Detour
Privacy Policy
This Privacy Policy explains what information Detour (“Meant To Go”), operated by DetourApp LLC, collects, how we use it, and the choices you have. Questions? Email [email protected].
1. Information we collect
- Account: your email address, a securely hashed password, and—if you sign in with Google—basic profile info (name, avatar) from Google. Plus any display name, bio, or avatar you add.
- Content you create: itineraries, stops, saves, “did it” reviews and ratings, and photos you upload.
- Waitlist: if you join our pre-launch waitlist on the marketing site (godetour.now), the email address you provide—managed through our email provider (beehiiv)—used solely to notify you about availability and product updates.
- Usage & analytics: how you interact with the app (pages viewed, actions taken), collected via our analytics provider to improve the product.
- Technical & diagnostic: error reports, device/browser information, and IP address, used for security, abuse prevention, and reliability.
- Local storage: we store authentication tokens in your browser/device so you stay signed in.
2. How we use your information
To provide and operate Detour (accounts, creating and sharing itineraries); to maintain safety and moderate content; to prevent abuse and rate-limit requests; to analyze and improve the product; to communicate with you about your account or service changes; and to comply with legal obligations.
3. Legal bases (EEA/UK users)
Where the GDPR applies, we process your information to perform our contract with you (to provide the app), based on our legitimate interests (security, abuse prevention, product improvement), to comply with legal obligations, and—where required—with your consent (which you can withdraw at any time).
4. How we share information & sub-processors
We don’t sell your personal information. We share it with service providers who process it on our behalf, under contract, only to run Detour:
- Supabase — database, authentication, and image storage.
- Cloudflare — application hosting, CDN, and bot protection (Turnstile).
- Google Maps Platform — maps and place/location data.
- OpenAI — processing of imported content (e.g. extracting places from a shared video caption), where you use that feature.
- Upstash — rate limiting.
- Sentry — error monitoring.
- PostHog — product analytics.
- beehiiv — email list management for our pre-launch waitlist and product updates.
We may also disclose information to comply with law, enforce our Terms, or protect the rights and safety of our users. Content you choose to make public (e.g. a public itinerary) is visible to others by design.
5. Data retention
We keep your information for as long as your account is active or as needed to provide the service. When you delete your account, we delete your personal data and uploaded files, except where we must retain limited information to comply with legal obligations or resolve disputes.
6. Your rights & choices
Depending on where you live (including under GDPR and the CCPA), you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. In Detour you can:
- Export your data — use “Download my data” in your profile.
- Delete your account — from your profile; this removes your personal data and uploaded files.
- Edit your profile, itineraries, and reviews at any time.
To exercise other rights, email [email protected]. We won’t discriminate against you for exercising your rights.
7. Security
We use technical and organizational measures to protect your information, including encryption in transit, hashed passwords, scoped database access controls, and rate limiting. No method of transmission or storage is 100% secure, so we can’t guarantee absolute security.
8. International transfers
We and our service providers may process your information in the United States and other countries, which may have different data-protection laws than yours. Where required, we rely on appropriate safeguards for such transfers.
9. Children’s privacy
Detour isn’t directed to children under 13, and we don’t knowingly collect their personal information. If you believe a child has provided us information, contact [email protected] and we’ll delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we’ll take reasonable steps to notify you. The “Effective date” above shows when it was last updated.
11. Contact
For privacy questions or requests, email [email protected].