Privacy Policy for ubeen.to travellers

1. Introduction

ubeen.to (the "Service") is developed and operated by Ubeen Studios LLC, a New Mexico limited liability company ("we", "us", or "our"). This Privacy Policy describes how we collect, use, disclose, store, and protect information when you use our website, mobile applications, and related services (together, the "Service"). By using the Service you acknowledge the practices described in this Policy. If you do not agree, please do not use the Service.

2. Who We Are

Ubeen Studios LLC
1209 Mountain Road PL NE, STE N
Albuquerque, NM 87110, United States
Email: contact@ubeen.to

For all data-privacy questions, requests, or complaints, contact us at the email above. We are a small team; the person who reads this inbox is directly responsible for privacy matters at Ubeen Studios LLC.

3. Information We Collect

Account Information

• Name, email address, and profile photo URL received from Google Sign-In (currently our only sign-in method)
• Username you choose or that is automatically generated for your account
• Authentication session tokens

Content & Usage Data

• City guides and place guides you view, generate, bookmark, or publish
• Ratings, reactions, and achievements you earn or submit
• Trip planners and honeymoon plans you create, including destinations, dates, preferences, and itinerary edits
• Credits ("UBN") balance and consumption history, subscription tier, and billing status

Honeymoon Co-Decision / Shared Plans

• When you share a honeymoon plan via a private link, the plan content becomes accessible to whoever holds that link
• An invited partner who reacts to a shared plan through a link does not need an account, but their reactions, preferences, and any name or identifier they choose to enter are stored and linked to that shared plan so both partners' input can be merged
• Anyone with the share link can view the plan and the merged reactions — treat share links as sensitive and only send them to your intended partner

Location Data

• If you grant browser permission, the Trip Planner feature reads your device's GPS location to show your position on the map and route you between stops
• Location access is optional, requested explicitly by your browser, and used only while the planner is open — we do not track location in the background

Payment Data

• Credit-pack purchases are processed by Stripe; we receive confirmation of payment, the amount, and the product purchased, but never your full card number

Technical & Analytics Data

• IP address, browser type, device type, and operating system
• Pages visited, features used, and interaction events (via Google Tag Manager, Google Analytics and Ahrefs Web Analytics)
• Cookies, local storage values, and session identifiers (see Section 6)

4. Authentication

The Service currently uses Google Sign-In as its only authentication method. We never receive, store, or have access to your Google password. Google shares only the profile fields you consent to (name, email, profile photo) at sign-in. Authentication sessions are managed securely via signed session cookies and, for our mobile app, a bearer token.

5. How We Use Your Information

• To authenticate your identity and provide access to the Service
• To generate, store, and display city guides, place guides, and travel content
• To run trip planners and the honeymoon Couple Co-Decision feature, including merging both partners' reactions
• To manage your credit (UBN) balance, purchases, and subscription status
• To personalize your experience (bookmarks, ratings, achievements, recommendations)
• To operate the affiliate booking links you choose to click (Section 9)
• To detect, prevent, and investigate fraud, abuse, or security incidents
• To improve the Service's performance, stability, and features, including through aggregated/anonymized analytics
• To communicate important updates related to your account, purchases, or this Policy

6. Cookies & Tracking Technologies

We use cookies, local storage, and similar technologies for:

• Strictly necessary — authentication session cookies, your language/locale preference, your theme preference, and your cookie-consent choice. These cannot be disabled without breaking core functionality.
• Analytics — Google Tag Manager, Google Analytics (GA4) and Ahrefs Web Analytics help us understand how the Service is used, in aggregate.
• Affiliate/advertising — when you click a booking link (hotels, flights, tours, transfers, car rental, eSIM), you are redirected through our own /go tracking endpoint to a partner site, which may itself set cookies to attribute the referral. We do not receive your booking or payment details from these partners.

You will be presented with a cookie consent notice on your first visit and can choose to accept or decline non-essential cookies. You may withdraw consent at any time by clearing your browser cookies, though this may affect functionality such as staying signed in or your saved preferences. We do not currently respond to browser "Do Not Track" signals because no common industry standard exists for interpreting them.

7. AI Processing of Your Content

Some Service features use third-party AI models to generate content — for example, narrative text for city guides (via an OpenAI-compatible language model) and, for certain guides, AI-generated imagery (via fal.ai). Inputs you provide to these features (such as destination names, preferences, or trip details) are sent to these providers solely to generate the requested content, under their own data-processing terms. We do not use your private account data (like your email) to train these third-party models, and we do not permit these providers to use your inputs to train their general-purpose models beyond what is necessary to provide the output to us.

8. Google Maps Platform

City maps, place search, and photo enrichment are powered by the Google Maps Platform (Maps JavaScript API and Places API). Your use of these in-page map features is also subject to the Google Privacy Policy and Google Maps Platform Terms of Service. We cache limited place data (such as Place IDs and photo attributions) to keep guides fast and consistent, consistent with Google's caching rules.

9. Affiliate Links & Sponsored Content

Booking modules on city and airport pages (hotels, flights, tours, attraction tickets, transfers, car rentals, and eSIM) link out to third-party travel partners through our affiliate network (Travelpayouts and its partner brands, such as Aviasales, Hotellook, Klook, Tiqets, Kiwitaxi, GetRentacar, and Yesim).

Disclosure: We may earn a commission when you book through these links, at no extra cost to you. Outbound links are marked rel="sponsored".

When you click a booking link, we log non-identifying click data (partner name, booking intent, city/airport, and page path) to measure which pages drive bookings. We do not pass your name, email, or account identifiers to these partners. Once you leave ubeen.to, that partner's own privacy policy and terms govern your interaction with them — we do not control and are not responsible for their data practices.

10. Data Sharing

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes, and we do not "sell" or "share" personal information as those terms are defined under the California Consumer Privacy Act. We share data only in the following circumstances:

• With service providers who process data on our behalf under contract, including: Google (authentication, Maps/Places); Stripe (payment processing); OpenAI and fal.ai (AI content/image generation); our cloud database and object-storage providers; Google Tag Manager, Google Analytics and Ahrefs (analytics); and Travelpayouts and its partner brands (affiliate booking links, Section 9)
• With the partner you share a honeymoon plan link with, to the extent needed to run the Couple Co-Decision feature
• When required by law, subpoena, or other legal process
• To investigate or prevent fraud, security incidents, or abuse of the Service
• To protect the rights, safety, or property of Ubeen Studios LLC, our users, or the public
• In connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections

11. Payments & Consumable Credits

Credit (UBN) packs are one-time, consumable digital purchases processed through Stripe. We do not directly collect or store your payment card number; Stripe handles that under its own Privacy Policy. We retain a record of what you purchased, when, and the resulting credit grant, for accounting, support, and fraud-prevention purposes. If we introduce recurring subscription plans, payment handling for those will be disclosed at the time they launch and governed by the same principles described here.

12. International Data Transfers

Ubeen Studios LLC is based in the United States and our infrastructure and service providers are primarily located in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate, which may have data protection laws different from those in your country. By using the Service, you consent to this transfer where permitted by applicable law.

13. Data Storage and Security

Your data is stored using industry-standard cloud database and object-storage infrastructure, with encryption in transit (TLS) and at rest. We implement appropriate technical and organizational measures — including access controls, signed sessions, and a strict Content Security Policy — to protect your personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

14. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law, for fraud prevention, or to resolve disputes. Public guides you have created may remain visible in anonymized or de-attributed form unless you request their removal. Honeymoon plans shared via link remain accessible to link-holders until the account owner deletes the plan or their account. Aggregated or anonymized analytics data, and affiliate click logs (which contain no personal identifiers), may be retained indefinitely.

15. Your Privacy Rights

Depending on your location, you may have some or all of the following rights regarding your personal data: to know/access what we hold about you, to correct inaccurate data, to delete your data, to export it in a portable format, and to object to or restrict certain processing. You may exercise these rights at any time by deleting your account in-app or by contacting us at contact@ubeen.to. We will verify your request using your account email and respond within the time required by applicable law (generally 30–45 days).

California residents (CCPA/CPRA)

California residents have the right to know what personal information we collect, use, disclose, and (as described above) do not sell or share; to request deletion or correction of that information; and to not be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined by the CCPA, so there is no "opt-out of sale/sharing" link to provide.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with its own data protection law, you may have additional rights under that law, including the right to lodge a complaint with your local supervisory authority. Our lawful bases for processing include performance of our contract with you (providing the Service), our legitimate interests (improving and securing the Service, preventing fraud), consent (where required, e.g. certain cookies), and compliance with legal obligations.

16. Children's Privacy

The Service is not directed at children under the age of 13, and users between 13 and 18 must have parental or guardian consent (see our Terms of Service). We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete it promptly. Parents or guardians who believe we may have collected such information should contact us immediately.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. Material changes will be posted on this page with an updated revision date, and where required by law, we will provide additional notice. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

18. Contact

Ubeen Studios LLC
1209 Mountain Road PL NE, STE N
Albuquerque, NM 87110
https://ubeen.to
contact@ubeen.to