Privacy Policy.
Last updated: August 11, 2026
Lark Travel, operated by Thaloros Pte. Ltd. ("we", "us"), respects your privacy. This explains what we collect, who processes it, and, just as importantly, what we don't do.
1What we collect
- Account info. Your email and name from Apple or Google sign-in, and a user ID. You can also use Lark Travel as a guest, in which case an anonymous identifier is created on your device.
- Content you create or import. Trips, saved places, lists, and notes, plus the screenshots, text, and links you choose to import (including links to public social posts).
- Precise location. Only while you're using the App, to show places near you.
- Purchase status. Whether your subscription is active, via Apple/Google and RevenueCat. We never receive your card details or billing address.
- Push token. If you allow notifications, a device push token so we can send trip reminders and updates.
- Anonymous usage data. Which screens and features are used. Our product analytics are tied to a random identifier created on your device, not to your account.
- Advertising identifier. Only if you allow tracking when we ask: Apple's advertising identifier (IDFA), used to measure which ads bring travelers to Lark. See Tracking & advertising below.
- Marketing measurement events. A small set of milestones (finishing onboarding, seeing the paywall, signing in, starting a trial, subscribing), tied to your Lark user ID, so we can tell which campaigns work.
- On-device data. Preferences, drafts, cached trip data, and your sign-in session are kept locally on your device and leave it only as part of normal app functionality.
2How we use your information
To create and sync your trips and places; to generate AI itineraries and recommendations; to show places near you; to process your subscription; to send optional notifications; and to diagnose issues and improve the App.
3What we don't do
- We don't sell your personal data.
- We don't show ads inside Lark, and we don't build advertising profiles about you.
- We always ask first before using Apple's advertising identifier, and Lark works exactly the same if you decline.
- We don't access your camera, microphone, contacts, or your photo library in the background.
- We don't use your location outside of foreground map features, and we don't store your raw location on our servers.
- We don't send your name, email, credentials, payment info, or device identifiers to our AI providers.
- We don't process your content with AI unless you ask us to.
4Providers we use
We rely on these processors, each handling data only to provide its function:
| Provider | Purpose | What it receives |
|---|---|---|
| Supabase | Backend, authentication, database & file storage | Your account and content |
| Google (Gemini) | AI extraction & recommendations | Content you import and trip details you enter (see AI Disclosure) |
| Google (Places, Routes, Geocoding) | Maps, place details, nearby search, route optimization | Place queries and coordinates |
| Tavily | Travel web search to ground recommendations | Search queries (destination, interests) |
| ScrapeCreators | Retrieves the public content of TikTok/Instagram posts you import | The social post links you choose to import |
| RevenueCat | Subscription status management | An anonymous user identifier and your subscription status (no name, email, or card details) |
| Expo | Push notification delivery | Your push token |
| AppsFlyer | Measures which ads and channels bring travelers to Lark | Your device identifiers (including Apple's advertising identifier, only if you allow tracking), your Lark user ID, and the marketing milestones listed in section 1 |
| Meta, TikTok | The platforms we advertise on, so they can tell which of their ads worked | Measurement data from AppsFlyer about installs and subscriptions their ads led to |
5Your content and AI
When you import something or plan a trip, the content you provide is processed by the AI and search providers above to identify places and build recommendations, only when you take that action. Full detail is in our AI Disclosure.
6Legal basis (GDPR)
If you're in the EEA, UK, or Switzerland, we process your data on these bases: consent (location and notifications, which you can withdraw anytime in device settings); contract performance (accounts, trip generation, delivering the service); and legitimate interests (security, performance, and improving recommendations, where not overridden by your rights).
7International data transfers
Your data may be processed outside your country, including in the United States and the EU. Where data leaves the EEA, we rely on appropriate safeguards such as standard contractual clauses and data-processing agreements with our providers.
8Retention & deletion
We keep your data while your account is active. When you delete your account (Profile › Delete account), we remove your personal data promptly, and in any case within 30 days, except records we must keep by law. You can request a copy of your data by emailing support@lark.travel. Anonymous, aggregated usage data may be retained to improve the service.
9Your rights
Depending on where you live, you may access, correct, delete, export, or restrict processing of your data, withdraw consent, or lodge a complaint with your data-protection authority. Use the in-app controls or contact support@lark.travel; we respond within 30 days.
10California (CCPA/CPRA)
California residents may know what we collect, request deletion, and not be discriminated against for exercising these rights.
We do not sell your personal information. We do share limited identifiers with our measurement partner and the platforms we advertise on, which California law treats as sharing for cross-context behavioral advertising. To opt out, decline the tracking prompt when Lark asks, or turn off Allow Apps to Request to Track in iOS Settings › Privacy & Security › Tracking. You can also email us. Full detail and every opt-out route is on Your privacy choices. Requests: support@lark.travel.
11Tracking & advertising
We work with AppsFlyer, a mobile measurement partner, to understand which ads bring travelers to Lark. Shortly after you first open the App, we ask your permission to track.
If you agree, we collect Apple's advertising identifier (IDFA) and share it, together with your Lark user ID and the marketing milestones listed in section 1, with AppsFlyer. AppsFlyer passes measurement data to the platforms we advertise on, currently Meta and TikTok, so they can tell which of their ads led to an install or a subscription.
If you decline, we do not collect the IDFA. We still receive Apple's privacy-preserving SKAdNetwork measurement, which tells us a campaign worked without identifying you. Nothing in the App changes.
We do not show ads inside Lark, we do not sell your personal data, and we do not receive advertising profiles about you from anyone. You can change your choice at any time in iOS Settings › Privacy & Security › Tracking.
12Security
We protect data in transit with HTTPS/TLS and store it under access controls on managed infrastructure. No method of transmission or storage is 100% secure.
13Children
Lark Travel isn't directed to children under 13 (16 in the EEA) and we don't knowingly collect their data. Contact support@lark.travel and we'll delete it.
14Changes
We may update this policy and will revise the date above; significant changes will be noted in the App.