TO DO Cabo ← Back home

Privacy Policy

Effective September 6, 2026

Short version: we collect what it takes to run your bookings and recommendations, we never see your card details, we don't run ads, we don't sell your data, and we don't track you across other apps or websites. The rest of this page is the long version.

01 Information we collect

We collect information in three ways: what you give us directly, what a booking requires, and what your device tells us while you're using a specific feature.

CategoryWhat it isWhy we have it
Account infoEmail address, and optionally your name, preferred language, and travel interestsTo create and run your account
Booking detailsThe name, email, and phone number you enter for a specific reservation — can differ from your account's ownSo the business you're booking can identify and reach you
LocationYour device's precise location, read on-device onlyTo sort places by distance and center the map on you — this is never sent to or stored on our servers
Reviews & photosStar rating, review text, and any photo you choose to attachTo publish your review for other travelers
Push notification tokenA device identifier assigned by Apple or GoogleTo deliver the notifications you've opted into
AI concierge messagesWhat you type to our in-app travel conciergeTo generate a real answer to your question

Payment information is the one thing we deliberately never collect. Card numbers go straight to Stripe, our payment processor, through their own secure checkout page — they never reach our servers at all. Stripe has its own privacy policy governing that data.

02 How we use it

03 Who we share it with

Only the specific service providers each piece of the app actually depends on, and only for that purpose:

ProviderWhat they handle
SupabaseDatabase, authentication, and file storage
StripePayment processing — the only party that ever sees your card details
AnthropicPowers the AI concierge — sees the messages you send it
MapboxMap tiles shown on the Map tab
ResendDelivers transactional emails (like booking confirmations)
Apple / Google / ExpoDeliver push notifications to your device

We do not sell personal information, we do not share it with advertisers or data brokers, and we do not use it for targeted advertising — we don't run ads at all.

04 How long we keep it

We keep your account data for as long as your account is active. If you delete your account, we permanently delete your favorites, reviews, notifications, and AI conversation history right away.

Bookings, payments, and refunds are the one exception: we keep those records — with your name, email, and phone number removed — even after account deletion, the same way a bank keeps your old statements after you close an account. This is for accounting, dispute handling, and legal recordkeeping, not to keep tabs on you.

05 Your rights and choices

06 Children

TO DO Cabo isn't directed at children, and we don't knowingly collect information from anyone under 13 (or 16, where local law sets a higher age). If you believe a child has given us information, contact us and we'll remove it.

07 Security

We use industry-standard safeguards — encryption in transit, access controls on who can reach your data — but no method of transmission or storage is ever 100% secure, and we can't guarantee absolute security.

08 Where data is processed

TO DO Cabo serves Los Cabos, Baja California Sur, Mexico. Our service providers may process and store data in the United States, Canada, or elsewhere — by using the app, you understand your information may cross borders to reach them.

09 Changes to this policy

If we make a material change, we'll update the effective date above and let you know inside the app.

10 Contact us

Questions about this policy or your data
TODO CABO — a corporation registered in Ontario, Canada