Privacy Policy

Sacagawea ("Sacagawea," "we," "us," or "our") operates the Sacagawea website and mobile application (the "Service"), an AI-powered travel-planning and audio-guide product. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

The entity responsible for your information is Sacagawea AI, Inc.. You can reach us about privacy at [email protected].

• Account information — when you sign in with Google or Apple, we receive your name, email address, and profile photo through Firebase Authentication.

• Travel preferences — the interests, travel style, and other preferences you share during onboarding and planning, so we can tailor your trips.

• Trip content — the destinations, itineraries, conversations with the travel agent, and stops you create or generate in the Service.

• Photos and camera — if you use the identify-a-place feature or add photos to a trip, we process the images you capture or upload. Camera access is used only when you actively take a photo.

• Payment information — when you buy content, payments are processed by Stripe (on the web) or Apple (for in-app purchases). We do not receive or store your full card number. If you choose to save a card for faster checkout on the web, your card is stored securely by Stripe and may be used for your future purchases; we keep only a reference that lets us show you your saved cards. You can remove a saved card at any time, and deleting your account removes your saved cards.

• Usage and device data — including your IP address, device and browser type, and how you interact with the Service. We use your IP address to operate free-usage limits and to prevent abuse.

• On-device storage — we store some information (such as guest-session data and preferences) locally on your device.

We and our providers use cookies, local storage, and similar technologies to keep you signed in, remember your preferences, and operate the Service. For example, Firebase Authentication stores sign-in tokens on your device, and we store some app data (such as guest-session information) in your browser's local storage.

We do not use third-party advertising or cross-site tracking cookies. You can clear this data through your browser or device settings, though some features may stop working if you do.

We use your information to:

• Create and personalize your itineraries, tours, and audio guides.
• Operate features you request, such as identifying a place from a photo or answering questions about a stop.
• Process purchases and manage what you have unlocked.
• Enforce free-usage limits and protect against fraud and abuse.
• Maintain, secure, and improve the Service.
• Communicate with you about your account and the Service.

If you are in the European Economic Area or the United Kingdom, we process your personal information under the following legal bases:

• Performance of a contract — to provide the Service you request, including creating itineraries, generating tours, and processing purchases.

• Legitimate interests — to secure the Service, enforce usage limits, prevent fraud and abuse, and improve our product, where those interests are not overridden by your rights.

• Consent — where we ask for it, such as for optional features. You may withdraw consent at any time.

• Legal obligation — to comply with applicable laws, such as keeping transaction records.

Sacagawea's core features — planning your trip, narrating tours, and identifying places from a photo — are powered by generative AI, and we indicate where a feature is AI-powered. To generate a response, we send relevant content — including your travel preferences, chat messages, and any photos you submit to the identify feature — to third-party AI providers (currently Google, via Gemini / Vertex AI, and OpenAI) and to grounding services such as Google Search and Google Places.

We send this content only to generate a response for you. Your inputs are not used to train third-party AI models, and we do not use your content to train our own models. We use the identify feature only to describe what you photograph; we do not use your photos for facial recognition or to identify specific individuals. Because these providers process your content, please avoid submitting sensitive personal information — in a photo or in chat — that you would not want processed by them.

AI-generated content can be inaccurate, incomplete, or out of date. See our Terms of Service for how you should rely on it.

We do not sell your personal information. We share information only with service providers ("subprocessors") that help us run the Service, under agreements that limit how they may use your data:

• Google — Firebase Authentication, Vertex AI / Gemini, Google Places and Maps, and Google Cloud Storage (hosting and photo storage).
• OpenAI — AI content generation.
• Stripe — payment processing on the web.
• Apple — in-app purchases and Sign in with Apple.

We may also disclose information if required by law, to protect our rights or users, or in connection with a business transfer.

We keep your account and trip information for as long as your account is active. We keep your photos and identify data for as long as your account and the related trip are active, and delete them when you delete the trip or your account, except where we must keep limited records to meet legal obligations.

When you delete your account in the Service, we delete or de-identify your personal information, except where we must keep limited records (for example, transaction records) to meet legal obligations.

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. People in the European Economic Area and the United Kingdom have these rights under the GDPR; California residents have rights under the CCPA/CPRA, including the right not to be treated differently for exercising them.

You can delete your account and its data directly in the app, under your profile settings. For any other request, contact us at [email protected].

We operate the Service from, and process data in, the United States and other countries where our providers operate. If you use the Service from elsewhere, your information may be transferred to and processed in those countries. Where required, we rely on appropriate safeguards, such as the Standard Contractual Clauses, for these transfers.

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, contact us at [email protected] and we will delete it.

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. When we do, we will revise the "last updated" date above and, for material changes, give additional notice within the Service.

Questions about this Privacy Policy or your information? Contact us at [email protected].