Privacy Policy

Last updated: 2026-05-29

Operator

PYNTravel is operated by:

„KOFFWARE” S.R.L.
IDNO: 1026600015511
Republica Moldova

Data we process

We process account data such as email address, password hash, display name, locale, OAuth provider identifiers, email verification status, and account timestamps.

For mobile app launch updates, we also process waitlist data such as email address, optional name, platform interest, travel interest, notes, locale, and consent timestamp.

We process trip data created by users, including trip titles, dates, currencies, itinerary days, activities, locations, notes, traveler profiles, transport legs, planned budget rows, real trip expenses, analytics derived from those records, trip members, and email invitations.

Invitation flows process invitee email addresses, invitation status, role, token metadata, inviter, and accepted account when applicable.

Authentication and emails

The service supports password login, email verification codes, password reset emails, Google login, Apple login, and JWT authentication for the mobile API. Transactional emails are sent from no-reply@pyntravel.com with support replies directed to support@pyntravel.com.

Analytics

The website uses Umami Cloud analytics to understand page usage. The tracker is configured to respect Do Not Track and exclude URL search parameters. We do not use Umami to intentionally identify individual visitors.

Storage and retention

Account and trip data is stored while the account is active or while needed to provide the service, protect security, handle support, or meet legal obligations. Some technical records, email logs, and abuse-prevention records may be retained for a limited period after deletion.

Your rights and deletion

You can request access, correction, or deletion by contacting privacy@pyntravel.com or using the Delete Account page. We may need to verify that the requester controls the account email before deleting account data.

Third parties

The service may use hosting, email delivery, OAuth providers, and Umami analytics. These providers process data only as needed to provide the service.

Policy changes

We will update this policy before launching material new data uses such as payments, subscriptions, push notifications, AI recommendations, marketing pixels, public sharing, native mobile frontend support, or booking integrations.