Privacy Policy

Who we are

Highlights is run by Winding.ai Inc ("we", "us"), the controller of your personal data:

Write to us at support@winding.ai with any question about this policy or your data.

What we collect

Some data you give us; some is collected automatically as you use Highlights. Unless a form says a field is optional, we need it to provide that part of the service. If you're not sure what's required, ask us.

• Account. Your email address when you sign in with an emailed code. With Sign in with Apple or Google, the name, email address and profile photo they share with us; Sign in with Apple can give us a private relay address that forwards to your real one. You can also start as a guest, without an email, until you sign in.
• Trips and chats. The prompts you write and the trip details you give us, such as destination, dates, who's coming and children's ages, budget, pace, interests, must-dos and things to avoid; the trips we make and you edit; and your chat with Sally, our trip assistant.
• Group trips and invites. When you join a trip from an invite: the name you give, your RSVP and, if you enter one, your email address.
• Purchases. The email address you give at checkout, what you bought, the price and currency, the payment status, the kind of wallet you paid with (such as Apple Pay) and Stripe's payment reference. Your card details go straight to Stripe and never reach our servers.
• Custom plan requests. The trip brief and email address you send with the custom plan form.
• Etsy and Fiverr orders. If you buy a Highlights plan on Etsy or Fiverr, the order details and trip brief the marketplace passes on to us.
• Creator and advisor profiles. If you publish trips or work with clients on Highlights, the profile you set up: handle, name, bio, photo and links.
• Usage and device data. Your IP address, browser and device type, the pages and screens you open, what you tap and click, the link or campaign that brought you, and when. Our servers and providers also keep technical logs, including IP addresses, to run and secure the service. Some of this is collected with cookies and similar technologies, listed in our Cookie Policy.
• Session replays. PostHog records how pages and screens are used (taps, clicks, scrolling and page changes) so we can see where people get stuck. Text you type in any field is masked before it leaves your device, and the card form at checkout, which Stripe serves, is never recorded.
• Error reports. When something breaks, Sentry receives technical details of the error, the page or screen, and your browser or device type.

If you add other people's details to Highlights, for example the names of the people coming on a trip, make sure they're happy for you to do so: you're responsible for other people's personal data that you share through Highlights.

How we use it

• To run Highlights: make, edit, save and sync your trips, keep you signed in, share trips and run group trips.
• To write and research your trips with AI: your prompts, trip details and chat are sent to AI models to draft and edit your plan, and public web pages are fetched to check places and events.
• To sell and deliver what you buy: take payment through Stripe, send your purchase by a link in an email and unlock it in the app, and handle refunds. A member of our team checks custom plans before we deliver them.
• To email you: sign-in codes, purchase and delivery emails, and replies when you write to us.
• To understand and improve Highlights: product analytics and session replays (PostHog), site traffic (Google Analytics 4) and error monitoring (Sentry).
• To measure our ads: the Meta Pixel and Conversions API and Google Analytics 4 tell us which ads and links led to visits and purchases. See Ads measurement and privacy signals.
• To keep Highlights safe: rate limits, fraud checks on payments, and detecting and investigating abuse.
• To meet legal obligations and protect rights: keeping purchase records for tax and accounting, responding to lawful requests from public authorities, and using data in court, or in the steps leading to legal action, over misuse of Highlights.

What we don't do

• We don't sell your personal information.
• We don't use your trips or messages to train AI models, and our AI providers are configured not to keep or train on them.

Who processes your data for us

These providers process personal data on our behalf, only for what's listed. Most of them are based in the United States. You can ask us for the current list at any time.

Cloudflare, Inc.

Hosting, our database (D1), file storage (R2) and network security. Cloudflare serves Highlights from data centers around the world.

Everything Highlights stores, and the requests your browser or app makes. Privacy policy

Stripe, Inc.

Payments, payment fraud prevention and receipts.

Your checkout email, the card or wallet details you enter in Stripe's payment form, what you bought, and device data Stripe uses for fraud checks. Privacy policy

PostHog, Inc.

Product analytics and session replay, sent through our own domain.

Usage and device data, an internal account id, and session replays with everything you type masked. Privacy policy

Google LLC

Google Analytics 4 (traffic on highlights.ai), Sign in with Google, and Google Maps Platform (place details, opening hours, ratings and photos for trips).

Usage data and cookie ids for Analytics; your name, email address and photo when you sign in with Google; place lookups for your trips. Privacy policy

Meta Platforms, Inc.

Meta Pixel and Conversions API, to measure our ads.

Page views and purchases, cookie ids, IP address and browser type, and, for purchases, your email address as a one-way (SHA-256) hash. Not used when your browser sends a privacy signal or you opt out on Your Privacy Choices (see below). Privacy policy

Apple Inc.

Sign in with Apple and the App Store.

Your name and email address, or the private relay address Apple gives us. Privacy policy

Resend

Sending our emails.

Your email address and the message. Privacy policy

Sentry (Functional Software, Inc.)

Error monitoring.

Error details, the page or screen, browser or device type, and an internal account id. Privacy policy

OpenRouter

Routes our AI requests to the model providers that write and edit trips, such as Anthropic, Google and DeepSeek.

Your prompts, trip details and chat messages. Our requests go only to model providers that don't keep or train on them. Privacy policy

Firecrawl

Web research: fetches public web pages about places and events.

Search queries and web addresses about your trip, not your account details. Privacy policy

In Google Analytics 4, IP addresses are used at collection time and discarded before data is logged. Google may use Analytics data to improve its own services and to personalize ads in its advertising network.

Sign-in runs on our own servers using Better Auth, an open-source library, so your sign-in data stays in our database.

Sharing and who can see what

• Your trips are private until you share them. Anyone with a share or invite link can open that trip.
• People on a group trip see the plan and each other's names and RSVPs.
• Trips you publish as a creator, and your creator profile, are public.
• Beyond the providers above, we disclose personal data only when the law requires it, for example at the request of public authorities, or when it's needed to protect our rights or the safety of our users or others.

Ads measurement and privacy signals

On highlights.ai, Google Analytics 4 and the Meta Pixel load only when your browser doesn't send a Global Privacy Control (GPC) or Do Not Track signal and you haven't opted out on Your Privacy Choices. With a signal on, or after you opt out, they don't load, and we don't send Google or Meta the visits and purchase events our servers would otherwise send for you. PostHog, our product analytics, still runs, through our own domain.

You can also opt out of Google Analytics with Google's browser add-on. Meta describes your choices in its privacy policy.

Where your data is processed

We and most of our providers are in the United States, and Cloudflare serves Highlights from data centers around the world. If you live elsewhere, using Highlights means your data is transferred to and processed in countries other than your own, including the United States.

How long we keep it

We keep personal data as long as we need it for the purpose we collected it for. We may keep it longer when the law requires it or an authority orders it, or when you've agreed to it. In practice:

• Your account, trips and chats, and the requests behind them: until you delete them or your account.
• Guest accounts with no trips and no purchases: deleted after 90 days without use.
• Sign-in sessions expire after 90 days; emailed sign-in codes after 10 minutes.
• Purchase records: as long as tax and accounting rules require, even after you delete your account. Checkouts that were never paid are deleted after 30 days.
• The ad-matching details saved at checkout (cookie ids, IP address and browser type, used to report a purchase to Google and Meta): deleted once the purchase is reported.
• Usage counters (for limits): 90 days. Technical logs of AI jobs: 60 days.
• Analytics and error data held by PostHog, Google, Meta and Sentry: for the periods those services set. Google Analytics cookies, for example, last up to 2 years.

Once a retention period ends, the data is deleted, and the rights to access, delete, correct or port it can no longer be exercised.

Deleting your account

You can delete your account in the Highlights app, or by emailing support@winding.ai from the address on your account. Deleting it removes:

• your account, sign-in methods and sessions;
• the trips you created, with their chats and share links. A group trip that other people have joined stays with them, and one of them becomes its owner;
• your place, RSVP and messages on other people's trips;
• your creator or advisor profile.

We keep records of your purchases (what, when, how much, and the email used at checkout), no longer linked to your account, for tax and accounting. To also remove analytics data linked to you, or anything else we hold, email us.

Your rights

Depending on where you live, and to the extent the law allows, you have the right to:

• Withdraw consent you've given, at any time.
• Object to processing done on a basis other than consent, such as our legitimate interests, by giving a reason related to your situation. You can object to direct marketing at any time, free of charge and without giving a reason.
• Access your data: learn whether we process it, how, and get a copy.
• Correct it, if it's inaccurate or out of date.
• Restrict its processing, so we only store it.
• Delete it.
• Port it: receive it in a structured, commonly used, machine-readable format and, where technically feasible, have it sent to another controller.
• Complain to your data protection authority.

You can also ask about the legal basis for transferring your data outside your country, and how we protect it.

How to use these rights: email support@winding.ai. Requests are free, and we answer as early as we can and always within one month. When we correct or delete data, or restrict its processing, we tell everyone we disclosed it to, unless that proves impossible or takes disproportionate effort; we'll tell you who they are if you ask.

California privacy rights

If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA), gives you the rights below. This section adds to the rest of this policy.

What we collect and why. In the last 12 months we collected these categories of personal information, from you, from your browser or device, and from the services you use with Highlights (Apple, Google, Stripe, Etsy and Fiverr):

• Identifiers: name, email address, IP address, and account and cookie ids. Used to run your account, sell and deliver what you buy, email you, keep Highlights safe, understand how it's used, and measure our ads.
• Commercial information: what you bought, the price and the payment status. Used to sell and deliver it, handle refunds, keep tax and accounting records, and measure our ads.
• Internet or other electronic network activity: the pages and screens you open, what you tap and click, session replays, error reports, and the link or campaign that brought you. Used to run, secure and improve Highlights, and to measure our ads.
• Trips, messages and profiles: your prompts, trip details, chats with Sally, custom plan briefs and any creator or advisor profile. Used to make, edit and deliver your trips, and to publish the profile you set up. If a trip detail you write reveals something sensitive, such as a health need, we use it only to make your plan.

We disclose each category to the providers in Who processes your data for us, for the purposes above, and keep it for the periods in How long we keep it.

Selling and sharing. We don't sell personal information for money. Google Analytics and the Meta Pixel on highlights.ai, and the purchase events our servers send to Google and Meta, help us measure our ads, and under California law that may count as "sharing" personal information (identifiers, internet activity and commercial information) for cross-context behavioral advertising. You can opt out of it on Your Privacy Choices, or by turning on Global Privacy Control in your browser. We don't have actual knowledge that we sell or share the personal information of anyone under 16.

Your rights. You have the right to:

• Know what personal information we collect about you, where it comes from, why we collect it, who we disclose it to, and the specific pieces we hold.
• Delete the personal information we collected from you, except what the law lets us keep, such as purchase records.
• Correct personal information about you that's inaccurate.
• Opt out of the sale or sharing of your personal information, on Your Privacy Choices or with Global Privacy Control.
• Not be discriminated against for using these rights: we won't deny you Highlights, charge you a different price or give you a lower quality of service because you did.

How to send a request. Email support@winding.ai from the address on your account, or delete your account in the Highlights app. We check a request comes from you by matching it to the email address on your account, and may ask you to confirm it. Someone you authorize can make a request for you with your signed permission. We respond within 45 days; if we need longer, up to 45 more days, we'll tell you why.

Children

Highlights is for people 13 and older; we don't knowingly collect data from children under 13. If you're a parent or guardian and think your child under 13 has given us personal data, email support@winding.ai and we'll delete it, and the child's account. Details a parent gives us about the children coming on a trip, such as their ages, are part of that parent's trip.

Legal bases

We process personal data when at least one of these applies: you've given consent for a specific purpose; it's needed to perform an agreement with you, or for steps you asked for before entering one; it's needed to meet a legal obligation we're subject to; or it's needed for our legitimate interests or a third party's. We'll gladly tell you which basis applies to any processing, and whether providing the data is a legal or contractual requirement or needed to enter into a contract.

Security

We take appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of your data. It's processed with computers and IT tools, under procedures tied to the purposes above. Besides us, it may be accessible to people involved in running Highlights (administration, sales, marketing, legal, system administration) and to the providers listed above, appointed as processors where needed.

Changes to this policy

We may change this policy. We'll post the new version on this page with a new date and, where we can, tell you in the app or by email. Please check this page from time to time. If a change affects processing based on your consent, we'll ask for your consent again where the law requires it.

Contact

We'll give you more detail about how we collect or process personal data on request. Contact us at:

This policy covers highlights.ai, the Highlights apps and our emails. Etsy, Fiverr, Apple, Google and other services you use alongside Highlights have their own policies.