Privacy Policy

Who we are

Itinerary Organizer is operated by JJW Apps Ltd, the data controller for the personal data described in this policy.

• Registered in England & Wales, company number 17259212.
• Registered office: 135 Hungerhill Road, Rotherham, S61 3NW.
• Contact: support@jjwapps.com.

Data we collect

We collect the following categories of personal data:

• Early-access enquiries — your name, email, organisation, role, any message you send, and whether you volunteer for an interview.
• Organiser account — your name, email, and Google sign-in identifier when you sign in.
• Attendee data you upload — names, optional emails, origins and addresses, roles, accessibility notes, and travel preferences.
• Usage and essential-cookie data — limited technical information about how the service is used, plus the essential session cookie described below.

How we use your data and our lawful bases

We use personal data to provide and improve Itinerary Organizer, relying on these lawful bases under UK GDPR:

• Consent — for early-access enquiries and any research interview, which you may withdraw at any time.
• Contract — to deliver the organiser account and the travel-planning service you ask us to perform.
• Legitimate interests — to keep the service secure and to improve how it works, balanced against your rights.

Who we share your data with

We do not sell your personal data. We share it only with the service providers (processors) that operate Itinerary Organizer, each bound to protect it and to use it solely on our instructions:

• Google Firebase / Google Cloud — application hosting, authentication, and the Firestore database that stores account and trip data.
• Google Gemini API — AI normalisation of uploaded attendee rows and generation of travel-brief prose; inputs are processed to produce the output, not to train the model.
• SerpAPI — live flight search.
• Google Maps Platform — geocoding, time-zone, and routing data used to resolve origins and rank travel options.
• PostHog — privacy-conscious product analytics, hosted in the EU.
• Google Workspace — email and internal business operations.

International transfers

Some of these providers process data outside the UK. Where they do, the transfer is protected by an adequacy decision or by standard contractual clauses (the UK International Data Transfer Agreement / Addendum), so your data keeps an equivalent level of protection.

Your rights

You have the following rights over your personal data:

• Access — a copy of the data we hold about you.
• Rectification — correction of inaccurate data.
• Erasure — deletion of your data.
• Restriction — limiting how we use it.
• Portability — your data in a portable format.
• Objection — to processing based on legitimate interests.
• Withdraw consent — where we rely on consent.

To exercise any of these, contact us using the details in “Who we are”. We aim to respond within one month. If you are unhappy with our response, you can complain to the Information Commissioner’s Office (ICO), the UK supervisory authority.

Data retention

We keep personal data only for as long as it is needed:

• Early-access enquiries — until you ask us to remove them.
• Account and trip data — for the life of your account, then deleted within a 30-day window after you close it.
• Analytics data — for a limited period set by our analytics provider.

Cookies

We use a single essential cookie, __session, to keep you signed in. It is strictly necessary for the app to work and carries no advertising or cross-site tracking. We set no marketing or third-party advertising cookies.

Security

We protect personal data with measures including encryption in transit, authenticated access, and least-privilege access to our systems. No method is perfectly secure, but we work to safeguard your data and to meet our legal obligations.

Children’s privacy

Itinerary Organizer is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has provided us data, contact us and we will remove it.

Data you upload about other people

Organisers who upload attendees’ details confirm they are authorised to share that data with us for travel planning, and that they will tell those individuals how their data is used where required.

Changes to this policy

We may update this policy as the service or the law changes. We will revise the “last updated” date above and, for material changes, take reasonable steps to let you know.

Contact us

Questions about this policy or how we handle your data? Contact us using the details in “Who we are” above. You can also complain to the ICO if you are based in the UK.