Privacy

How Kanbit handles your information.

Last updated September 29, 2026

Information you provide

We process account information, manually entered savings amounts, plans, saved listings, trip preferences, approximate home location, group size, budget, interests, and optional accessibility notes. Test flight previews save a fare, itinerary, traveler count, and test reference—not passenger identity or payment information.

How it is used

We use this information to secure your account, save your plans, personalize discovery, create planning estimates, retrieve provider listings, diagnose failures, and prevent abuse. Kanbit must not use accessibility notes or other answers to infer sensitive traits.

Trips you share

If you invite friends to a trip, anyone with your invite link can see the trip's name, place and dates, the name you chose for the group, and how many people are in, before signing in. People who join also see the trip's cost lines and total, its itinerary (what's planned each day, meals, and where the group stays), its deposits, everyone's chosen name, who is coming with a partner, and whether each person is on track. Anyone in the trip can add an idea to the itinerary; everyone in it sees who added each idea and who is in for it. Your share includes getting there, which Kanbit estimates from the home in your profile, and any ideas you are in for; the organizer sees each person's share, and who has paid them back for a deposit. Nobody sees your account, your home, your other plans, or how much anyone has set aside. The organizer can remove someone or stop sharing at any time, and anyone can leave.

Services involved

Kanbit uses Supabase for authentication and account storage, Vercel for hosting and for measuring how fast pages load (the kind of page and its load times, without cookies, plans or account details), OpenAI for requested planning assistance, Google Maps Platform for locations, places and driving routes, and travel or event providers such as Ticketmaster, Eventbrite, Viator, Duffel and KAYAK when those services are available. Information needed to complete a request may be sent to the relevant service under its own terms and privacy policy.

• Duffel (flights and hotel rates). A flight search sends the airports, travel dates, number of adults and any child ages you entered; a hotel rate search sends the location, dates and guests. Names, passport details and payment details are not collected or sent.
• KAYAK (hotels). A hotel search sends the location, dates and guests per room, together with your IP address and browser type, which KAYAK requires to return prices for your region. If you open a hotel on KAYAK, you leave Kanbit and KAYAK's terms and privacy policy apply.
• Public reference data. Estimates also use published U.S. government figures, including the DOT Consumer Airfare Report, GSA meal allowances and EIA fuel prices. No personal information is sent to these sources.

When you check a flight or hotel price, Kanbit saves that price with the route or location, dates and party size to your account so later estimates for the same trip can use it.

To make estimates more accurate, when a real price replaces one of Kanbit's estimates (a price you enter, a flight or stay you mark as booked, or what you tell Kanbit a trip really cost), Kanbit keeps the two amounts with the kind of cost and the estimate's source. That record holds no account, name, place or dates.

Google Maps Platform use is governed by the Google Maps Terms and Google Privacy Policy.

Storage and security

Signed-in account data is isolated by user through Supabase row-level security. Sign-in session information is stored in your browser. Kanbit uses access controls and encrypted connections, but no online service can promise absolute security.

Error monitoring

When something fails, Kanbit records the page or API route, the error status, a shortened error message, a request ID and the app version. Email addresses, long numbers and anything resembling a key or token are removed from the message first. These records are not linked to your account and are deleted after about 30 days.

Retention and choices

Account data is retained while your account is active or as needed to operate and protect the service. You may request access, correction, export, or deletion through the instructions on the Your data page. Legal, security, fraud-prevention, or dispute records may be retained when required.

Children

Kanbit accounts are intended for adults. Parents may plan family travel, but children should not create accounts or submit personal information.

Changes

We will update the date above when this notice materially changes. Important changes should be presented inside Kanbit before they take effect.