Privacy Policy

1. Introduction

This Privacy Policy explains how LakbayBook (“we”, “us”), operated by Ernest John Maskariño, collects, uses, stores, and shares information when you use our trip workbook service. It should be read with our Terms of Service.

2. Information we collect

Account data. Email address, password (stored hashed via our auth provider), display name, and optional profile photo.

Profile & preferences. Travel styles, interests, dietary notes, notification choices, private-profile setting, and when you acknowledged Terms.

Trip workbook data. Content you enter or upload in sheets such as trip detail, itinerary, hotels, food places, expenses / ledgers, emergency contacts, prep lists, covers, and collaborator emails/roles.

Social / World features. Public workbook metadata, upvotes, follows, and Atlas / passport signals derived from finished published trips.

Feedback. Notes you submit through Account feedback.

Technical data. Session cookies or tokens, approximate device/browser info, IP address as seen by our hosts, and basic request logs needed to operate and secure the service.

Presence. While you have LakbayBook open, we may store a short-lived “online” heartbeat (visitor id and, if signed in, user id) so features like the community online counter can work. These records expire when you leave or after a short inactivity window.

LakBi / AI. Prompts and limited trip context you send to LakBi may be processed by our AI provider to generate replies. Do not paste secrets you would not trust a processor with.

3. How we use information

• Provide, sync, and secure accounts, workbooks, invites, and publishing
• Show World / Explore, profiles, follows, leaderboards, and Atlas features you opt into by publishing or following
• Send transactional email (invites, password reset) when email is configured
• Improve reliability, prevent abuse, and debug errors
• Operate LakBi and other product assistants
• Respond to feedback and support requests

We do not sell your personal information.

4. When information is shared

• Collaborators you invite can see and edit workbook content allowed by their roles.
• Public / share links. Content in public or link-shared workbooks is visible to people who open those links or browse Explore.
• Service providers that host or process data for us, including Cloudflare (site and functions), Supabase (authentication and databases), email providers (e.g. Resend when enabled), and AI providers (e.g. Google Gemini for LakBi).
• Operations signals. We may send limited operational events (such as new registrations, serious errors, new/copied itinerary notices, or feedback) to private team channels (for example Discord webhooks) so we can run the product. Those channels are not a public directory of your trips.
• Legal. We may disclose information if required by law or to protect rights, safety, and the service.

5. Cookies and local storage

We use cookies or similar storage for signed-in sessions and local caches of drafts/library data so the app stays fast offline-capable. You can clear site data in your browser; you may need to sign in again.

6. Data location and retention

Data is stored with our providers (typically cloud regions they offer). We keep account and workbook data while your account is active. You may delete content or your account when those controls are available; residual backups or logs may persist for a limited period. Presence heartbeats are short-lived. Feedback and operational logs are kept as long as useful for support and security.

7. Your choices

• Edit profile, privacy (private profile), and travel preferences in Account
• Choose what to publish or share; keep drafts private
• Revoke collaborator access
• Submit feedback or request deletion via Account tools / contact
• Stop using LakBi if you do not want prompts processed by AI providers

Depending on where you live, you may have rights to access, correct, delete, or export personal data, or to object to certain processing. Contact us to exercise those rights.

8. Children

LakbayBook is not directed at children under 13 (or the higher age required in your region). We do not knowingly collect personal information from children under that age.

9. Security

We use industry-standard measures via our providers (HTTPS, hashed passwords, access-controlled databases). No method of transmission or storage is 100% secure; use a strong unique password and be careful with public shares.

10. International users

If you access LakbayBook from outside the country where our providers process data, you understand your information may be transferred to and processed in those locations with appropriate safeguards offered by those providers.

11. Changes

We may update this Policy and will revise the “Last updated” date. Material changes will be communicated when practical. Continued use means you accept the updated Policy.

12. Contact

Privacy questions: ejmaskarino.com or the operator contact listed there.

This Policy describes LakbayBook’s current practices. It is not legal advice. For jurisdiction-specific compliance (GDPR, CCPA, etc.), consider reviewing with a qualified attorney.