Last updated 1 November 2026
BookEatSleep makes personal travel guides. We store as little about you as possible, and most of it stays on your own phone or computer. Here you can see exactly what we store, where, and why.
If you use the app without logging in, your travel profile, trips, travel profiles and people, and your wishes for stays and food are stored only in your browser (localStorage). We can't see them.
Allergies, accessibility and halal/kosher are sensitive data. They always stay on your device only, are never sent to us or to AI, and are only shared with a place when you give permission for a booking.
If you log in, we store your email address and, so they follow you across devices, your travel profile (first name, interests, exclusions, answers and language) and your trips (destination, choices and guide).
If you log in with Google, we receive your email address and the name and profile picture Google sends. We only use the email address to log you in.
The legal basis is our agreement with you to provide the service (GDPR Art. 6(1)(b)).
For destinations without our own catalogue, the guide is made by an AI model from Anthropic. It receives the destination, your interests and exclusions, your answers (e.g. pace and budget), the number of days, any neighbourhood and start date, names of saved places and what you write as wishes.
It never receives your name, email or sensitive data. So please don't write personal information in the wishes field. Anthropic may not use the data to train its models.
A shared link only contains the destination, the days and the places – never your name, profile, chosen hotel or travel dates. Anyone with the link can see the guide.
When you tap a booking or website link, we store which place and which kind of link, but not who you are or your IP address.
When you report an error or suggest a place, we store the message and only the email you write yourself.
To limit misuse of the AI guide, the server briefly keeps track of requests per IP address. This is not stored.
We only use necessary cookies: one for your language and, if you log in, those that keep you logged in. No advertising or analytics cookies.
Vercel (running the app), Supabase (database and login), Anthropic (AI guide), MapTiler (map – your browser loads map images directly from them), Open-Meteo (weather for the destination) and Google (only if you log in with Google). Some are in the US; transfers use the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
Fonts are served by the app itself, so your IP address is not sent to Google Fonts.
Account data and trips are kept until you delete them or your account. Deleted trips are also deleted from your account. Data on your device is deleted by clearing the browser's data for the site.
You can access, correct, export and delete your data, and object. Write to us and we'll help. You can also complain to your data protection authority (in Denmark: datatilsynet.dk).
Use "Give feedback" at the bottom of the guide until our contact email is in place.