Privacy Policy
We store the data needed for your account and trips, and do not track you.
This policy explains how Lugara (https://lugara.me), the “Service,” handles your information.
The summary is simple: We are committed to a minimal data approach. We do not track you, sell your data, or collect unnecessary personal information.
- No Tracking: We avoid third-party trackers, advertising cookies, and fingerprinting.
- Lugara Storage in the EU: Lugara stores your account and trips in the European Union. Optional third-party connections process the data you share under their own policies.
- Security First: We use industry-standard encryption and security practices to protect your data.
What We Collect
We only collect data necessary to provide and secure the Service.
Account Information: If you sign in, we store the minimum necessary authentication details (like your OAuth provider ID and the email/name shared by your provider) to secure your account and keep you logged in.
Your Trip Data: Details about your trips, dates, notes, and associated locations. This data is only visible to you by default. We use your IP address to approximate your location to help with trip entry, but never store it. We run our own database to correlate IP addresses to approximate locations, so your IP is not send to any third-party services.
Privacy-preserving analytics: We run a small, self-hosted analytics system to understand overall usage patterns (for example, which features are used most). These analytics rely on anonymous, aggregated events and cannot identify you, your account, or your trips. No analytics cookies are used. No third-party analytics tools are used.
What We Do Not Collect
We explicitly do not collect:
- Personally identifying usage analytics.
- Behavioral profiles.
- Any personal data beyond what is strictly required for your login and trip management.
- Any precise location data, your entered trips are geolocated at the approximate center of the respective place you enter
Cookies
We only use strictly necessary cookies when you sign in. These are essential for maintaining your session and ensuring the Service functions correctly.
How We Use Your Data
We use the limited information we collect solely to:
- Authenticate you and keep your session active.
- Allow you to add, display, and manage your private trips and locations.
- Secure the service and prevent abuse.
- Understand general feature usage through anonymous, privacy-preserving analytics sent only to our own servers.
Third-Party Services
We send third-party services the data needed to provide the features you use. For example, email delivery requires your email address and account linking uses an account identifier. The services below process that data under their own privacy policies.
| Service | Purpose | Privacy Policy |
|---|---|---|
| Stripe | Payment processing | Stripe Privacy |
| OpenAI | Trip input parsing and the optional ChatGPT connection | OpenAI Privacy |
| Anthropic | The optional Claude connection | Anthropic Privacy |
| Mapbox | Maps and destination search | Mapbox Privacy |
| Resend | Email-based notifications and product updates | Resend Privacy |
| Sentry | Error tracking to improve service reliability | Sentry Privacy |
ChatGPT, Claude, and MCP Connections
Connecting your account is optional. Lugara asks you to authorize the requested permissions before granting access. The connection receives an OAuth account identifier and scoped tokens. With read permission, it can retrieve your travel totals. With write permission, it can add trips you request, change trips you ask it to change, and receive each saved trip’s identifier, destination, dates, and transport mode. Lugara looks up the destination’s city with Mapbox before saving a new or changed city. The statistics widget receives travel totals, not your password, browser session cookies, or a copy of your full trip history.
Information returned to ChatGPT is processed under OpenAI’s policies, and information returned to Claude under Anthropic’s. You can disconnect Lugara in ChatGPT or Claude. Deleting your Lugara account also prevents the connection from accessing your trips.
Social Sign-In
If you choose to sign in using a social provider (OAuth), the handling of that data is governed by their policy:
| Provider | Purpose | Privacy Policy |
|---|---|---|
| Solely for OAuth authentication | Google Policies | |
| Apple | OAuth authentication, and forwarding our emails if you hide your address | Apple Privacy Policy |
| GitHub | Solely for OAuth authentication | GitHub Statement |
Your Rights and Control
You are the sole owner of your trip and location data. You grant us a limited license only to use this data to provide the Service to you. You are in complete control:
View and Export: You can access and download your personal data (trips and locations) in portable formats at any time.
Update and Modify: Easily change your account information, preferences, and communication settings within your account.
Total Deletion: You can permanently delete your account and all associated data whenever you want.
Sharing Settings: You control the visibility of your trips and locations.
Retention and Deletion
We keep your authentication and trip data while your account is active. You can delete your account and all associated data at any time through your account settings.
Security and Compliance
We implement standard practices to keep your data secure:
- Encryption of data both when it’s moving (in transit) and when it’s being stored (at rest).
- Secure authentication systems and encryption of sensitive data like OAuth tokens.
- Limited, need-to-know access to your personal data.
Children’s Privacy
Our Service is not for children under 13. We do not knowingly collect personal information from this age group. Please contact us immediately if you suspect a child has provided us with data.
Changes to This Policy
We may update this policy. For material changes, we will notify you by:
- Posting the updated policy here.
- Sending an email notification to your registered address.
- Displaying a notice within the Service.
Contact Us
If you have any questions about this policy or our privacy practices, please reach out:
Email: [email protected]
This privacy policy is effective as of the date listed above and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page.