Privacy Policy

Last updated July 2026

Naqsha is a map-first trip planner. This policy explains what we collect, why, the legal bases we rely on, and the choices you have. We collect the minimum needed to plan your trips. We don't sell your personal information for money; some travel search links are affiliate links, which in some regions may count as “sharing” for advertising, and you can opt out by contacting us.

Who we are

Naqsha is operated from Canada and is the controller of your personal information. For any privacy question, or to exercise your rights, contact support@naqsha.ca.

What we collect

• Account — your email address and authentication details, managed by our identity provider (Supabase).
• Trips — the trips you create: destinations, dates, itinerary stops, notes, and bookings you add or import.
• Documents — files you upload to your trip vault (tickets, confirmations), stored privately and access-scoped to you.
• Usage — limited technical logs, including your IP address and request metadata, used to run, secure, and debug the service.

How we use it, and our legal bases

• To build and store your itinerary and run the planning assistant, and to operate your account — to perform our contract with you.
• To search places, hotels, flights, activities, and transport when you ask — to perform our contract and, for optional integrations, with your consent.
• To keep the service secure, debug, and prevent abuse — our legitimate interest in a safe, working product.
• To process a subscription and meet tax/accounting duties — contract and legal obligation.

You can withdraw any consent at any time, without affecting processing already carried out.

Who we share with

We share only what a feature requires, and only to deliver it to you:

• Supabase — database, authentication, and file storage (your data is protected by row-level security).
• Map & routing — OpenStreetMap, OpenFreeMap, and transit routing to draw maps and compute routes.
• Travel search — providers such as Travelpayouts, LiteAPI, and Viator to return live results; some links are affiliate links.
• AI — the model providers (such as OpenAI and Anthropic) that run the planning assistant process your request only to generate a response, and do not use it to train their models.
• Payments — Stripe, if you subscribe (we never store your full card details).

Where your data is stored, and international transfers

Naqsha and its providers process data in the United States and other countries, which may be outside your own. Where personal data is transferred out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses (and the EU–US Data Privacy Framework where a provider is certified) to protect it. You can request details of the relevant safeguards by contacting us.

Connecting Naqsha to an AI assistant

If you connect Naqsha to an assistant such as ChatGPT, Claude, or Microsoft Copilot, you authorize it through a standard sign-in (OAuth). The assistant can then read and, with your permission, edit your trips on your behalf. When it does, the trip data it reads is handled by that assistant's own privacy policy, which we don't control. You can revoke access at any time from your account or the assistant.

Your rights

Depending on where you live, you can access, correct, export (portability), delete, or restrict our use of your data, and object to processing based on our legitimate interests. You can view, export, and delete your trips and files directly in the app. To exercise any other right, contact us; we aim to respond within 30 days and will verify your identity first, and we won't discriminate against you for exercising a right.

• Canada: you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca); Quebec residents also have rights under Quebec's Law 25.
• EEA / UK: you can lodge a complaint with your local data protection authority (the UK ICO at ico.org.uk; EEA authorities at edpb.europa.eu).

Your California privacy rights (CCPA/CPRA)

We collect the categories described above (identifiers, internet/network activity, travel details you enter, documents you upload, and payment information handled by Stripe). We do not sell your personal information for money. We may “share” limited identifiers with affiliate travel partners when you use travel-search links, which California law can treat as a “sale” or “share.” You have the right to know, delete, correct, and limit use, and to opt out of that sharing — we honor the Global Privacy Control signal, and you can also opt out by contacting us. We won't discriminate against you for exercising these rights.

Retention

We keep your account and trip data while your account is active. Deleting a trip removes its stops and its vault files. Deleting your account removes your account and trip records; residual copies may persist in encrypted backups for a limited period before they are overwritten, and we may keep limited records where the law requires (such as payment records). Technical logs are kept for a limited period.

Children

Naqsha is not directed to children. You must be at least 16 (or the minimum age of digital consent in your country, and at least 13 in the United States) to use it. We don't knowingly collect data from children under these ages; if you believe a child has given us data, contact us and we will delete it.

Cookies & technical data

We use cookies and similar storage only to keep you signed in and to run the app — not for advertising. Our servers keep limited technical logs (including your IP address and request metadata) to operate, secure, and debug the service.

Security

Data is encrypted in transit and at rest, access is scoped per-user by row-level security, and your vault documents are stored in a private bucket — no one else can read them except where we must for security, support, or legal reasons. No system is perfectly secure, but we design to least-privilege and keep the surface small.

Changes to this policy

We may update this policy as Naqsha evolves. We'll post the new version here with an updated date, and for material changes we'll notify you in the app or by email before they take effect.

Contact

Naqsha, Canada — support@naqsha.ca.