LUGO

Privacy Policy

Last updated: June 2026

1. Who we are

Lugo is a travel companion application that helps you plan journeys and stay informed about flight status. We are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR).

2. Data we collect

2.1 Data collected from all visitors (anonymous)

  • Chat messages — When you interact with the Lugo chat assistant, we process your messages to generate travel plans and answer questions.
  • Trip details — Flight numbers, dates, destinations, and travel preferences you share during planning.
  • Location data — If you grant permission, we use your device location to provide relevant travel information (e.g., nearby airports, distance to destination).

2.2 Data collected from signed-in users (identified)

  • Email address — Collected when you sign in via magic link. Used to identify your account and send travel-related notifications.
  • Trip history — Your saved trip plans and associated flight tracking data.
  • Chat history — Previous conversations are linked to your account so you can continue where you left off.

3. How we use your data

We process your data for the following purposes:

  • Service delivery — To generate travel plans, track flights, and provide real-time status updates.
  • Notifications — To send you flight status alerts, gate changes, and delay notifications (when you have an active trip).
  • Account management — To maintain your trip history and preferences across sessions.
  • Service improvement — To understand usage patterns and improve the Lugo experience. We do not use your data for advertising or profiling.

4. Third-party data sharing

We share data with the following third-party services solely to operate the Lugo service:

  • Supabase — Database and authentication provider. Your account data, trip plans, and chat history are stored on Supabase infrastructure hosted in the EU.
  • AeroDataBox (via RapidAPI) — Flight status and schedule data. We send flight numbers to retrieve real-time status information. No personal data is shared with AeroDataBox.
  • Google Maps Platform — Geocoding and routing services. Destination addresses are processed to generate maps and directions. No personal identifiers are shared.
  • Nominatim (OpenStreetMap) — Geocoding fallback. Location queries are processed anonymously.

5. Data retention

  • Anonymous sessions — Chat data from anonymous sessions is retained for up to 30 days, then automatically deleted.
  • Account data — For signed-in users, trip plans and chat history are retained until you delete your account or request erasure.
  • Flight status snapshots — Operational flight data is retained for up to 90 days for service reliability purposes.

6. Your rights under GDPR

Under Articles 15–22 of the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15) — You can request a copy of all personal data we hold about you.
  • Right to rectification (Art. 16) — You can request correction of inaccurate personal data.
  • Right to erasure (Art. 17) — You can request deletion of your account and all associated data at any time. This can be done directly from your account menu or by contacting us.
  • Right to restriction (Art. 18) — You can request that we limit the processing of your personal data.
  • Right to data portability (Art. 20) — You can request your data in a structured, commonly used, machine-readable format.
  • Right to object (Art. 21) — You can object to the processing of your personal data.
  • Right regarding automated decisions (Art. 22) — Lugo does not make decisions with legal or similarly significant effects based solely on automated processing.

7. Legal basis for processing

We process your data based on:

  • Contract performance (Art. 6(1)(b)) — Processing necessary to provide the Lugo service you requested.
  • Legitimate interest (Art. 6(1)(f)) — Improving our service and ensuring security.
  • Consent (Art. 6(1)(a)) — For location access and email notifications. You can withdraw consent at any time.

8. Contact

To exercise your rights or for any privacy-related questions, contact us at privacy@lugo.travel.

You also have the right to lodge a complaint with a supervisory authority in the EU member state of your residence.

9. Data sources

For information about the data sources Lugo uses for flight tracking and mapping, see our Data Sources page.