Legal
Privacy Policy
Effective August 16, 2026
What this covers
This policy explains what 25 North (“we”, “us”) collects when you use 25north.qa, including North AI, and how that information is used. It doesn't cover third-party sites we link to (hotels, ticket sellers, tour operators, and similar) — their own privacy policies apply once you leave our site.
Account data
If you use North AI, we create an anonymous identity for your session automatically so your saved trips and preferences persist across visits — no sign-up required. If you choose to sign in with Google, we receive your name, email address, and profile photo from Google, and link your existing anonymous activity to that account. Account and session data (including your Taste Profile, saved itineraries, and travel preferences) is stored with Supabase, our database provider, and is only readable by your own account.
North AI conversations
Messages you send to North AI are processed by Anthropic's Claude API to generate a response. We send your message, relevant session context, and matching content from our own catalogue — we don't send your account email or other identifying account details to Anthropic. Conversation history may be saved to your account so North AI can pick up where you left off; you can clear it from your account settings at any time.
Reviews and saved trips
Reviews you submit for hotels and restaurants are stored with Supabase and displayed publicly alongside the listing. If you share a saved itinerary or trip invite via a link, anyone with that link can view the itinerary contents.
Newsletter signup
The newsletter signup form currently saves your email address in your own browser's local storage only — it is not transmitted to us or used to send any email yet. We'll update this policy before that changes.
Analytics
We use Plausible, a privacy-friendly analytics service that doesn't use cookies and doesn't collect personal data or track you across other sites. It reports aggregate traffic and page-view figures only.
Email delivery
If you use itinerary sharing or invite features, we use Resend to deliver those emails on our behalf. Resend processes the recipient address and email content solely to deliver that message.
Cookies and local storage
Supabase Auth uses a small amount of local storage to keep you signed in between visits. Favorites, recently viewed items, and newsletter signups (before any real backend exists for them) are also stored in your browser's local storage and never leave your device unless you're signed in and syncing through North AI.
Your choices
You can clear your saved data at any time by clearing your browser's local storage, signing out, or deleting your account from North AI's account menu. To request deletion of data we hold on your behalf, or to ask any question about this policy, email us at hello@25north.qa.
Children
25 North is not directed at children and we don't knowingly collect data from anyone under 16.
Changes to this policy
We'll update the effective date above whenever this policy changes in a way that affects what we collect or how we use it.