What we collect
We collect only the minimum information needed to provide the service:
- Phone number — used for OTP-based login. We store it as the primary account identifier.
- Session cookie — a signed
bn_session cookie is set after login to keep you authenticated. It is HttpOnly and not accessible to JavaScript.
- Stories you interact with — stories you star (watchlist), groups you create, and stories you save privately are stored against your account.
- Travel plans you create — if you use the AI Travel Planner, your itinerary is saved to your account until you choose to delete it.
- Uploaded documents — if you upload a PDF or text file for analysis, the file bytes are passed directly to Gemini AI in memory and discarded immediately afterward. No file content is stored on our servers.
How we use it
- Authenticate your account and keep you logged in across sessions.
- Save your watchlist, private stories, and story groups so they persist between visits.
- Generate AI-powered travel itineraries when you use the Travel Planner.
- Send OTP messages to verify your phone number during login.
What we do not do
- We do not sell, rent, or share your personal data with third parties for commercial purposes.
- We do not store the content of uploaded files — documents are processed in memory and never written to disk or a database.
- We do not use your data to train AI models.
- We do not show advertising.
Cookies
- bn_session — an HttpOnly session cookie set after login. Contains a signed token identifying your account. Expires after 30 days of inactivity.
- bn_uid — an anonymous identifier cookie used for basic analytics (page views). Contains no personal information.
Third-party services
- Supabase — our database provider. Stores account data, stories, watchlists, and groups. Data is hosted in the EU region.
- Vercel — our hosting provider. Serves all web requests and serverless functions.
- Twilio — used to send OTP SMS messages for phone number verification.
- Google Gemini (Vertex AI) — used for story summarisation, AI enrichment, document analysis, and travel itinerary generation. Uploaded document bytes are sent to Gemini and not retained by us afterward. Google’s Vertex AI data processing terms apply.
Data retention
Account data (phone number, watchlist, stories, groups) is retained until you request account deletion. Travel plans are retained until you delete them from your account. Anonymous analytics data is aggregated and not tied to individuals.