Privacy Policy
Last updated: 24 April 2026
TUA ("we", "us", or "our") is committed to protecting your privacy. This policy explains what personal information we collect, how we use and store it, and your rights under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
1.Who we are
TUA is an AI-powered travel orchestration platform operated from Australia. Contact: tuahimself@gmail.com.
2.What information we collect
- Account information — email address, display name (optional), and hashed password when you create an account.
- Travel preferences — travel style, pace, accommodation preference, interests, and dietary requirements you enter on your profile.
- Brief data — trip inputs (origin, destinations, dates, group size), generated briefs, tier choices, and votes.
- Device & usage data — anonymous identifiers used to associate briefs created before signing up, and basic technical logs from Netlify and Railway (IP address, user agent, timestamps).
- Location data (opt-in only) — if you explicitly enable "Share my location" on a trip, we process your device's GPS coordinates to show your position to other members of that specific trip. Location data is not collected unless you turn this on.
3.How we use your information
- Provide the core service: generate, store, and display travel briefs.
- Personalise briefs using your preferences and past trip history.
- Enable group features (shared briefs, voting, live GPS coordination).
- Maintain platform security and prevent abuse.
- Communicate service updates and respond to support enquiries.
We do not sell personal information. We do not use your data to train public AI models.
4.Third parties we share data with
- Anthropic — we send trip inputs and (for registered users) anonymised preference context to Anthropic's Claude API to generate briefs. No email address or account identifiers are sent.
- Netlify (frontend hosting, United States) — standard web traffic logs.
- Railway (backend hosting, United States) — application data, including account records, briefs, and opt-in location data, is stored on Railway infrastructure.
- Affiliate booking partners (e.g. Booking.com, Skyscanner, Viator, Rentalcars) — when you click "Book", you are redirected to these third parties. We may receive a commission. Their own privacy policies apply to any booking you make.
Some of these providers are located outside Australia. By using TUA you consent to your information being transferred to and processed in these jurisdictions under their own privacy laws.
5.Location data — how we handle live GPS
Live GPS sharing is strictly opt-in per user, per trip. When turned on:
- Your browser transmits your coordinates to TUA approximately every 30 seconds.
- Only other opted-in members of the same trip can see your position.
- Turning the toggle off immediately clears your last known location from our systems.
- Leaving a trip removes your membership and any associated location data.
6.How long we keep your data
- Account data — kept while your account is active. Deleted on request.
- Briefs — kept while your account is active, or until you delete them.
- Location data — only retained while actively shared; cleared when you turn GPS off or leave a trip.
- Anonymous briefs — retained for operational purposes and may be periodically purged.
7.Your rights (Australian Privacy Principles)
You have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of your account and associated data.
- Withdraw consent (e.g. turn off location sharing, or delete your account).
- Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have mishandled your information.
Email tuahimself@gmail.com to exercise any of these rights.
8.Security
Passwords are stored hashed, never in plain text. All traffic to and from TUA uses HTTPS. We follow industry-standard practices to protect your data, though no online service can guarantee absolute security.
9.Cookies & local storage
TUA uses browser local storage to keep you signed in and to remember your anonymous identifier. We do not use third-party advertising cookies.
10.Children
TUA is not intended for users under 16. We do not knowingly collect personal information from children under 16.
11.Changes to this policy
We may update this policy from time to time. Material changes will be flagged in-app or by email. The date at the top always reflects the latest version.