Privacy policy
Pre-launch draft: legal identity and actual processing practices must be confirmed before public release.
Data controller
RutaFlow is a travel planning application. For privacy questions and requests, contact vichilino@hotmail.com. The legal identity of the operator must be confirmed before public launch.
Data we process
The planner may store itineraries, stops, notes, budgets and packing lists in your browser’s local storage. If Supabase accounts are enabled, the service may process your email address, user identifier and synchronized trips. Actual processing depends on enabled features.
Purposes and legal bases
Planner data is used to provide the features you request. Account data, when enabled, supports authentication and trip storage. Applicable legal bases, retention periods and data-subject request processes must be documented before launch.
Sharing trips
Anyone with a shared link may be able to access the information you share. Do not include passwords, identity numbers, medical details or payment information. Local share links encoding data in the URL fragment do not guarantee confidentiality.
Providers and external links
Supabase is planned for authentication and cloud storage. PayPal, Instagram and Facebook links lead to external sites with their own privacy practices. Manual ads may link to third parties. RutaFlow does not receive card details through the PayPal support link.
Local storage and cookies
The planner uses local storage to save drafts and preferences, including language. Authentication may use session cookies when configured. Analytics or tracking-based advertising should not be enabled without assessing notice and consent requirements.
Retention and rights
Local drafts remain until cleared from the browser. Cloud retention and procedures for access, correction, deletion and withdrawal must be defined before launch. You can remove local drafts by clearing this site’s browser data.
Security and changes
We apply technical safeguards to reduce risk, but no service can guarantee absolute security. This notice must be updated as features, providers and data practices change.
Draft reviewed: October 2026