Privacy Policy

Last updated: August 2026

This Privacy Policy explains how tinkrbox ("we", "us", or "our") collects, uses, and shares information when you use JapanPlan AI (the "Service"). By using the Service, you acknowledge this Policy. For how you may use the Service, see our Terms of Use.

1. Who we are

JapanPlan AI is operated by tinkrbox. Privacy questions and data requests: japantrip@tinkrbox.com.

2. What we collect

Account data if you sign up (email, display name, authentication identifiers).
Trip data you provide or generate (dates, destinations, interests, budget preferences, itineraries, chat messages with the travel assistant).
Usage and technical data such as pages viewed, feature usage (generate / chat), approximate device or browser information, IP address, and timestamps — used for security, rate limiting, and product reliability.
Guest data if you plan without an account (stored in a way that may be linked to your browser or temporary identifiers).

Please do not enter sensitive personal information (passports, payment card numbers, health details, precise home address of others, etc.) into chat or special requests.

3. How we use data

To create, save, edit, share, and display your itineraries.
To power AI planning and chat features.
To authenticate you, prevent abuse, and keep the Service secure.
To improve reliability and understand aggregate product usage.
To respond to support requests you send us.
To comply with law or protect our rights where required.

We do not sell your personal data.

4. AI and third-party processors

When AI features are enabled, prompts and related trip context may be sent to AI model providers (for example via OpenRouter) to generate itineraries or chat replies. We also use infrastructure providers for hosting, databases, authentication, and email (for example Supabase and Vercel). Those providers process data under their own terms and may process data outside Japan.

AI outputs are not guaranteed to be accurate. Do not rely on the Service alone for booking, safety, or legal decisions.

5. Sharing and disclosure

Share links: if you create a public trip share link, anyone with the link can view that itinerary. Only share with people you trust.
Service providers: as needed to operate the Service (hosting, auth, AI, analytics).
Legal: if required by law, regulation, legal process, or to protect users, the public, or tinkrbox from harm or liability.

6. Cookies and similar tech

We use cookies and similar technologies for authentication sessions and essential Service operation. Disabling cookies may prevent sign-in or trip saving from working correctly.

7. Retention

We retain account and trip data while your account is active or as needed to provide the Service. Guest data may be deleted periodically. We may retain limited logs longer for security, dispute resolution, or legal compliance. You may request deletion as described below.

8. Your choices and rights

Delete individual trips from your dashboard where available.
Request account deletion or a copy of your data by emailing japantrip@tinkrbox.com from your registered email address.
Continue as a guest without creating an account (with limited persistence).
Depending on where you live (including under Japan's Act on the Protection of Personal Information / APPI, and other applicable laws), you may have rights to access, correct, or delete personal data — contact us to exercise them.

9. Children

The Service is not directed to children under 16. If you believe a child has provided personal data, contact us and we will take reasonable steps to delete it.

10. Security

We take reasonable technical and organizational measures to protect data. No method of transmission or storage is 100% secure; you use the Service at your own risk regarding residual security risks.

11. International transfers

Your information may be processed in Japan and in other countries where our providers operate. By using the Service, you understand that data may be transferred to those locations.

12. Changes

We may update this Policy from time to time. The "Last updated" date at the top will change when we do. Continued use after an update means you accept the revised Policy.

13. Contact

Privacy and data requests: japantrip@tinkrbox.com