Routebook by Kington is a community-led road trip platform. Core features are free to use; optional paid plans are offered under the name Routebook Pro. The data controller responsible for your personal data is Kington Adventures Limited, operating the platform at routebook.xyz. We are a company registered in England and Wales (company number 17275470) with our registered address at 29B Falcon Square, Eastleigh, SO50 9JF, United Kingdom. This policy explains what personal data we handle, why we handle it, and your rights.
What data we collect
- Account details — your email address, chosen display name and username when you sign up.
- Profile details — any optional profile information you choose to add, such as a bio or avatar image.
- Routes, stops and highlights — road trips and associated stop information, highlights and route metadata that you submit to the platform.
- Saved routes — routes you save to your account.
- Comments and ratings — reviews and ratings you leave on routes.
- Uploaded media — photos, videos and avatar images you upload.
- Travel preferences and addresses (Routebook Pro) — trip-planning preferences you set (such as pace, comfort level, interests, transport, food and accessibility preferences) and, if you choose to add one, a saved home or start address used to suggest route start and end points.
- Trip plans and itineraries (Routebook Pro) — the planning briefs you create, the AI-generated draft route plans, itineraries and budget estimates produced from them, and any plans you save or share via a private link.
- Subscription and payment records (Routebook Pro) — your plan type and status, and the customer, subscription and payment references returned by our payment processor, Stripe. We do not receive or store your full card details (see Third-party service providers below).
- Marketing preferences — whether you have opted in to receive occasional marketing emails, and a record of when you accepted the Terms of use and Privacy policy at sign-up.
- Moderation records — where content you have submitted has been reviewed, approved, rejected or reported, we keep a record for platform safety and audit purposes.
- Authentication data — session tokens managed by Supabase. Tokens are stored in HTTP-only cookies and are never exposed to client-side JavaScript.
Why we process your data
- Account functionality — to create and manage your account, authenticate you, and allow you to submit and edit your own content.
- Route saving and sharing — to display your submitted routes in the public catalogue and to save routes to your personal list.
- Trip planning (Routebook Pro) — to generate, save and share draft route plans and itineraries from the preferences and planning briefs you provide, and to apply your fair-use allowance for AI-assisted planning.
- Payments and subscriptions — to take payment for Routebook Pro, manage your subscription or route credit, and issue refunds where applicable.
- Marketing — where you have opted in, to send you occasional emails about new and featured routes and product updates. You can withdraw consent at any time.
- Community moderation — to review submitted content before publication, act on reports, and maintain a safe and accurate platform.
- Platform security — to detect abuse, protect accounts and keep the service running securely.
- Support and admin — to respond to enquiries, account deletion requests and other communications.
Lawful basis (UK GDPR)
We process your data on the following bases:
- Contract — processing necessary to provide the account and platform services you have signed up for (e.g. authentication, displaying your routes, saving favourites, generating and saving Pro trip plans, and taking payment for Routebook Pro).
- Consent — marketing emails are sent only where you have opted in. You can withdraw consent at any time from Profile → Settings or by using the unsubscribe link in any marketing email, without affecting your account.
- Legitimate interests — platform security, moderation, and preventing abuse, where these do not override your rights.
- Legal obligation — where we are required by law to retain or disclose data.
Analytics and cookies
We use Vercel Web Analytics to understand aggregate traffic to the platform — for example, how many people visit a page and which routes are popular. Vercel Web Analytics is privacy-friendly and cookieless: it does not set tracking cookies, does not store an identifier on your device, and does not track you across other websites. The data is aggregated and is not used to build an advertising profile of you. See vercel.com/docs/analytics/privacy-policy for details.
The only cookies we set are the strictly-necessary session cookies used for authentication. These keep you signed in and do not track you across other sites. We do not set any advertising or cross-site tracking cookies. If we introduce additional analytics or tracking in future we will update this policy and, where required by law, ask for your consent first.
Public visibility of your content
Submitted routes, stops, highlights, comments and ratings are publicly visible on the platform once approved. Your display name is shown alongside content you create. Your email address is never shown publicly.
AI-assisted trip planning (Routebook Pro)
Routebook Pro uses AI to generate draft route plans from the planning brief you build. To do this, the contents of your brief (such as your chosen start and end points, dates, interests and preferences) are sent to our AI provider, Anthropic, which returns a suggested itinerary. We ask that briefs are treated as trip data and we do not deliberately send special-category personal data to the AI provider — please avoid entering sensitive personal information in free-text fields. Draft plans are estimates and suggestions only; see the Terms of use for the limits that apply. We also keep a record of AI usage (such as token counts and timestamps) to apply fair-use limits and monitor costs.
Third-party service providers
- Supabase — we use Supabase for authentication, database storage and file storage. Supabase acts as a data processor on our behalf. See supabase.com/privacy for details of how Supabase handles data.
- Vercel — our hosting provider, which also provides the cookieless Web Analytics described above. See vercel.com/legal/privacy-policy.
- Stripe — payments for Routebook Pro are processed securely by Stripe. Stripe collects and processes your payment details directly; we never receive or store your full card details. See stripe.com/privacy.
- Anthropic — powers the AI trip-planning feature described above. Planning-brief contents are sent to Anthropic to generate draft itineraries. See anthropic.com/legal/privacy.
- Mapbox (optional) — if interactive maps are enabled, map tile and geocoding requests pass through Mapbox servers. See mapbox.com/legal/privacy.
Some of these providers may process data outside the UK. Where that happens, we rely on appropriate safeguards (such as the providers’ standard contractual clauses) for the transfer. We do not sell or share your personal data with third parties for their own marketing purposes.
Data retention
We keep your personal data for as long as your account is active. When an account is deleted, personal account data is removed. However, community content you have contributed (routes, stops, highlights, comments) may remain on the platform in anonymised form where it has been incorporated into the routes of other users or forms part of the published catalogue, unless removal is specifically requested and practicable.
Where we have a legal obligation to keep certain records — for example, payment and transaction records for Routebook Pro required for tax and accounting — we retain those for as long as the law requires, even after an account is closed.
Your rights
Under UK GDPR you have the right to access, correct, export or erase your personal data, to object to or restrict certain processing, and to lodge a complaint with the ICO (ico.org.uk).
To exercise any of these rights, or to request account deletion, email us at support@routebook.xyz. We will respond within 30 days.
Contact
Questions about this policy or your data? Email us at support@routebook.xyz, or write to Kington Adventures Limited, 29B Falcon Square, Eastleigh, SO50 9JF, United Kingdom.
