Privacy policy

Who is responsible for your data

The data controller for Best Day Ever is RLD FASHION LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA. Questions, or a request to see or delete your data, go to tobymedinagoat@gmail.com.

What we collect and why

• Your email and password: when you create an account, so you can sign in and we can reach you about your account. Passwords are handled and hashed by our authentication provider (Supabase); we never store them in plain text.
• Saved gems and trips: the itineraries and places you build or save, so they're there when you come back. These may live in your browser (local storage) and, if you're signed in, in your account.
• Retreat applications: if you apply for a creators' retreat, we store the email and creator handle you give us together with your answers. That record is read by one person, is never published, never shared, and never added to any marketing list. Ask us and we'll delete it, including if your application isn't successful.
• Waitlist emails: if you join a waitlist, we keep your email so we can tell you when the feature launches.
• Shared places (“Share a gem”): if you submit a place, we store the place, its location, why you love it, and your email if you choose to give one, so we can review it and follow up. Nothing you submit is published with your name attached.
• Concierge messages: when you chat with our AI concierge, your messages are sent to our AI provider (OpenAI) to generate a reply. Don't share sensitive personal details in those chats.
• Basic usage and device data: standard information most sites collect to keep the app working, secure, and improving.

Who we share it with

We don't sell your personal data. We share it only with service providers who help us run Best Day Ever:

• Supabase: authentication and database (your account, saved trips, and gems).
• OpenAI: the AI provider that powers the concierge and trip generation. Your concierge messages and the place you type into Anywhere Mode are sent to them to generate replies. We never send them your name, email, or account details.
• Map providers: OpenStreetMap serves the map tiles, and the “open in maps” and “directions” links hand you to Google Maps under their own privacy terms. We send no booking partners anything, because there aren't any.
• Stripe: our payment provider, which processes subscriptions. Card details go straight to Stripe; we never see or store them.
• Resend: our email delivery provider — the emails the app sends you (like sign-in and account emails) go out through them.
• Vercel: our hosting provider. Like any host, standard server logs (including IP addresses) pass through their infrastructure to keep the app running and secure.

Cookies and local storage

We use cookies and your browser's local storage to keep you signed in, remember your trips and preferences, and keep the app working. Some of this is essential for the app to function. You can clear local storage and cookies in your browser at any time, though that may sign you out or remove locally saved trips.

How long we keep it

We keep your information for as long as you have an account or as needed to provide the service, and only as long as reasonably necessary after that (for example, to meet legal or accounting obligations). Locally saved trips stay in your browser until you clear them.

Your rights

You can ask to access, correct, or delete the personal data we hold about you. Email us at tobymedinagoat@gmail.com and we'll help. Depending on where you live, you may have additional rights under local privacy law.

Children

Best Day Ever isn't directed at children under 16, and we don't knowingly collect their personal data. If you believe a child has given us personal data, contact us and we'll remove it.

Changes to this policy

We may update this policy as the product grows. If we make a material change, we'll take reasonable steps to let you know.

Contact

Questions about your privacy? Email tobymedinagoat@gmail.com.