as affiliate link clicks) to operate the service. We may introduce additional analytics (e.g., PostHog or Google Analytics 4) in a future update; if we do, we will request consent before any non-essential cookies are set. See Section 6.

3. How We Use Your Data

  • To provide and improve the Keryney service
  • To generate AI travel itineraries based on your inputs
  • To send transactional emails (account confirmation, itinerary ready notifications)
  • To process payments and manage subscriptions
  • To display maps and location-based features
  • To comply with legal obligations

We do not sell your personal data to third parties.

AI itinerary pattern reuse — When our AI generates a general-purpose itinerary for a destination (i.e. no personal special requests were provided), we may cache that itinerary and reuse it to answer future requests from other users for the same destination, trip length, and season. This speeds up generation and reduces cost. We never cache or reuse itineraries generated from a personalized request (e.g. one that mentions specific people, dates, or special requirements) — these are only ever saved to your own account, not the shared cache.

4. Sharing and Visibility

Your itineraries are private by default. You control visibility:

  • Private — only you can view it.
  • Unlisted (share link) — anyone with the secret link can view it. Exact dates, accommodation, and flight details are visible to link recipients. Share only with trusted people.
  • Public — discoverable by other Keryney users. We recommend enabling this only after your trip has ended. Exact travel dates, accommodation names, and other sensitive details are redacted from the public view.

GPS tracks and photo EXIF coordinates are never included in shared or public views.

5. Data Retention and Deletion

You may delete your account at any time from your profile settings. When you delete your account, we remove your profile, all itineraries, photos (including stored files), and GPS data. Some anonymized aggregate data may be retained for analytics. Stripe retains payment records as required by financial regulations.

6. Cookies and Analytics

Keryney uses the following cookies:

  • Supabase — authentication session cookies (strictly necessary; no consent required)
  • Google Analytics 4 — aggregated site usage analytics, such as pages viewed and general usage patterns (non-essential; not set until you accept the cookie banner below). We do not use it for advertising or cross-site tracking.

Analytics cookies are blocked by default (Google Consent Mode) and are only enabled after you choose “Accept” on the cookie banner shown on your first visit, as required under GDPR and UK GDPR. You can decline at any time from that banner, or withdraw consent afterward by clearing your browser's site data for keryney.com and reloading the page. We may introduce additional analytics tools in the future (for example, PostHog product analytics); if we do, they will be gated by the same consent mechanism.

7. Your Rights (GDPR / CCPA)

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data (“right to erasure”)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent (for analytics)

To exercise these rights, email us at support@keryney.com.

8. Third-Party Services

Keryney integrates with the following services, each with their own privacy policies:

  • Supabase (database, auth, storage)
  • Stripe (payments)
  • Groq & Perplexity AI (itinerary generation)
  • Google Maps Platform (maps, routes)
  • Google Analytics 4 (site usage analytics, consent-based — see Section 6)
  • Resend (transactional email)
  • Upstash (Redis caching)
  • Vercel (hosting)
  • Sentry (error monitoring)
  • TravelPayouts / Airalo / Booking.com (affiliate links)

9. Security

We use industry-standard measures including encrypted connections (TLS), row-level security on all database tables, private storage with access controls, and rate limiting on sensitive APIs. No system is perfectly secure — please use a strong, unique password and keep your account credentials private.

10. Changes to This Policy

We may update this policy as the service evolves. Material changes will be communicated via email or an in-app notice. Continued use after changes constitutes acceptance.

11. Contact

For privacy questions, email support@keryney.com.