← Arête

Privacy

What we keep, and what we don't.

Last updated 14 October 2026

Arête writes travel itineraries with AI. This page explains what information that involves, who handles it, and how to have it removed. Arête is operated by Arête Travel LLC, 215 Grove Street, Jersey City, NJ 07302, USA ("we"). Questions or requests: hello@aretetravel.app.

What we collect

WhatWhyWhere it lives
Your trip brief — destination, dates, departure city, vibe, interests, budget, dietTo write your itinerarySent through our server to our AI provider for that request. We do not store it on our servers.
Your itineraries and conversations with Sophia, our AI conciergeSo you can return to a tripIn your own browser (local and session storage). Sophia's messages are sent to our AI provider to produce replies.
Account details — email address, and name and photo if you sign in with GoogleTo sign you inWith our sign-in provider, Clerk.
Travel profile — default vibe, interests, budget, home airport, a note to your curatorTo pre-fill your next briefStored with your Clerk account.
Dietary needs in your profileTo plan meals you can eatSaved only if you tick the consent box, because halal, kosher and medical diets can reveal religious or health information. Otherwise a diet applies to one trip and is not stored.
Email address from "Request access"To reply to youIn our lead database (Upstash) and our hosting provider's logs. Kept only as long as we need to reply, and never longer than 12 months.
IP address and basic request dataTo run the site, prevent abuse and enforce rate limitsProcessed by our hosting provider; held in memory, in rate-limit counters that expire within 10 minutes, or in short-lived logs.

We do not sell your information, share it for advertising, or use advertising or tracking cookies.

Cookies and storage

Clerk, our sign-in provider, sets cookies on every visit, whether or not you sign in: they keep you signed in and protect sign-in from abuse. Cloudflare, which serves Clerk, may add short-lived security cookies of its own (__cf_bm, _cfuvid). Your browser stores your theme choice, saved trips and Sophia conversations so the site works as you'd expect. Vercel Web Analytics and Speed Insights are cookieless: they count visits and measure page speed in aggregate. We use no other cookies.

Who processes your information

These providers are based in the United States. Each processes your information under its own data-processing terms, with international transfer safeguards (Standard Contractual Clauses or the EU–US Data Privacy Framework) where they apply.

Fonts are hosted by us, so loading the site sends nothing to Google.

Your rights

You can ask us to show you, correct, export or delete what we hold about you, or object to how we use it. Ask us to delete your account and your travel profile goes with it; clear your browser's site data to remove saved trips and conversations. For anything else, write to hello@aretetravel.app and we'll reply within 30 days. If you're in the EU or UK you may also complain to your data-protection authority; California residents have equivalent rights under the CCPA.

Security

Traffic is encrypted, secrets are held only in our hosting provider's encrypted settings, and our server functions validate and size-limit every request. To report a vulnerability, write to hello@aretetravel.app.

Children

Arête is for adults planning travel and is not intended for anyone under 18.

Changes

If we change how we handle your information, we'll update this page and the date above, and tell signed-in members of material changes by email.