Privacy Policy

The short version

• Ghusht works without an account. In guest mode, your preferences, trips, and saved places live only on your device.
• If you sign in, that same data syncs to your account so it follows you across devices.
• Push notifications are strictly opt-in and can be turned off at any time.
• We do not sell your personal data, and we do not show third-party ads.

What we collect and why

Guest mode (no account)

Your Travel DNA answers, saved places, trips, and language choice are stored locally on your device (browser storage). They are not transmitted to our servers and are deleted if you clear your browser or app data.

If you create an account

We collect your email address (and, with Google sign-in, your name and profile basics as shared by Google) to create and secure your account. Your Travel DNA, saved places, and trips are stored with your account so they sync across devices. Authentication and storage are provided by Supabase; each user’s data is isolated with row-level security.

Concierge questions

When you ask Arya something, the text of your question (and relevant trip context, such as your Travel DNA preferences) is sent to our AI providers (Anthropic and OpenAI) to generate the answer. Don’t include sensitive personal information in your questions.

Push notifications (native apps, opt-in)

If you explicitly enable notifications, we store a device token linked to your account and use it only to deliver notifications via Google’s Firebase Cloud Messaging. Disable notifications in your device settings at any time; unused tokens are deleted automatically.

Product analytics

We record anonymous usage events (for example, “a search was submitted”) to understand which features help travelers. These events are not used for advertising.

Third parties

• Supabase — account authentication and data storage.
• Vercel — website hosting and anonymous analytics.
• Anthropic & OpenAI — generating concierge answers from your questions.
• Google Firebase Cloud Messaging — delivering opt-in push notifications.
• Unsplash — destination photography loaded from their CDN.
• Booking partners — when you open an exact product, official property site, or availability search, you may leave Ghusht and the provider’s own privacy policy applies. Some links are affiliate links, which tell the partner the visit came from Ghusht; they do not include your personal data.

Your choices and rights

• Use guest mode — the full product works without an account.
• Export or delete your data — email us at ghushtadmin@gmail.com from your account email and we will delete your account and its data within 30 days.
• Turn off notifications — in your device settings, or simply never enable them.
• Local data — clearing your browser or app storage removes all guest-mode data instantly.

Children

Ghusht is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes and contact

If our data practices change, we will update this page and its effective date. Questions or requests: ghushtadmin@gmail.com.