Privacy Policy

Travel 963 privacy policy: what data we collect, how we use and protect it when you browse or book, and your rights to access, correct or delete it.

Last updated: 20 October 2026

This policy explains how Tarhal — Travel963 collects, uses and protects data when you use the Travel963 app for Android and iOS and the website travel963.com. By using the app or the website, you agree to this policy.

1. Data we collect

Data you provide

  • Trip preferences when using the trip planner: destinations, interests, number of days and travellers, budget tier, pace, approximate dates and notes.
  • Contact details when requesting a trip to be arranged: name, and email and/or phone number.
  • Account data if you create an (optional) account: name, email, password and phone number if added. Passwords are stored hashed and cannot be read by anyone.
  • Saved itineraries that you save to your account.
  • Newsletter email if you subscribe on the website.

Data collected automatically

  • A random device identifier created by the app on first launch. It is not linked to your identity or to any hardware ID, and is used only to prevent overuse of the trip planner.
  • IP address and technical data (device type, browser, request time) recorded in server and security logs for security and abuse prevention.
  • Aggregated trip-planner statistics (most requested destinations, months and durations) with no personal data.

The app uses no advertising trackers and does not access your location, contacts, photos or camera.

2. How we use data

  • To generate and display your suggested itinerary.
  • To process trip requests, contact you about them and show their status.
  • To run your account: sign-in, saved itineraries and past requests.
  • To send the newsletter, only to subscribers.
  • To protect the service against abuse and fraud, and to improve content using aggregated statistics.

We do not sell or rent personal data.

3. Who receives data

  • AI provider (Google Gemini, with Anthropic Claude as a fallback): receives trip preferences only to generate the itinerary — never your name, email or phone. We ask Google not to store request content.
  • Trusted tourism partners in Syria: only when you request a trip, we share your contact details and itinerary as needed to arrange it.
  • Technical providers: hosting, Cloudflare (security and performance) and MailerLite (newsletter).
  • Authorities where required by law.

Data may be processed on servers outside your country, including in the EU and the US, by providers that apply appropriate safeguards.

4. Retention

  • Account data: for as long as the account exists; deleted when you delete it.
  • Trip requests: up to 3 years as business records, then deleted or anonymised.
  • Server and security logs: a short period, normally no more than 90 days.
  • Newsletter: until you unsubscribe.

5. Account deletion and your rights

You can delete your account at any time in the app: Account → Delete account. Your account, its data and saved itineraries are deleted immediately. Trip requests you already sent remain in our records for the period above, unlinked from the account; you can ask us to delete them by email.

You may request a copy, correction or deletion of your data, or object to its processing, by emailing us at the address below. We reply within 30 days.

6. Security

Traffic between the app and our server is encrypted (HTTPS). Passwords and sign-in tokens are stored in non-reversible hashed form, and checking a trip request’s status requires a secret key held by the requester. No system is perfectly secure, but we apply reasonable safeguards.

7. Cookies (website)

The website uses cookies needed for it to work (selected language, Cloudflare security) and may use analytics and advertising tools. You can manage or delete cookies in your browser settings. The app itself uses no advertising cookies.

8. Children

The service is not directed at children under 16 and we do not knowingly collect their data. If we learn we have, we will delete it.

Content may link to other websites or services; we are not responsible for their privacy practices.

10. Changes

We may update this policy. Changes are published on this page with the update date, and material changes are announced in the app.

11. Contact

For any privacy question or request: [email protected]