Name: zentio
Author: zentio

zentio is a trip planner. You tell it where you are going and when, and it helps you organize the days, split costs with your travel companions, and keep your bookings in one place. Doing that means we hold some information about you. This notice explains what we collect, what we do with it, who else sees it, and what you can ask us to do. It applies to the zentio website, the web app, and the mobile app.

The essentials

We collect what you put into zentio (your account details, trips, expenses, uploads, and messages to the assistant) plus basic technical data about your device.
We use it to run the product, keep your account secure, and fix bugs. Nothing else.
We never sell it, and we show no ads.
It is stored on servers in Germany and shared only with the handful of providers we need to run zentio.
You can delete your account yourself at any time, from Profile → Delete account in the app. Everything you own goes with it; the one exception is described in How long we keep it.
Questions go to [email protected].

What we collect

Things you give us

Your account. Your email address and, if you choose to give it, your name. There is no password: you sign in with a one-time code we email you, or with Google or Apple. If you sign in with Google or Apple, we receive your name, your email address, and whether the provider has verified it.
Your trips. Everything you put into an itinerary: trip names, destinations, dates, events and their locations, notes, to-do lists, and the cover photos you pick. If you add someone to a trip, we also keep their email address so we can send the invitation.
Uploads. Files you attach to a trip, such as booking confirmations and tickets.
Money. Expenses, budgets, how costs are split between travelers, and payments you record to settle up.
Messages to the assistant. What you type when you ask the AI assistant or trip generator for help, and what it answers.
Email you send us. If you write to [email protected], we keep the conversation so we can reply.

Things we record automatically

Sign-in details. When you log in, we keep a hashed (scrambled) copy of your IP address and browser identifier alongside the session, so we can notice a session being used from somewhere unexpected. We also record when you last logged in.
Device basics. Your browser or app version and operating system, sent with every request the way any website receives them.
Error reports. If something breaks, our error-monitoring service receives the technical details of the failure, the screen you were on and, if you are signed in, your account email and name. The mobile app reports the same, together with the device model and OS version.
Cookies and local storage. Listed in full, with what each one is for, in our Cookie Policy.

Things we do not collect

Your precise location. Maps and place search work from what you type, not from your device’s GPS.
Payment cards or bank details. zentio has no paid plans.
Sensitive categories such as health, religion, or ethnicity. If you write such things into a trip note they are stored as part of your notes, but we never ask for them and never use them for anything.
Data about you from other companies. Everything we hold came from you, or from Google when you chose to sign in with it.

How we use your information

We use it for the following, and only the following:

Running zentio. Showing you your trips, syncing them between your devices, producing PDFs and calendar exports when you ask for them, and keeping shared trips in sync for everyone on them.
Keeping your account secure. Signing you in, renewing sessions, checking that you control your email address, limiting how many sign-in codes an address or network can request, and blocking automated sign-ups (the sign-in form runs a bot-protection check for that).
AI features, when you use them. Your request, the relevant trip details, and your assistant messages are sent to an AI provider to produce the itinerary or answer. This only happens when you use those features. See AI features.
Email you need. Sign-in codes and trip invitations. We do not send newsletters or marketing email.
Fixing problems. Error reports and server logs help us find and fix bugs.
Legal reasons. Keeping records the law requires us to keep, and responding to lawful requests from authorities, which we would tell you about unless the law forbids it.

We do not use your information to build a profile of you, to make automated decisions that affect your rights, or to train AI models.

We do not sell your information, and nobody buys access to it. It reaches other companies in exactly three situations.

The providers we need to run zentio

Each of these handles a specific job for us, under a contract that limits what they may do with the data. We describe them by role rather than by name; the roles are what matter to you, and the vendors behind them may change.

Provider	What they do for us	What they see
Hosting provider	Runs our servers and database, in Germany.	Everything stored in zentio, on servers we control.
File storage provider	Stores the files you upload.	Your uploaded files.
Email delivery service	Sends our email.	Your email address and the content of the emails we send you.
Google	Sign in with Google, Google Calendar export, and the maps and place search inside the app.	Your Google account details when you use Google sign-in; the events you export; the places you search for.
AI provider	Runs the model behind the trip generator and the assistant.	The requests and trip details you send to those features. See AI features.
Bot-protection service	Checks that sign-ups come from people rather than bots.	Your IP address and browser details when you load the sign-up form.
Error-monitoring service	Tells us when something breaks.	Technical details of the error, your browser or device, the screen you were on and, if you are signed in, your account email and name so we can follow up. If the error happened during an AI request, the request itself.
Stock photo service	Provides the cover photos you can pick for a trip.	Only the search terms you type into the photo picker.

Some of these companies process data outside the European Economic Area. Where that happens for data covered by the GDPR, the transfer is covered by the European Commission’s standard contractual clauses or an adequacy decision.

Embedded content from YouTube, Google Maps, and GetYourGuide also sees your IP address and browser details when it loads. Our Cookie Policy explains when each one loads.

When you add someone to a trip, they see that trip: the itinerary, notes, uploads, expenses, and who paid what. They also see your name. They do not see your other trips. Leaving a trip or removing someone from it stops that sharing going forward.

When the law requires it

We will hand over information if a court order or a legal obligation compels us to, and only as much as the order covers. Unless the law forbids it, we will tell you first. If zentio were ever sold or merged into another company, your data would go with it, and you would be told before that happened.

AI features

zentio has three features that use a large language model: the trip generator, which drafts a day-by-day itinerary from a description; suggestions for activities and places at a destination; and the assistant, which answers questions about your trip and can propose changes to it.

What is sent. When you use one of them, we send the model your request, the parts of your trip it needs to answer (typically the destination, dates, existing events, and notes), and, for the assistant, the earlier messages in that conversation. The model is run by a third-party AI provider under its API terms, and we do not use your data to train models.

What is not sent. Nothing goes to the model unless you use one of these features. Your uploads, expenses, and account details are not part of the request.

What we keep. Assistant conversations and generated itineraries are stored with your trip so you can come back to them, and are deleted with the trip or your account. We also count how many generations you have used, because each account has a fair-use allowance.

Check the output. The model can be wrong about opening hours, prices, and whether a place exists. Its suggestions are a starting point, not a booking.

Your Google account

You can use zentio without a Google account. If you choose to sign in with Google, or to export a trip to Google Calendar, this is exactly what happens with the data involved. This section doubles as the disclosure Google requires from apps that use its sign-in.

What we access

When you sign in with Google, we ask for the openid, userinfo.email, and userinfo.profile scopes. From them we take your email address, your name, and whether Google has verified the address. Google also sends a profile picture link in the same response; we do not store it.
When you export a trip to Google Calendar, and only then, we ask for the calendar.events scope so we can create events. Signing in does not request calendar access, and you can use every other part of zentio without ever granting it.

How we use it

Your Google email and name identify your zentio account, so you can sign in without waiting for a code. Calendar access is used for one thing: writing the events of the trip you chose to export into your Google Calendar. We only create events. We never read, change, or delete anything already in your calendar, and we do not use Google data for advertising, analytics, or anything unrelated to these two features.

How we store it

We keep your Google account identifier and email address so we can recognize you next time. The tokens Google gives us to act on your behalf are encrypted before they are written to our database and are decrypted only at the moment we need to call Google. We do not store the contents of your calendar.

Who else sees it

Nobody. Google data travels between your browser, Google, and our servers, and nowhere else. It is not passed to any of the other providers listed in Who we share it with, and it is not sent to the AI features.

How to disconnect

Unlink Google from your account settings in the app. We revoke our tokens with Google and delete them immediately. You can always sign in with a code sent to your email address instead.
Delete your zentio account, which does the same and removes everything you own (see How long we keep it for the one thing that stays).
Revoke access on Google’s side at any time from your Google Account permissions page. zentio stops working with your Google account from that moment.

zentio’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Our legal basis for using your information

If you are in the European Economic Area or the United Kingdom, the GDPR requires us to name a legal basis for each thing we do with your data. Ours are:

Performing our contract with you for everything in How we use your information that is part of running zentio: storing your trips, syncing them, sharing them with the people you choose, and producing the itineraries and answers you ask the AI features for.
Our legitimate interest in keeping the service secure and working: the hashed sign-in details, bot protection at sign-up, error reports, and server logs. We have weighed this against your interests and kept the data involved to a minimum.
Our legitimate interest, and that of your travel companions, in keeping a shared trip’s accounts complete. When you delete your account, expenses and payments you took part in on trips someone else owns stay with that trip so the group’s balances still add up, with your name and email removed (see How long we keep it). Removing them would silently rewrite what other people owe each other.
A legal obligation, for the records the law makes us keep and for responding to lawful requests.

We do not currently rely on consent for anything. If we ever do, we will ask you clearly, and you will be able to withdraw it just as easily.

If you are in Canada, we rely on your consent, which you give by creating an account and using zentio, and which you can withdraw at any time by deleting your account or writing to us. Canadian law also allows us to use information without consent in a few narrow cases, such as investigating fraud or complying with a subpoena.

How long we keep it

As long as you have an account, we keep what you have put into zentio, because that is what the product is for. Beyond that:

When you delete your account, your trips, events, notes, to-do lists, uploads, and assistant conversations are deleted with it, and we revoke any Google and Apple sign-in tokens we hold for you. Trips you own are deleted even if you shared them, expenses included. Trips someone else owns and shared with you stay with their owner, and so do the expenses and payments you took part in there: the group keeps the amounts so its accounts still add up, but your name and email are removed and those records show “Deleted user” instead. Text you typed into them, such as an expense description, stays as written.
Backups of our database are taken daily and kept for 30 days, so deleted data can linger in a backup for up to a month before it is gone for good. Backups are used only to recover from a failure, never to restore something you deleted on purpose.
Sign-in sessions expire after 30 days without use and are removed when you log out.
Error reports are deleted by our error-monitoring service within 90 days.
Email you send us is kept as long as it is useful for helping you.
Inactive accounts are not deleted automatically today. If we introduce that, we will email you well before anything is removed.

Keeping it safe

Everything travels over HTTPS.
Sign-in codes are never stored in clear. We keep only a keyed hash for ten minutes; a code works once and dies after a few wrong attempts.
Session cookies are httpOnly and Secure. Google tokens are encrypted before they are stored.
Our servers are in Germany.
Only the two people who run zentio can access production systems.

No system is perfectly secure, and we will not pretend otherwise. If a security incident ever affects your data, we will tell you what happened and what we are doing about it, and notify the relevant authority where the law requires it.

Children

zentio is for adults. You must be at least 18 to create an account, and we do not knowingly collect information from anyone younger. If you believe someone under 18 has an account, write to [email protected] and we will delete it.

Your rights

Wherever you live, you can ask us for any of the following. Where a privacy law such as the GDPR, the UK GDPR, or a US state law gives you these as legal rights, this is how we honor them.

What you can ask

See your data. Almost all of it is already visible in the app. If you want a copy of everything we hold about you, ask and we will send it in a machine-readable format.
Correct it. Your name, email, language, and every part of your trips can be edited in the app.
Delete it. Profile → Delete account removes everything you own, immediately. You do not need to ask us. The one thing that stays is described in How long we keep it.
Take it elsewhere. Trips can be exported as PDF or to Google Calendar from the app, and the full copy above is portable.
Object to, or limit, a use of your data. Tell us which one and we will either stop or explain why we cannot.
Withdraw consent. We do not currently rely on consent for anything, so there is nothing to withdraw. If that changes, withdrawing will be as easy as giving it.
Not be discriminated against for asking. Exercising these rights never affects the service you get.

How to ask

Email [email protected] from the address on your account. That is how we confirm the request is really from you. If you write from a different address, we will ask you to confirm from the account address before acting. Someone else may ask on your behalf if they can show you authorized them.

We reply within a month. If a request is unusually complex we may take up to two more months, and we will tell you if so. We will not charge you unless the request is plainly excessive.

If you think we have handled your data badly, tell us first and give us a chance to fix it. We will acknowledge a complaint within 30 days and explain the outcome. You also have the right to complain to a regulator, described below.

If you are in the European Economic Area, the United Kingdom, or Switzerland

You have the rights above under the GDPR, the UK GDPR, or the Swiss Federal Act on Data Protection. You can complain to your national data protection authority (list for the EEA), to the UK Information Commissioner’s Office, or to the Swiss Federal Data Protection and Information Commissioner. Our servers are in Germany, so your data is inside the EEA unless one of the providers in Who we share it with processes it elsewhere under the safeguards described there.

If you are in the United States

Several states give residents rights over their personal data. For zentio, the answers are the same for all of them:

We collect identifiers (name, email, account details) and the content you create. We do not collect sensitive personal information, precise geolocation, biometric data, or commercial or financial information, and we do not draw inferences about you.
We do not sell personal information, we do not share it for targeted advertising, and we do not profile anyone. There is nothing to opt out of, so we do not respond to Global Privacy Control or Do Not Track signals, because there is no tracking for them to switch off.
We have not disclosed personal information to anyone for direct marketing purposes, which is the disclosure California’s “Shine the Light” law asks about.
If we decline a request, you can appeal by replying to our answer. We will respond in writing, and if you are still unhappy you can contact your state attorney general.

Other countries

If you are in Mexico, Canada, Australia, New Zealand, or anywhere else with a privacy law, the same rights and the same process apply. In Mexico, complaints about personal data are handled by the National Institute for Transparency, Access to Information and Personal Data Protection (INAI). Australian residents can complain to the Office of the Australian Information Commissioner, and New Zealand residents to the Privacy Commissioner.

Cookies

We only set the cookies and browser storage needed to sign you in and remember your preferences, plus an identifier that groups error reports. There are no advertising or cross-site tracking cookies, which is why you see no cookie banner. Our Cookie Policy lists every entry and what it is for.

Changes to this notice

When we change how we handle your data, we update this page and the date at the top. If we start using your data for a new purpose or sharing it with a new kind of recipient, we will also tell you in the app or by email before it takes effect, so you can decide whether to keep using zentio. Swapping one vendor for another in the same role, small clarifications, and fixes just update this page and the date.

How to reach us

Email [email protected]. zentio is run by two people and that address reaches both of us.

By post:

zentio travel
Av. Guadalupe 5765, Plaza Guadalupe
45030 Zapopan, Jalisco
Mexico