Privacy Policy

This policy explains what information Khayi Phaw collects, why we collect it, who stores it, and how you can delete it. Khayi Phaw is an AI travel planner for Myanmar. The short version: we keep your trips so we can show them back to you, we send your trip request to an AI service to build the plan, and we never sell your data or run advertising trackers.

You can use Khayi Phaw without an account. Depending on how you use it, we store:

• Trip details you enter — destination regions, dates, number of travellers, budget and style choices, interests, and the itinerary itself (days, places, times, notes, costs).
• Places you save and reviews you write — your 1–5★ rating, any comment, and an optional display name.
• A random identifier in an httpOnly cookie called khayi_guest_id. It means nothing outside this site and is not derived from your device or fingerprint — it only links your trips to this browser.
• Your chosen language (a locale cookie) so the site stays in English or မြန်မာ.
• If you sign in with Google: the name, email address and profile picture on that Google account, so your trips can follow your account instead of one browser.
• Basic activity timestamps, such as when your browser was last active.

Khayi Phaw is deliberately minimal:

• No passwords — sign-in uses Google, so we never see or store a password of ours.
• No phone numbers and no payment details (Khayi Phaw is free).
• No precise location — we never ask for GPS. Coordinates on a trip are places you picked on the map or typed yourself.
• No advertising identifiers, no third-party analytics, no behavioural trackers — the site runs no analytics scripts at all.

• To build, save and show your itineraries — on this browser, or on any device once you sign in.
• To show your reviews, ratings and saved places back to you and to other travellers.
• To keep the service reliable and secure (abuse prevention and error diagnosis).
• We do not sell, rent or trade your information, and we do not use it for advertising.

When you ask for an AI-built itinerary, your trip request — region, dates, travellers, style, interests and any notes you wrote — is sent to Google's Gemini to generate the plan. The generated days and activities are then saved to your trip.

Place names you type are looked up with a geocoding service (Google, Photon or OpenStreetMap) to get map coordinates, and map tiles are loaded from Mapbox.

Nothing beyond your trip request goes to the AI service: your reviews, saved places and other trips are not sent to it.

Every trip gets a share link. Anyone holding the link can open the shared view of that trip — no login needed. Treat the link as sensitive and only send it to people you want to see the itinerary.

Trips are private by default — you turn on a share link from the trip's share menu, and you can turn it off again at any time (a link that is turned off stops working for everyone who holds it). Trips you make public are listed in our public sitemap, so search engines can index them. The link uses a random slug that is hard to guess, but it is not a password. Deleting the trip removes the page.

A shared view shows the plan itself — the trip title, days and places — not your email address or Google profile.

A short list of the services that touch your data:

• Vercel — hosting and server logs for the site.
• Supabase — the database where trips, reviews and images are stored.
• Google — Gemini for generating itinerary text, Google for sign-in, and Google/Photon/OpenStreetMap for geocoding.
• Mapbox — the map tiles shown on trip maps.
• Wikimedia Commons and Unsplash — the destination photographs, credited in the footer.

Khayi Phaw sets two cookies: khayi_guest_id (an httpOnly random id that ties trips to this browser) and NEXT_LOCALE (your language). No advertising or analytics cookies are set. You can clear them at any time in your browser — doing so unlinks trips you have not claimed or signed in with, so claim your trips or sign in first if you want to keep them.

• We keep your information for as long as your browser id or account exists.
• Deleting a trip permanently removes its itinerary, days, activities and reviews.
• Clearing site data in your browser removes the link between you and your unclaimed trips.
• To have your account or any remaining data deleted, email us at the address below.

You can ask for a copy of your data, correct it, or have it deleted by emailing the address below. Because Khayi Phaw has no advertising and sells no data, there is nothing to opt out of beyond closing the tab or clearing your data.

Khayi Phaw is meant for travellers aged 13 and over. We do not knowingly collect data from children under 13 — contact us if you believe a child has used the service.

When we change this policy we update the date at the top of the page. Continuing to use Khayi Phaw after a change means you accept the updated policy.

For privacy questions or data requests, email nyeinminhtet.dev@gmail.com.