Privacy policy

Last updated: June 11, 2026

In short: sejo sells no data, shows no ads, and only shares your info with the trip members you invited yourself. Your bookings are analyzed solely to extract the useful details, and nothing is retained by the third-party services used for parsing.

1. Who we are

sejo is an iOS app published by HBLR Studio (sole proprietorship, France). For any privacy question:

Email: privacy@sejo.app

2. Data we collect

2.1 Account (Sign in with Apple)

When you create an account, Apple sends us:

Name — the one you choose to share (you can hide it on Apple's side)
Email — your real address or Apple's private relay (@privaterelay.appleid.com)
Apple identifier — a unique UUID tied to your Apple account, used for authentication

We never receive or store your Apple password.

2.2 Profile

Nationality — used to show your country's embassies at your destination
Travel interests (3 max) — to personalize future suggestions

2.3 Trips

Destination, start and end dates
Cover photo (uploaded or Unsplash suggestion)
List of invited members

2.4 Bookings

What does sejo do with your bookings? When you share a confirmation (photo, email, PDF, text), sejo sends it to an artificial intelligence model (Claude, by Anthropic) that extracts the structured details: booking type, provider, dates, flight number, hotel name, passengers. The original document is stored in your private space. Anthropic does not retain data sent through its API and does not use it to train its models.

Details extracted and stored:

Type (flight, hotel, train, rental, activity)
Provider and confirmation reference
Dates and times
Flight number, airports (for flights)
Passenger / traveler names
Source document(s) — the photo, PDF or text you submitted

2.5 Other data

Push notification token — to send you flight status alerts, trip reminders, etc.
Location (if allowed) — used only to show emergency numbers and embassies for the country you're in. Never stored on our servers.

3. Third-party services

sejo relies on third-party services to work. Here is exactly what is sent to them:

Service	Data sent	Purpose
Anthropic (Claude AI)	Text / image of your booking	Detail extraction (parsing). Not retained by Anthropic.
AeroDataBox	Flight number + date	Real-time flight status (delay, cancellation, gate)
UK FCDO	Destination country code	Government travel alerts (public API)
NASA EONET	No user data	Worldwide natural events (public API)
GDACS	No user data	Natural disaster alerts (public API)
Supabase	All the data above	Database and authentication (EU servers — Frankfurt)
Apple Push Notification	Device token	Push notifications

4. Where your data is stored

All your data is stored on Supabase in the eu-central-1 region (Frankfurt, Germany), within the European Union. Files (booking photos, trip covers) live in Supabase Storage, same region.

5. Data sharing

Trip members — the people you invite to a trip see that trip's bookings and wishlist. You control who joins via the invite link.
No selling — we never sell, rent or share your data for advertising or commercial purposes.
No ads — sejo shows no ads and uses no advertising trackers.

6. Retention

Your data is kept as long as your account is active. Past trips stay available in the app (the "Past trips" section) unless you delete them manually.

7. Your rights (GDPR)

As an EU-based user, you have the following rights:

Access — request a copy of all your data
Rectification — correct inaccurate information
Erasure — delete your account and all your data
Portability — receive your data in a structured format
Objection — object to a specific processing

To exercise these rights, write to privacy@sejo.app. We reply within 30 days.

Account deletion

You can delete your account from the app (Profile → Sign out) or by writing to us. Deletion includes:

Deletion of your profile, the trips you created, your bookings
Deletion of source files (photos, PDFs) in storage
Removal of your membership in shared trips

8. Security

Authentication via Sign in with Apple (no stored password)
All communications encrypted in transit (HTTPS / TLS)
Row Level Security (RLS) on every table — each user only sees their own data
Rate limiting on parsing calls (anti-abuse protection)
Edge Functions use isolated service tokens, never exposed to the client

9. Children

sejo is not intended for children under 16. We do not knowingly collect data from minors.

10. Changes

This policy may be updated. The last-modified date is shown at the top of the page. For any substantial change, a notification will be sent through the app.