What we collect
When you sign in with Google, we receive your email address and a unique identifier from Google. We store this to associate your account with any purchases you make.
If you start a membership, Stripe processes your payment and any renewals. Stripe handles card details; we do not store them. We retain a Stripe customer ID and subscription state so we can show your renewal date and let you manage billing through Stripe's hosted portal.
We do not collect any other personal data, run cookie-based trackers, or sell data to third parties.
How we use your data
Your email address is used solely to identify your account and, where you opt in, to send you product updates. We will not send unsolicited marketing.
Purchase records are kept for accounting and to restore access to reports you have paid for.
Cookies and storage
We use browser localStorage to remember your sign-in session and any report preferences you set. No third-party tracking cookies are used.
Third-party services
- Supabase: authentication and database (EU-West-1, Ireland)
- Stripe: payment processing
- Cloudflare: hosting and CDN
- Google OAuth: sign-in only; we do not access your Google account beyond your email
- Umami: self-hosted, cookieless visitor counts; no personal data, no fingerprinting
- Windy.com: live air-quality map embed; loaded inside a
credentiallessiframe (ephemeral storage partition, no cookies reach our origin or persist) - Mistral AI (France, EU-hosted): subprocessor for the internal knowledge base. Used to generate vector embeddings of the admin documents that power our country guides, and, when the assistant feature ships, to answer your questions from those documents. When you ask the assistant a question, a short, non-sensitive subset of your settings (origin country, units, currency, diet, age band, relocation horizon) is sent alongside the question so the answer can be tailored to you. We do not send your name, email, address, payment details, health information, or anything else not listed above. Inference is routed to
api.mistral.aiin France only.
Your rights
You can request deletion of your account and associated data at any time by emailing [email protected]. Under GDPR you also have the right to access, correct, or port your data.
Contact
Questions? Email [email protected].