Privacy Policy
Last updated: 7 October 2026
We'd rather tell you exactly what happens to your information than bury it in legalese. This page explains what KnoWhere collects, why, who else touches it, and how you can get it changed or deleted.
Who we are
KnoWhere (travelknowhere.com) is a Dubai travel and local-intelligence service: guides, events, saved places, itineraries and an AI Concierge on the website and WhatsApp.
KnoWhere is a Dubai city guide operated from Dubai, United Arab Emirates. For any privacy question or request, email laura@travelknowhere.com.
What information we collect
Browsing without an account
When you first visit, your browser gets a random visitor ID stored on your device. We use it to keep your saved places, trips and chats together without you having to sign up. Alongside it we record page views, time on site and basic device and referrer details.
Accounts and login
Residents, hosts, vendors, Insiders and our admin team sign in with an email address and password. Depending on the account type we also store a display name, business name, profile details, photos and listings you add yourself.
Saved items, Trip Journal, personal trips and "Your KnoWhere"
We store the places you save, itineraries you choose to save (including trip dates and any notes), event RSVPs, reviews you write, taste and dish logs, poll votes and reactions on shared trips. In the Trip Journal you can add text, voice notes and photos; these are stored so we can show them back to you and pull out the places and preferences they mention. Photos you upload may contain location data (for example, where the photo was taken) unless it is removed before uploading.
The Concierge (website)
Your messages, and recent conversation history, are sent to our servers and processed by an AI model to write a reply. We keep usage logs of requests and replies, along with preferences we infer (for example, who you're travelling with or what food you like) so future answers fit you better. You can ask us to delete these inferred preferences at any time. Your current chat is also kept in your browser so it survives a refresh. If you give us your name or email in the chat or a sign-up box, we store that too.
The Concierge (WhatsApp)
If you message us on WhatsApp, we receive your phone number, WhatsApp profile name and the messages you send. We store the conversation so the Concierge can remember context, and recent messages are processed by an AI model to write replies.
Forms
- Hosts: name, email, listing link, city, address and number of listings.
- Vendors and Insiders: account details, business or profile information, recommendations, tips and any photos or media you upload.
- Internships: student name, email, phone, school, grade, track preference, a short statement, and a parent or guardian's name, phone and email. These answers are sent to a Google Form, not stored in our own database. The form does not ask for CV uploads.
- Email sign-ups and trip plans: email address and the plan or preferences you asked about.
- Contact: our contact page links to email; we only have what you send us.
- Community submissions and events (such as tips, voices, Kunafa Face-Off votes and sign-ups): whatever name, email and content you choose to submit.
Links you share
If you paste an Instagram or TikTok link into Reel to Trip, we fetch that public page to build an itinerary.
How we use it
- To run the service: answer Concierge questions, build and save itineraries, show your saved places and journal.
- To personalise recommendations to your taste and who you're travelling with.
- To send trip reminder emails a few days before a saved trip, if you gave us your email.
- To review host, vendor and Insider applications and listings.
- To understand how the site is used, fix problems, catch abuse and check the Concierge isn't making things up.
- When you ask, to help with bookings: our Concierge may place a phone call to a restaurant on your behalf.
We do not sell your personal information.
Who we share it with
We only share what each service needs to do its job:
- Lovable — website hosting and visitor analytics (see Cookies and analytics).
- Lovable Cloud (built on Supabase) — database, file storage, login and server functions.
- Lovable AI Gateway — routes Concierge and other AI requests to AI model providers (such as Google Gemini) to generate replies and extract details from journal entries.
- Perplexity — live web search for things like current menus and opening details. We send search queries, not your identity.
- WATI and WhatsApp (Meta) — carry WhatsApp messages between you and the Concierge.
- Resend — sends trip reminder emails.
- Bland AI — places automated phone calls to venues when you ask the Concierge to. For a booking call we share the details needed for it, such as your name, party size, date and time.
- Google — Google Forms receives internship applications; Google Places is used to verify venue details (no personal data is sent).
- Firecrawl — fetches public web pages, including reel links you paste.
- Venues and hosts — if you choose to book through a WhatsApp link, you contact that venue directly.
We may also share information if the law requires it.
Where data is stored and international transfers. We use cloud service providers to store and process data. These providers may be located outside the UAE, including in the European Union and the United States, so your data may be processed outside the UAE by the providers named above. We choose providers that apply appropriate security measures.
Cookies and analytics
We don't use advertising cookies or ad-network tracking pixels. Here's everything that does run:
Our hosting provider's visitor analytics
Every page loads a small script (/~flock.js) added automatically by our website host, Lovable, to count visits. When you open a page, it sends:
- the page address and path, and the page you came from (referrer);
- your browser and device type (user agent) and browser language;
- an approximate country, worked out from your device's time-zone setting (not GPS or a precise location);
- page-speed measurements, such as how quickly the page loaded;
- a random visit ID.
That visit ID is kept in a first-party cookie called session-id that expires after 30 minutes without activity. Before sending, the script blanks out any fields that look like emails, phone numbers, names, passwords or payment details. The data goes first to our own site and is then passed to Lovable's analytics service. This data is processed by Lovable, our hosting provider, and its analytics service providers, under Lovable's privacy policy. It's used only for overall visitor numbers, not for advertising. Automated browsers are not counted.
Our own analytics and browser storage
We also use your browser's local storage for:
- your anonymous visitor ID, which links your saves, chats and our own page-view records;
- your current Concierge conversation and trip plan;
- small preferences such as your first name, a sign-up email, and whether you've dismissed a tip;
- keeping you logged in if you have an account.
Our own analytics record page views, sessions and time spent, tied to that visitor ID and stored in our database. Clearing your browser's cookies and storage removes these IDs from your device.
How long we keep data
We keep personal data only as long as needed for the purposes described in this policy. Account data is kept while your account is active. You can ask us to delete your account, saved items, Trip Journal entries or Concierge conversations at any time by emailing laura@travelknowhere.com, and we will delete them unless we must keep them by law.
Your rights
You can ask us to:
- Access the information we hold about you;
- Correct anything that's wrong;
- Delete your information, including saved trips and conversations.
Email laura@travelknowhere.com from the address on your account, or include your WhatsApp number if it's about a WhatsApp chat.
We will respond to privacy requests within 30 days. We handle personal data in line with applicable data protection laws, including the UAE Personal Data Protection Law and, where they apply to visitors from those regions, the EU and UK GDPR.
Data security
Data travels over encrypted connections. Our database uses access rules so visitors can only reach their own records, private files sit in protected storage, and admin tools require a signed-in admin account. No system is perfectly secure, but we work to keep yours safe and only give access to people who need it.
Children
KnoWhere is intended for adults. Our internship programme may accept applicants under 18; their applications include a parent or guardian's contact details, which we use only to process the application and contact the parent or guardian about it.
Changes to this policy
If we change how we handle your information, we'll update this page and the "Last updated" date at the top.
Contact
Anything at all about privacy: laura@travelknowhere.com, or use our contact page.