Privacy policy

Last updated 5 November 2026. Applies to the Luwato website and the Luwato iOS and Android apps.

What we keep, and where

• On your device: your trips, checklist ticks, budget entries, travel profile and assistant chats are stored on your phone or in your browser.
• If you create an account: your email address, your travel profile (such as home city, home currency, passport country, pace, food preferences and any accessibility note you choose to add) and your saved trips are stored with our database provider, Supabase, so they sync across your devices.
• Pro waitlist: if you join, we keep your email address to tell you when Pro launches.
• Anonymous search statistics: when a guide is built we record the destination, month, trip length, number of travellers, budget level, interests and passport country, so we can improve popular guides. This is never linked to your name, email, account or device.
• Shared guide information: general destination content (such as places, food and transport) is reused between travellers. Your personal details, food preferences and accessibility notes are never stored in it.

How your requests are processed

• Trip guides, the assistant and translations are written by Anthropic's Claude. We send your trip details, travel profile preferences and messages to Anthropic to produce the answer.
• Exchange rates come from ExchangeRate-API, weather from Open-Meteo and live events from Ticketmaster. These requests contain the destination and dates, not your identity.
• Maps are drawn with OpenStreetMap or Google Maps, which receive the map area being viewed.
• Place suggestions come from Open-Meteo's place search and destination photos from Unsplash. These receive the destination you type, not your identity.

Location and notifications

Your location is only used when you tap "Show me" on a trip map. It is shown on the map on your device and is not sent to us or stored. Trip reminders are scheduled on your phone; we don't send them from a server.

Links to other sites

Booking, ticket and eSIM links take you to partner websites, which have their own privacy policies. Some are affiliate links, so the partner may tell us that a booking was made, without telling us who you are.

What we don't do

We don't sell your data, show third-party adverts or use advertising trackers.

Your choices

• Delete a trip from My trips at any time. Signed-in trips are deleted from your account too.
• Turn trip reminders off in your profile, or in your phone's settings.
• To delete your account and everything stored with it, contact us using the support email on our app store listing and we'll remove it within 30 days.

Children

Luwato isn't aimed at children under 13 and we don't knowingly collect their data.

Changes

If we change this policy we'll update the date above. Significant changes will be shown in the app.