Privacy policy
If you use the site without signing in, we ask you for nothing personal. If you sign in, we store only your email address and your travel preferences - and delete them whenever you ask. Google Analytics starts only with your consent. We never sell your data.
Delete your KoalasTrip account
To delete an account created in the app or on the website, email us from the address used for your account with the subject “Delete my account”. You can request deletion even if you cannot sign in; we may ask you to verify account ownership.
After verifying the request, we delete your Firebase identity record, account ID, email address and saved travel preferences. Aggregate visit counts that are not linked to your account are kept for up to 90 days; the daily usage counter resets the same day. If a record must be retained for a legal reason, we will explain why and for how long. We respond with the status of your request within 30 days.
In short
- You can use the site without signing in; in that case we ask you for no personal information at all.
- If you sign in, we store your email address and travel preferences - deleted whenever you ask.
- Google Analytics starts only after your explicit consent; we use no advertising cookies.
- We never sell your data.
When you use the site without signing in
- We ask for no account, email or password.
- Your chats and plans stay in your browser only; they are never sent to our server.
- A random number is written to your browser to count visits. It does not identify you and does not track you across sites.
- Your IP address is not stored. It is counted temporarily to prevent abuse and deleted at the end of the day.
- Country, language and device type (phone / tablet / desktop) are kept only as aggregate counts, never tied to a person.
When you sign in
- Authentication runs through Google Firebase. Your password never reaches us.
- Stored on our server: your account ID, your email address and your daily usage counter.
- Your travel preferences are remembered: cities you planned for, party size, whether children travel with you, transport and tour preference.
- Your chat text is NOT stored. What you asked and what you wrote is not recorded.
- You can have your stored preferences deleted entirely at any time.
The AI assistant
- The message you write is sent to DeepSeek servers to produce the answer.
- This is momentary; your message is not stored on our side.
- Your name, email or account ID is never sent to the model.
- If you are signed in, only a short summary of your travel preferences is sent.
Location
- Your location is used only if you allow it, and your browser asks first.
- It is used only to build the plan you asked for.
- It is not stored on our server and no history is kept.
- If you decline, typing a hotel name or district gives you the same result.
Cookies
- If you consent, Google Analytics uses first-party analytics cookies; no measurement request is sent to Google before consent.
- Ad personalisation, ad storage and cross-site tracking stay disabled.
- If you sign in, Firebase leaves a technical record to keep your session open.
- You can clear browser-stored records from your browser settings.
Who we share data with
- AI: DeepSeek (message text, momentary).
- Identity: Google Firebase (email, account ID).
- Measurement: Google Analytics (page and interaction data only after consent; no email address or account ID is sent).
- Maps and distances: Google Places, Routes and Geocoding (place names and coordinates).
- Tour and ticket inventory: Tiqets, Viator, WeGoTrip (search text; your identity is never sent).
- When you move to a partner site our partner code travels with the link; the purchase is completed there and your payment details never reach us.
- We never sell your data and never share it for advertising.
How long we keep things
- Visit counts: 90 days, then deleted.
- Daily usage counter: reset at the end of the same day.
- Your travel preferences: for as long as your account exists.
- AI connector (MCP) tokens: 90 days, then they expire on their own.
- Your chat and plan history: in your browser only, until you delete it.
AI connectors (Claude, ChatGPT)
- If you set up the connector, the consent screen states exactly what you are granting.
- The connector can build day plans on your behalf and read inventory; it cannot make purchases.
- You can revoke access at any time.
- No payment information is shared.
Your rights
- You can find out what data we hold about you.
- You can ask for it to be corrected or deleted.
- You can have your account and stored preferences removed entirely.
- Write to info@koalastrip.com; we respond within 30 days at the latest.
- Your rights under Turkiye KVKK and the European Union GDPR are reserved.
Children
- Our service is not directed at children under 13.
- We do not knowingly collect data from children.
- If we notice such data, we delete it.
Contact
- Elifa Collective Tekstil Tasarim Ticaret Ltd. Sti.
- info@koalastrip.com
- If this policy changes, the date on this page is updated.
Last updated: 16 Eylül 2026