Skip to content
Tabiji

AI-drafted starter — review with attorney before launching commercially. This document is generated by the Startup Builder's Legal agent. It is a baseline starter, not legal advice. Replace this banner only after attorney review.

Privacy Policy — Tabiji

Effective date: 2026-08-29 Operator: Tabiji (operator name TBD — set before launch) Contact for privacy: privacy@japan-vacation-planner.example.com (set contact email before launch)

1. Information we collect

Tabiji is a local-first application. The Service is designed to store your data in your browser, not on our servers.

| Data | Where it's stored | Why | Retention | | --- | --- | --- | --- | | Itinerary data (trip name, dates, destinations, notes) | Your browser (LocalStorage, IndexedDB) | Provide itinerary building functionality | Until you clear browser data or export/delete | | Budget/expense data | Your browser (LocalStorage, IndexedDB) | Provide budget tracking functionality | Until you clear browser data or export/delete | | Saved destinations | Your browser (LocalStorage, IndexedDB) | Provide destination discovery and saving | Until you clear browser data or export/delete | | Beta banner dismissal | Your browser (LocalStorage) | Remember your preference across sessions | Session-based |

Reference and route data: The Service loads versioned curated content, map tiles from OpenFreeMap, and railway reference data from the MLIT-derived ArcGIS service. Map panning/zooming sends the displayed viewport to the railway service; station search sends the text you enter. These sources do not receive your saved trip, budget, notes, or exported files, and the Service does not use automatic routing.

Lawful basis (GDPR): Since personal travel-planning data is stored locally in your browser and not transmitted to our servers in the MVP, processing by us is minimal. Any later hosted analytics, routing, or sync feature requires this policy and its lawful basis to be reviewed before release.

2. How we use your information

  • To provide the itinerary building, destination discovery, budget tracking, and map features.
  • To load curated reference data and display locally calculated route options.
  • To record aggregate affiliate-offer click counts on your device.

3. How we share your information

We do not sell or share your personal data with third parties because your itinerary and budget data never leaves your browser.

External services and sources:

| Processor | Purpose | Country | Privacy policy | | --- | --- | --- | --- | | OpenFreeMap / OpenMapTiles / OpenStreetMap | Map style, tiles, sprites, and glyphs | Hosted service; see provider policy | https://openfreemap.org/privacy/ | | Esri Japan ArcGIS service using MLIT National Land Numerical Information railway data | Railway station search and viewport reference data | Japan / provider infrastructure | https://www.esri.com/en-us/privacy/privacy-statements | | Booking partner selected by you | Complete a booking outside the app | Varies by partner | Shown on the partner site |

Opening an affiliate link tells that partner your normal browser/request information and any tracking identifier embedded in the offer URL, but the MVP must not append personal itinerary or budget data. The map and railway providers receive normal network metadata needed to answer their requests; review their policies before use.

4. Cookies and tracking

We do not use non-essential cookies or third-party tracking.

The Service uses LocalStorage and IndexedDB to store your itinerary, route selections, budget, preferences, and local affiliate-click totals in your browser. These are not cookies and are not transmitted to our servers by the MVP.

If we add analytics in the future, we will seek your consent first and update this policy.

5. Your rights

Because your data is stored locally in your browser, you have direct control over it:

  • Access: Your data is visible in the app. You can export it via PDF or Excel at any time.
  • Delete: Clear your browser's LocalStorage and IndexedDB, or use the app's data clearing feature (if implemented) to delete your data.
  • Portability: Export your itinerary (PDF) and budget (Excel) at any time.

For any data we do process server-side (e.g., if you contact us), you have the right to access, correct, delete, and port that data. Contact privacy@japan-vacation-planner.example.com. We respond within 30 days.

6. Data security

Since your data is stored locally in your browser:

  • You control your data. We cannot access or recover it if you clear your browser.
  • Export regularly. Use the PDF and Excel export features to back up your trip plans.
  • Browser security. Your data is protected by your browser's security model.

For any future hosted app or routing infrastructure, HTTPS and appropriate provider controls are required before public launch.

7. International data transfers

Since your personal itinerary data is stored locally and not transmitted to our servers, international data transfer concerns are minimal.

If you access the Service from the EU, UK, or Japan, your personal trip data remains in your browser. Map and railway reference requests may be processed by their providers outside your country; see their linked policies above. Any future analytics, sync, routing, or new map provider requires this policy to be reviewed before release.

If you have questions about data residency, contact privacy@japan-vacation-planner.example.com.

8. Children's privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us to delete it.

9. Japan APPI disclosure (Act on the Protection of Personal Information)

Under Japan's APPI:

  • Purpose of utilization: We provide a travel planning tool. Your local data is used only for this purpose.
  • Third-party transfer: We do not transfer personal itinerary data to an application server in the MVP. Normal network metadata may be processed by the eventual host, map-source provider, or a booking partner you choose; those providers must be disclosed before launch.
  • Anonymously processed information: Not applicable — we do not create anonymized datasets from user data.

10. Changes to this policy

We will notify you of material changes via a notice in the Service. Continued use after notice constitutes acceptance.

11. Contact

Privacy questions: privacy@japan-vacation-planner.example.com (update with actual contact email before launch)