Privacy Policy.
Last updated: June 30, 2026
Lark Travel, operated by Thaloros Pte. Ltd. ("we", "us"), respects your privacy. This explains what we collect, who processes it, and, just as importantly, what we don't do.
1What we collect
- Account info. Your email and name from Apple or Google sign-in, and a user ID. You can also use Lark Travel as a guest, in which case an anonymous identifier is created on your device.
- Content you create or import. Trips, saved places, lists, and notes, plus the screenshots, text, and links you choose to import (including links to public social posts).
- Precise location. Only while you're using the App, to show places near you.
- Purchase status. Whether your subscription is active, via Apple/Google and RevenueCat. We never receive your card details or billing address.
- Push token. If you allow notifications, a device push token so we can send trip reminders and updates.
- Anonymous usage data. Which screens and features are used, not tied to your identity.
- On-device data. Preferences, drafts, cached trip data, and your sign-in session are kept locally on your device and leave it only as part of normal app functionality.
2How we use your information
To create and sync your trips and places; to generate AI itineraries and recommendations; to show places near you; to process your subscription; to send optional notifications; and to diagnose issues and improve the App.
3What we don't do
- We don't sell your personal data or share it for advertising.
- We don't track you across other apps or websites, and we don't use advertising identifiers (IDFA).
- We don't access your camera, microphone, contacts, or your photo library in the background.
- We don't use your location outside of foreground map features, and we don't store your raw location on our servers.
- We don't send your name, email, credentials, payment info, or device identifiers to our AI providers.
- We don't process your content with AI unless you ask us to.
4Providers we use
We rely on these processors, each handling data only to provide its function:
| Provider | Purpose | What it receives |
|---|---|---|
| Supabase | Backend, authentication, database & file storage | Your account and content |
| Google (Gemini) | AI extraction & recommendations | Content you import and trip details you enter (see AI Disclosure) |
| Google (Places, Routes, Geocoding) | Maps, place details, nearby search, route optimization | Place queries and coordinates |
| Tavily | Travel web search to ground recommendations | Search queries (destination, interests) |
| ScrapeCreators | Retrieves the public content of TikTok/Instagram posts you import | The social post links you choose to import |
| RevenueCat | Subscription status management | An anonymous user identifier and your subscription status (no name, email, or card details) |
| Expo | Push notification delivery | Your push token |
5Your content and AI
When you import something or plan a trip, the content you provide is processed by the AI and search providers above to identify places and build recommendations, only when you take that action. Full detail is in our AI Disclosure.
6Legal basis (GDPR)
If you're in the EEA, UK, or Switzerland, we process your data on these bases: consent (location and notifications, which you can withdraw anytime in device settings); contract performance (accounts, trip generation, delivering the service); and legitimate interests (security, performance, and improving recommendations, where not overridden by your rights).
7International data transfers
Your data may be processed outside your country, including in the United States and the EU. Where data leaves the EEA, we rely on appropriate safeguards such as standard contractual clauses and data-processing agreements with our providers.
8Retention & deletion
We keep your data while your account is active. When you delete your account (Profile › Delete account), we remove your personal data promptly, and in any case within 30 days, except records we must keep by law. You can export a copy of your data from within the App. Anonymous, aggregated usage data may be retained to improve the service.
9Your rights
Depending on where you live, you may access, correct, delete, export, or restrict processing of your data, withdraw consent, or lodge a complaint with your data-protection authority. Use the in-app controls or contact support@lark.app; we respond within 30 days.
10California (CCPA/CPRA)
California residents may know what we collect, request deletion, and not be discriminated against for exercising these rights.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. Requests: support@lark.app.
11Tracking & advertising
Lark Travel does not track you across apps or websites, uses no advertising identifiers, and participates in no ad networks.
12Security
We protect data in transit with HTTPS/TLS and store it under access controls on managed infrastructure. No method of transmission or storage is 100% secure.
13Children
Lark Travel isn't directed to children under 13 (16 in the EEA) and we don't knowingly collect their data. Contact support@lark.app and we'll delete it.
14Changes
We may update this policy and will revise the date above; significant changes will be noted in the App.