Justa1. What Justa is
Justa is a travel app. You forward the confirmations for flights, stays, trains and rental cars, and it reads them and organizes them into trips. This policy explains what we keep to do that, who helps us do it, and what you can ask of us.
2. Legal basis for processing
- Contract: to provide the service you signed up for — your account, your trips and the bookings in them.
- Legitimate interest: to keep the service secure and working, for example logs that help us fix a confirmation that failed to read.
- Consent: for optional things, such as push notifications, which you can turn off at any time.
3. What we collect
Your account
Your email address. You sign in with a one-time code sent to it, so there is no password to store. You can add a display name and a country.
Confirmations you forward
The emails, PDFs, images and passes you forward to your Justa address or share from your phone. We store the original files privately so you can open them again, and we read them for what a trip needs: dates, times, places, flight and train numbers, confirmation and ticket numbers, and the names of the travelers on them.
Identities
You can add the names, passport numbers and loyalty numbers that appear on your bookings, so we can tell which ones are yours. We never keep what you type: we keep a keyed fingerprint that cannot be turned back into the original, and a short hint such as initials, so you can recognize it in the list.
Trips you share
When you invite someone to a trip, we keep their email address with the invitation until it is accepted or revoked. Everyone on a trip can see the bookings in it.
Notifications
If you turn notifications on, we keep your device's push token to send you updates about your trips, such as a gate change. Nothing else is sent to it.
Purchases
Payment is handled by Apple or Google. We never see your card. We receive a record of what you bought and whether a subscription is active.
What stays on your phone
Reading text from a photo or PDF you share happens on your device. Weather for your destinations comes from Apple Weather, requested by the app for the places in your trips. We do not ask for your location and do not track it.
What we do not do
We do not sell your data, show ads, or use tracking or advertising SDKs. We do not use your confirmations to train models.
4. Services that process data for us
We rely on the providers below to run Justa. Each receives only what its job needs, under a data processing agreement.
- Supabase — database, sign-in and file storage. Your account, trips, bookings and forwarded files.
- Resend — email. Receives the confirmations you forward, and sends trip invitations and account emails.
- OpenAI — reading confirmations. The text of a confirmation, when our own parser cannot read it on its own. Not used for training.
- TypeSafe — deciding which trip a booking belongs to. Only what was booked, when and where — no names or reference numbers.
- AeroDataBox — flight status. Flight numbers and dates, nothing about you.
- RevenueCat — purchases. Your account id and what you bought.
- Expo — push notification delivery. Your push token and the notification.
- Apple — payments, push notifications and weather.
5. How long we keep it
For as long as you have an account. Flight status we look up is kept for a short time and then discarded. When you delete your account, everything described above is erased from our systems; backups roll over within 30 days.
6. Your rights
- Access and portability: ask us for a copy of what we hold about you.
- Rectification: change your details in the app at any time.
- Erasure: delete your account from Settings in the app. It removes your account, the trips you started — for everyone on them — your bookings, forwarded files and identities. It does not cancel a subscription: cancel that in your App Store or Google Play settings.
- Objection and complaint: write to us, or to your local data protection authority.
7. Security
- Data is encrypted in transit and at rest.
- Row-level security in the database means an account can only read its own data and the trips it has been invited to.
- Forwarded files live in private storage and open through links that expire.
8. Connecting Justa to AI assistants
You can connect Justa to an AI assistant such as Claude or ChatGPT. You sign in and approve it, and the assistant can then read your trips and bookings on your behalf. What it reads passes through that provider as part of your conversation and is governed by their privacy policy. You can disconnect it at any time from the assistant's settings.
9. Children
Justa is intended for people aged 16 and older. We do not knowingly collect data from anyone younger.
10. Changes
When this policy changes in a way that matters, we will tell you in the app or by email before it takes effect.
11. Contact
For questions or to exercise your rights: [email protected]