Privacy Policy

When you create an account: your name and email address.

When you use Flokk: the links, places, and content you save; your family profile details (traveler ages, interests, dietary preferences, travel style); trip itineraries and activity notes you create; ratings and reviews you write; and basic usage data (features used, pages visited).

When you use our email import feature: if you forward booking confirmation emails to your Flokk trip address, we process the content of those emails to extract travel details (destinations, dates, accommodation, transport) and file them into your trip. Email content is processed automatically and stored as structured trip data. We do not read your emails manually.

We use your information to operate and improve Flokk, to personalise your trip recommendations and suggestions, to send transactional emails related to your account and trips, and to respond to support requests.

We use automated processing, including AI-assisted analysis, to extract structured data from forwarded emails and to generate personalised trip recommendations based on your family profile and travel history. You can disable AI recommendations at any time in your account settings.

We do not use your data for advertising. We do not build advertising profiles.

We process your data on the following legal bases under GDPR and UK GDPR:

• Contract performance: to provide the Flokk service you have signed up for
• Legitimate interests: to improve the product, detect fraud, and ensure security
• Consent: for optional features such as sharing your trip publicly on the Discover page

We share data only with service providers necessary to operate Flokk. These include:

• Authentication and account management providers
• Cloud database and infrastructure providers (servers located in the United States)
• Email delivery providers (for transactional and lifecycle emails)
• Email processing providers (for inbound email parsing)
• Mapping and location data providers (for map display and geocoding)
• AI processing providers (for recommendation and extraction features)
• Payment processors (if and when paid features are activated; we never see your card details)

All providers are contractually required to process your data only for the purposes we specify. We do not sell your data. We do not share it with data brokers or marketing platforms.

Cross-border transfers: Flokk is operated from Japan. Our infrastructure providers are based in the United States. Data transfers to the US are conducted under standard contractual clauses or equivalent safeguards as required by applicable law.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (right to erasure)
• Export your data in a portable format
• Restrict or object to certain types of processing
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email privacy@flokktravel.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.