Privacy
last updated 11 July 2026
The short version
kotano is a trip planner for a small group of people who already know each other. It holds what your trip needs and nothing else. It is not advertising-funded, and your trip data is never sold or shared with anyone outside your trip.
What kotano stores
Your account: name, email address, and (only if you link it yourself) your Telegram user ID and username.
Your trips: the trip name and dates, the places you collect, the day plan, expenses and who paid, tasks and packing lists, and any notes you write. Everyone in a trip can see that trip’s contents. Nobody outside it can, and that is enforced by the database itself, not just the app.
Emergency cards are the exception: the medical and next-of-kin details on your emergency card are visible to you alone. No other member of your trip can read them, including the trip owner. This is a database rule, not a UI setting.
What gets sent to an AI provider
When you paste a link, kotano fetches that page and sends its text to an AI model to work out which place it describes. When you scan a receipt, the photo is sent to an AI model to read the total and the line items.
The model is run by OpenRouter, or by a self-hosted gateway if the trip is configured to use one. Receipt photos are processed in flight and are never stored by kotano: only the expense you confirm is saved.
Telegram (Kokotano chat)
If a trip owner links a Telegram group chat, the Kokotano chat bot reads messages in that chat so it can pick up links you paste and act on commands like /today.
Ordinary conversation is only analysed for preferences (“we’d rather not do another temple”) when the trip owner has explicitly turned that on in the trip’s bot settings. It is off unless someone chooses it.
Who else touches your data
Supabase hosts the database and handles sign-in. Vercel serves the site. Emailit sends invite and account emails. Sentry, if enabled, receives crash reports. Maps and place photos are fetched from the sites the places came from and from OpenStreetMap.
Deleting your data
Email terence@shaw.com.sg and ask. Your account and everything belonging to it will be deleted. Deleting a trip you own deletes the trip and everything in it for everyone.