Legal
Privacy Policy
Last updated April 2026
Quiet Route is operated by David O'Sullivan as a sole trader based in the United Kingdom. This policy explains what data we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.
If you have any questions, email david@quietroute.io.
What we collect
When you create an account and use Quiet Route, we collect:
- Your email address and password
- Your name, if you provide it
- Trip planning inputs: destinations, travel dates, vehicle details, interests, budget
- Generated trip itineraries and any edits you make to them
- Subscription and billing information, processed and stored by Stripe
- Basic usage data (pages visited, features used) collected via server logs
We do not collect location data from your device. We do not use advertising trackers or third-party analytics platforms.
How we use it
We use your data to:
- Provide the Quiet Route service, generating and saving your trip plans
- Manage your account and subscription
- Send transactional emails: payment confirmations, renewal reminders, account notices
- Improve the product by understanding how the service is used in aggregate
We do not sell your data. We do not use your data for advertising. We do not share your personal information with third parties except as described below.
Third parties
We use a small number of trusted services to operate Quiet Route:
- Supabase for authentication and database hosting. Your account data and trip plans are stored on Supabase infrastructure.
- Stripe for payment processing. Card details are handled entirely by Stripe and never pass through our servers.
- Anthropicfor AI trip generation. Your trip inputs are sent to the Anthropic API to generate your itinerary. Anthropic’s data processing agreement applies.
- Resend for transactional email delivery.
- Vercel for application hosting and deployment.
Data retention
We keep your account data and trip plans for as long as your account is active. If you delete your account, all your data is permanently deleted within 30 days.
Stripe retains billing records as required by financial regulations. This is outside our control.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and all associated data
- Export your data in a portable format
- Object to how we process your data
To exercise any of these rights, email david@quietroute.io. You can also delete your account directly from the account settings page.
Cookies
Quiet Route uses only essential cookies required to keep you signed in. We do not use advertising cookies, tracking cookies, or analytics cookies.
Changes to this policy
If we make significant changes to this policy, we’ll notify you by email. The date at the top of this page reflects when it was last updated.
Contact
David O'Sullivan
Quiet Route
david@quietroute.io