Legal

Privacy Policy

Last updated: May 1, 2026

1. Introduction

Limmello ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services. By using Limmello, you agree to the practices described in this policy.

2. Information We Collect

We collect the following types of information:

  • Account information: Name, email address, and authentication credentials when you create an account.
  • Trip data: Destinations, dates, budgets, preferences, itineraries, and activities you create within the app.
  • Uploaded files: Receipts, booking confirmations, and images you attach to activities.
  • Chat messages: Conversations with our AI assistant to generate and refine itineraries.
  • Usage data: Browser type, device information, pages visited, and interaction patterns to improve our service.

3. How We Use Your Information

  • To create and manage your account
  • To generate personalized travel itineraries using AI
  • To store and display your trip plans, activities, and uploaded documents
  • To enable trip sharing and group collaboration features
  • To track budget and booking status across your trips
  • To improve our AI models and service quality
  • To send transactional emails (account verification, password resets)

4. Data Storage and Security

Your data is stored securely using Supabase, which provides encryption at rest and in transit. We use industry-standard security measures including:

  • TLS/SSL encryption for all data in transit
  • AES-256 encryption for data at rest
  • Row-level security policies to isolate user data
  • Regular security audits and vulnerability assessments

5. Third-Party Services

We use the following third-party services that may process your data:

  • Supabase: Database hosting and authentication
  • OpenAI: AI-powered itinerary generation (chat messages are sent to OpenAI's API)
  • Vercel: Application hosting and deployment
  • Stripe: Payment processing (when Pro plan launches)

Each third-party service operates under its own privacy policy. We do not sell your personal data to any third party.

6. Data Sharing

We do not sell, rent, or trade your personal information. Your trip data is only shared with other users when you explicitly invite them as trip companions. AI chat messages are sent to OpenAI for processing but are not used to train their models.

7. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your account and all associated data
  • Export your trip data
  • Withdraw consent for data processing

To exercise any of these rights, contact us at infolimmello@gmail.com. We will respond within 48 hours.

8. Cookies

We use essential cookies to maintain your session and authentication state. We do not use advertising or tracking cookies. No third-party analytics cookies are set without your consent.

9. Children's Privacy

Limmello is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and notify users of material changes via email. Continued use of Limmello after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or our data practices, contact us at infolimmello@gmail.com.