Privacy Policy

Routely is a travel price comparison platform that helps you find and compare flights and hotel prices across multiple providers. When this policy refers to "we", "us", or "Routely", it means the Routely service and its operators.

If you have any questions about this policy or how we handle your data, you can reach us at privacy@routely.app.

We collect only the data necessary to provide the service:

• Account information — your email address and password (hashed) when you register, or your Google account details if you sign in with Google.
• Search data — flight and hotel searches you perform, including origin, destination, dates, and passenger counts. This is used to return results and power your recent searches list.
• Saved preferences — favourites and price alerts you set, linked to your account.
• Usage data — pages visited, features used, and general interaction patterns, collected in aggregate via analytics cookies (only if you consent).
• Device & browser data — IP address, browser type, and operating system, used for security and fraud prevention.

We group cookies into three categories. You can choose which categories to allow when you first visit, or update your preferences at any time via the cookie icon in the bottom-left corner of any page.

Essential cookies cannot be disabled — they are required for authentication and to remember your consent choice. Functional cookies can be declined; doing so means your theme and recent searches won't persist between sessions. Analytics cookies are off by default and only activated if you explicitly accept them.

• To create and manage your account
• To return flight and hotel search results from our provider partners
• To send price drop alerts you have explicitly requested
• To remember your preferences (theme, recent searches)
• To detect and prevent fraud or abuse
• To improve the service — only using aggregated, anonymised analytics where you have consented

We do not sell your personal data to third parties.

We use the following third-party services that may process your data:

• Supabase — authentication and database hosting. Data is stored in the EU. See Supabase Privacy Policy.
• RapidAPI / Kiwi / Booking.com / Agoda — flight and hotel data providers. Search queries (origin, destination, dates) are sent to these APIs to retrieve results. No personally identifiable information is shared.
• Duffel — flight search provider. See Duffel Privacy Policy.

We retain your account data for as long as your account is active. If you delete your account, your personal data is removed within 30 days. Search history and alerts are deleted immediately on account deletion.

Data stored in your browser (local storage) is under your control and can be cleared at any time through your browser settings.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your personal data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests
• Withdraw consent — you can withdraw cookie consent at any time via the cookie icon at the bottom-left of the page

To exercise any of these rights, email us at privacy@routely.app.

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and role-based access controls on our database.

We may update this policy from time to time. The "Last updated" date at the top of this page reflects when changes were last made. Continued use of Routely after changes are published constitutes acceptance of the updated policy.