Last updated: 2026-05-07
Andante is a travel companion. To help you plan, replan, and remember a trip, we hold a small amount of data. This page tells you exactly what, why, and for how long — in plain language. If you want the legal version too, write to us and we'll send it.
What we collect
- Account — email and display name from your sign-in (Apple, Google, or email/password). Nothing else by default.
- Trips — the destinations, dates, items, and notes you create. The app needs these to plan and replan.
- Preferences — the framework you set during onboarding (pace, interests, dietary, mobility). Used only to shape your itinerary.
- Location pings, opt-in only — while a trip is active, the app can record significant location changes (~5% battery/day) so it knows where you actually went and adapts the next day. Off by default. Toggleable in Profile. Pings purge automatically 90 days after the trip ends.
- Photo metadata, only if you pin photos to a recap — we read EXIF (timestamp + coordinates) on-device to suggest which photos line up with which moment. The matching runs locally; we never read your photo library.
- Forwarded reservations, opt-in — if you forward a hotel or restaurant confirmation to your unique Andante address, we extract the dates and venue and discard the rest of the email.
- Waitlist email — if you submit your address through the form on this site, we store the email, the form source, your IP, and the timestamp. Used to email you once when the iPhone app opens for testing.
What we don't collect
- Your photo library, contacts, calendar, or microphone.
- Background location outside an active trip.
- Browsing history, advertising IDs, or third-party cookies on this site.
- Anything we don't need to run the feature in front of you.
AI processing
The trip plan, replan, and recap are generated by the Andante AI engine — our orchestration of large language models that we run through enterprise inference contracts on secure cloud infrastructure. When you use one of these features, the relevant trip context (your destination, dates, preferences, and items) is processed by the engine and a result comes back. Your email, payment info, and location pings never leave our backend. Our inference partners are contractually barred from training general-purpose models on your data. We cache results keyed by an anonymized hash of the request so similar plans can reuse work without re-processing your details.
How long we keep it
- Location pings — 90 days after the trip's end date, then deleted.
- Trip data — kept while you have an account. If you cancel a paid subscription, your trips become read-only but stay where they are; we never delete a memory you might want back. You can ask us to delete everything (see below).
- Waitlist email — until you ask us to remove it, or 12 months after we open the app, whichever comes first.
Sharing
We do not sell your data. We do not share it with advertisers. The only outbound paths are: (a) trip-context to the Andante AI engine as described above, (b) the secure cloud infrastructure that runs our backend and the Apple Push Notification service that delivers iOS notifications, and (c) any share link you generate, which is unguessable and revocable.
Where it lives
Andante is a Chilean company. Our servers run on enterprise cloud infrastructure with data centers that may include US transit. If you're in the EU or UK, GDPR applies: you can ask for export, correction, deletion, or restriction of processing at any time. If you're in California, CCPA gives you the same rights. Either way, just write.
Your rights
- Export — download a copy of your account and trip data.
- Delete — remove your account and all linked trips. We hold the deletion for 30 days in case you change your mind, then it's gone.
- Correct — fix anything that's wrong.
- Withdraw consent — turn off location pings, email forwarding, or the AI features at any time in the app.
Children
Andante is not directed at children under 13. We don't knowingly collect their data. If we learn we have, we delete it.
Changes
If we change this policy, we'll update the date at the top and email registered users when the change is material.
Contact
Privacy questions, deletion requests, or anything in between: hello@andante-ai.com. We answer within five business days.