Privacy policy

Kometa is run by Linda Rian as a free, non-commercial project. Under the GDPR that makes her the data controller for the information described here.

For anything in this policy — including any of the requests below — email kometa@linda-rian.com.

Only what the app needs to work. Specifically:

• Your account. When you sign in with Google we receive and store your name, email address, profile picture and Google account identifier. We never see your Google password.
• Your preferences. Default currency, home airport and any airports you favourite.
• What you put into a trip. Trip names, dates and destinations, plus the flights, stays, car rentals, activities and pins you add — including addresses, booking references, prices and any notes you write. Please do not put anything in a note that you would not want the other people on that trip to read.
• Your companions. Which other Kometa users you are connected to, and pending requests in either direction.
• A record of changes. When trip content is created, changed or deleted we log what changed and who changed it, so the people on a shared trip can see how their plans got that way.
• Technical logs. Our hosting provider records ordinary server logs, which include IP addresses and details of each request, and are used for security and debugging.

We do not use analytics, advertising or tracking of any kind. There is no profiling and no automated decision-making, and we do not sell or rent your data to anyone.

• To provide the service you asked for — your account, your trips and sharing them with the people you invite. This is processing necessary to perform our contract with you.
• To keep the service secure and accountable — the record of changes, rate limits and server logs. This is our legitimate interest in a service that is not abused and where trip members can see who changed their plans.

Other people on your trips, first and foremost. When you join or are invited to a trip, the other members can see your name and profile picture, everything you add to that trip, and your changes in its history. Trip owners and admins can also see costs and can remove you. Only add people you actually want to share with.

We also rely on these providers to run the service:

• Google — for sign-in. Separately, when you type into an address or destination field, what you type is sent to Google Places to fetch suggestions.
• Vercel — hosting and server logs.
• Neon — the database your data is stored in.
• Frankfurter — exchange rates. Only a currency code is sent; nothing about you.

We may also disclose information if the law requires it. Otherwise, no one else gets it.

Kometa sets four cookies, all strictly necessary — there are no analytics or advertising cookies, which is why you are not being asked to consent to any.

• session — keeps you signed in. Expires after 30 days, extended as you keep using the app.
• google_oauth_state, google_code_verifier and oauth_return_to — used only during sign-in to protect the exchange and send you back where you started. They last ten minutes.

Your data lives with the providers listed above. Some of them may process it outside the European Economic Area; where they do, they rely on the European Commission's standard contractual clauses or an adequacy decision to protect it.

• Your account and trip content are kept until you delete your account.
• Sign-in sessions expire after 30 days of not being used.
• Invite links stop working after 7 days.
• When you delete your account, trips only you could see are deleted with it. Trips you shared with other people remain theirs, and the content you added to them stays — but it is no longer linked to you, and neither is the change history.

Under the GDPR you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything that is wrong — your name and preferences are editable on your profile page at any time.
• Delete your account and personal data. You can do this yourself: Profile → Delete account. If you are the only owner of a trip other people are on, you will be asked to make someone else an owner first, so their plans are not destroyed along with your account.
• Restrict or object to how we use your data.

Data portability — a machine-readable export of your data — is a right the app does not yet support on its own. Email kometa@linda-rian.com and we will put one together for you.

You also have the right to complain to your local data protection authority if you think we have handled your data badly.

Kometa is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has created an account, let us know at the address above and we will remove it.

If we change this policy in a way that matters, we will update the date at the top and tell you in the app before the change takes effect.