← SkyMind Travel

Privacy Notice

Last updated: September 24, 2026

Controller: SkyMind Travel, operator of SkyMind Travel, is the data controller for personal data processed through this service.

Categories of personal data we collect

Account data: email address, password (hashed), display name, sign-in provider (e.g. Google).
Trip data: the text of your prompts, generated itineraries, saved trips, and referral relationships.
Usage data: pages visited, buttons clicked, outbound link clicks, generation counts, device/browser identifiers, IP address (for approximate location detection and abuse prevention).
Support data: messages you send us via the contact form.

Purposes and legal bases

We process this data to (a) provide the service and generate trips [performance of a contract]; (b) detect and prevent fraud and abuse of AI credits [legitimate interest]; (c) improve recommendations and product quality [legitimate interest]; (d) send transactional email you request [performance of a contract]; (e) comply with legal obligations.

Who we share data with

Hosting, authentication & database: Supabase and Lovable Cloud process account, trip, support, and usage data to host and operate the service.
AI services: Lovable's AI gateway and Google Gemini receive prompts, relevant trip details, and chat history needed to generate itineraries, packing lists, price-search results, and support responses. Our AI providers are contractually prohibited from training on your content.
Maps & place information: Google Maps and Google Places receive place-search queries and location details when we find venues, reviews, photos, maps, or directions.
Flight-price searches: Travelpayouts and Aviasales receive routes, dates, and related search parameters when we look up flight prices.
Email: Lovable's managed email service processes email addresses and message content for service, support, and price-alert emails. Resend processes administrative operational alerts, which may include account or subscription references needed to investigate a failure.
Payments — PayPal: SkyMind Travel Pro subscriptions are processed by PayPal. We never see or store your card details; we only store a subscription reference and its status. PayPal is a separate data controller for the payment data it collects; see PayPal's privacy statement.
Booking & affiliate partners: when you follow a booking or recommendation link, Travelpayouts/Aviasales, Kiwi.com, Klook, GetRentacar, EconomyBookings, AutoEurope, Airalo, or SafetyWing may receive the link parameters and standard browser information associated with your visit. Their own privacy policies apply after you leave our service.
Authorities: where required by law.

We do not sell personal data.

International transfers

Some subprocessors listed above are based outside the EEA/UK. Where applicable, transfers are protected by Standard Contractual Clauses or an adequacy decision.

Retention

Account data, saved trips and usage logs are kept while your account is active. You can delete your account at any time from My Trips. Deletion removes your profile, saved trips, price alerts, chat history, support conversations (including ones left with the same email before signing in), contact messages and usage records. Two kinds of records are kept after deletion: billing records (amounts, dates and PayPal references, unlinked from your account) for as long as tax law requires, and checkout consent records (proof that renewal terms were shown and accepted, unlinked from your account) for 3 years.

Children

The service is not intended for children under 18, and children under 18 may not create an account or purchase Pro.

Your rights

Subject to applicable law you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent. In the EEA/UK you also have the right to complain to your local data-protection authority. To exercise these rights, contact us via the contact form. We aim to respond within one month.

Security

We use industry-standard technical and organisational measures — encryption in transit, hashed passwords, role-based access, and row-level security on our database — to protect personal data.

Cookies

We use essential cookies and browser storage to keep you signed in, remember preferences, preserve session features, and record your cookie choice. With your consent (Accept), we also load a partner tracking cookie from Travelpayouts to attribute bookings made through our links; choosing Essential only keeps it off. You can change your choice at any time with the “Cookie settings” link in the site footer. Google Maps loads when you view a map; PayPal and booking partners may set their own cookies when you use their services. You can manage or clear cookies and site data in your browser settings.

Contact

For privacy questions, contact us via the contact form.