TravelHubLast updated 10 October 2026
Privacy policy
This policy explains what personal data the TravelHub app and the cosimatravel.com website collect, why, and what control you have over it. We've tried to write it in plain English.
1. Who we are
TravelHub is made by [Your full legal name or company name], trading as Cosima Travel Technologies ("Cosima", "we", "us"). We are the data controller for the personal data described here.
Contact: privacy@cosimatravel.com
Post: [Postal address]
2. What we collect
| Data | Where it comes from | Why we use it |
|---|---|---|
| Account details: name, email address, profile picture, and an ID from your sign-in provider | You, or Apple, Google or Facebook when you sign in with them | To create your account and keep you signed in on the app and website |
| Your travel content: saved trips, itineraries, preferences, travel style | You | To save your plans and sync them between your devices |
| AI Assist conversations: the messages you type or dictate | You | To answer your questions and run the tools you ask for, such as weather or itinerary planning |
| Location (only if you allow it) | Your device | To show local weather and nearby places. We don't track your location in the background. |
| Photos (only the ones you pick) | Your device | To add them to your travel album |
| Technical data: device type, app version, error logs, IP address | Your device and our servers | To keep the service secure and fix problems |
Voice input. When you speak to AI Assist, your phone's built-in speech recognition (from Apple or Google) turns your voice into text. We only receive the resulting text, never the audio.
We do not collect payment card details. Bookings you make through partner sites are handled by those partners under their own privacy policies.
3. Our legal basis
- Contract: to provide your account and the features you use.
- Legitimate interests: to keep the service secure, prevent abuse and improve it.
- Consent: for location and photo access. You can withdraw it at any time in your phone's settings.
- Legal obligation: where the law requires us to keep or share data.
4. Who we share data with
We don't sell your personal data. We share it only with service providers that help us run TravelHub, under contracts that protect it:
- Vercel: hosts our website and server (United States).
- Mistral AI: generates AI Assist and itinerary answers (European Union). We send your message, not your name or email address.
- [Account and database provider, e.g. Supabase or Firebase]: stores accounts and saved trips.
- Google Maps Platform: maps, places and routes.
- Apple, Google and Facebook: only if you choose to sign in with them.
Some providers are outside the UK. Where data leaves the UK, we rely on UK adequacy regulations or the UK International Data Transfer Addendum to protect it.
5. How long we keep it
- Account data and travel content: until you delete your account. We then erase it within 30 days.
- AI Assist conversations: [e.g. 30 days], unless you save the result.
- Technical logs: up to 90 days.
6. Your rights
Under UK data protection law you can ask to access, correct, delete or export your data, object to how we use it, or restrict its use. Email privacy@cosimatravel.com and we'll reply within one month. You can delete your account at any time; see Delete your data.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to sort it out first.
7. Cookies and browser storage
cosimatravel.com uses no tracking or advertising cookies. When you log in, the website keeps a login token in your browser's storage so you stay signed in. It's strictly necessary and is removed when you log out. If we ever add analytics, we'll ask for your consent first.
8. Children
TravelHub is not intended for children under 13, and we don't knowingly collect their data. If you think a child has given us data, contact us and we'll delete it.
9. Security
Data is encrypted in transit, and our API keys stay on our servers, never in the app. No system is perfectly secure, so we'll tell you promptly if a breach affects you.
10. Changes
If we change this policy in a way that matters, we'll tell you in the app before the change takes effect.