Privacy Policy
Tellvara — tellvara.com
Last updated: 27 February 2026
Tellvara is built to do one thing: help you plan a trip, quickly. To do that, we collect as little data as possible. We do not sell your personal data to any third party, ever. This page explains exactly what we collect, why we collect it, who can access it, and what you can do about it. No legal maze. Just the facts.
Who we are
Tellvara is operated by Jeffrey Koolbergen, based in the Netherlands.
If you have any questions about this policy or want to exercise your rights, contact us at hello@tellvara.com.
What we collect and why
Email address — waitlist signup If you join the Tellvara waitlist, we collect your email address. We use it to notify you when Tellvara's upcoming booking feature becomes available — the ability to book flights, hotels, and activities directly through the app. We do not use it for any other purpose.
You can withdraw your consent and be removed from the waitlist at any time by emailing hello@tellvara.com or by clicking the unsubscribe link in any email we send you.
Legal basis: Consent.
Email address and hashed password — account registration If you create a Tellvara account, we store your email address and a hashed (non-reversible) version of your password. We use these to authenticate you when you sign in. Your password is never stored in readable form.
Legal basis: Contract. We need this data to provide the service you have signed up for.
Anonymous session ID — quota tracking If you use Tellvara without creating an account, we generate an anonymous session ID (a random identifier, not linked to your name, device, or identity). It is used only to track how many plans you have generated and how many plan modifications you have made against the free quota and is never sent to any third party.
On mobile, this ID is stored in your device's secure storage (outside the browser). On web, it is stored in your browser's local storage — this is not a tracking cookie and is not shared with any third party or used for any purpose other than quota tracking.
Legal basis: Legitimate interest. Quota tracking is necessary to operate the free tier fairly.
What we process but do not store on our servers
Your travel requests and chat messages When you type a destination or travel request into Tellvara — including in the conversational chat or the in-app support chat — that text is sent to Anthropic's Claude API to generate your travel plan or response. We do not store these messages on our servers. However, the app stores your original trip message locally on your device as part of your saved trip, so that Tellvara can compare plans and generate new versions based on your original request. This message is deleted from your device automatically when you delete the associated saved trip.
Anthropic processes this data in accordance with their Terms of Service and Privacy Policy, available at anthropic.com/privacy.
Your generated travel plans Travel plans generated by Tellvara are currently stored on your device only — we do not store them on our servers. If this changes in the future (for example, to enable cross-device plan access), we will update this policy and notify registered users by email before the change takes effect.
Password reset codes When you request a password reset, a temporary 6-digit code is generated and stored on our servers for 15 minutes. It is deleted automatically once used or once it expires. Only a hashed (non-reversible) version of the code is stored — never the code itself.
Third-party services
Tellvara uses a small number of third-party services to operate. Each one is listed here with what data it handles.
Anthropic Anthropic processes your travel requests, chat messages, and support chat messages via the Claude API. These are not stored by us after a response is returned. See Anthropic's privacy policy at anthropic.com/privacy.
Resend Resend handles two types of email on behalf of Tellvara: waitlist notification emails (your email address is stored in Resend's audience for this purpose) and transactional password reset emails (your email address is passed to Resend to deliver the reset code, but not stored as an audience contact). Resend is a US-based provider; EU data transfers are covered by Standard Contractual Clauses.
Railway Our server infrastructure runs on Railway, a US-based cloud provider. Account data (email address and hashed password) is stored on Railway's servers. EU data transfers are covered by Standard Contractual Clauses.
Google Places When generating your travel plan, our server queries the Google Places API to enrich results with photos, ratings, and place information. No name, email, or account details are shared with Google as part of this process.
Cloudflare Cloudflare provides our content delivery network (CDN) and web analytics. As a CDN, Cloudflare processes network traffic including IP addresses in transit — this is standard for any CDN. Cloudflare Web Analytics does not track individual users, uses no cookies, and collects no personal data — it provides aggregate traffic information only.
Cookies and tracking
Tellvara does not use cookies.
Cloudflare Web Analytics, which we use to understand traffic to tellvara.com, does not track individual users, uses no cookies, no tracking pixels, and no fingerprinting.
Data storage and security
Account data (email address and hashed password) is stored on Railway's servers with access controls in place. Waitlist email addresses are stored with Resend, a US-based provider; EU transfers are covered by Standard Contractual Clauses. All passwords are hashed before storage — they are never readable by us or anyone else. All data in transit is encrypted via HTTPS.
How long we keep your data
Waitlist email address — kept until Tellvara's booking feature launches and you have been notified, after which it is deleted within 30 days. You can request removal at any time by emailing hello@tellvara.com or clicking the unsubscribe link in any email we send.
Account data (email + hashed password) — kept for as long as your account is active. If you delete your account, all associated data is deleted from our systems within 30 days.
Anonymous session ID — stored on your device only. It is removed when you clear your app data or uninstall the app. We hold no persistent copy on our servers.
Travel requests and chat messages — not stored on our servers. Your original trip message is stored on your device as part of your saved trip and deleted when you delete that trip.
Generated travel plans — stored on your device only. We hold no server-side copy.
Password reset codes — stored on our servers for 15 minutes, then deleted automatically.
Your rights
European Union and EEA (GDPR)
If you are based in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR).
Right of access — You can request a copy of the personal data we hold about you.
Right to erasure — You can ask us to delete your data. To delete your account and all associated data, email hello@tellvara.com. We will complete your request within 30 days.
Right to data portability — You can request your data in a structured, machine-readable format.
Right to withdraw consent — Where processing is based on consent (waitlist signup), you can withdraw that consent at any time by emailing hello@tellvara.com or by clicking the unsubscribe link in any email we send.
Right to object — You can object to processing carried out under legitimate interests.
Right to lodge a complaint — If you believe we are handling your data unlawfully, you have the right to lodge a complaint with your national data protection authority. A full list of EU data protection authorities is available at edpb.europa.eu. In the UK, contact the ICO at ico.org.uk.
To exercise any of these rights, email hello@tellvara.com. We will respond within 30 days.
California (CCPA)
If you are a California resident, you have the right to know what personal data we collect, to request its deletion, and to opt out of the sale of your personal data. We do not sell personal data. To exercise any of these rights, email hello@tellvara.com.
Minimum age
Tellvara is intended for users who are 18 years of age or older. We do not knowingly collect data from anyone under 18. If you believe a person under 18 has provided us with personal data, contact us at hello@tellvara.com and we will delete it promptly.
Changes to this policy
We may update this policy from time to time. For minor changes (such as clarifications or updates to third-party service descriptions), we will update the "Last updated" date at the top of this page. For material changes — changes that affect what data we collect, how we use it, or your rights — we will notify registered users by email before the change takes effect, giving you a reasonable period to review the updated policy.
Contact
Questions about this policy, or requests to exercise your rights:
Email: hello@tellvara.com
Data controller: Jeffrey Koolbergen, Netherlands
Tellvara — tellvara.com