গোপনীয়তা নীতি

Last updated 12 June 2026

This policy explains what Jifuti collects when you use jifuti.com, why, and the choices you have. We aim to collect only what we need to run the booking service well.

1. Information we collect

• Account details — your name and email when you sign up or sign in.
• Booking details — the guest names, dates, number of guests, and any special requests you enter for a booking.
• Payment status — for card bookings we record whether a payment succeeded and a reference, but not your card number — card data is handled entirely by our payment provider (Bank of Maldives).
• Messages and reviews — what you send to a guesthouse, to our team, or post as a review.
• Trip-planning inputs — what you tell the AI planner so it can suggest an itinerary.
• Usage and device data — basic analytics, your IP address, and cookies, to keep the site working, secure, and improving.

2. How we use it

• to take and manage your bookings and communicate with you about them;
• to pass the necessary details to the guesthouse you book;
• to process card payments and prevent fraud;
• to provide trip planning, reviews, and support;
• to improve and secure the Service;
• to meet legal and tax obligations.

3. Legal bases (for EU/UK visitors)

Where data-protection law (such as the GDPR) applies, we rely on: performing our contract with you (to take your booking); our legitimate interests (to run, secure, and improve the Service); your consent (for non-essential cookies); and legal obligation (for records we must keep).

4. Who we share it with

We don't sell your personal data. We share it only as needed to run the service:

• The guesthouse you book — the details it needs to host you.
• Service providers who process data for us — our payment provider (Bank of Maldives), hosting and database (Supabase, Vercel), email delivery (Resend), AI trip planning (Anthropic), maps (Mapbox), and product analytics / error monitoring (PostHog, Sentry).
• Authorities — where we're legally required to disclose information.

5. Cookies

We use essential cookies to make the site work and analytics cookies to understand usage. You can manage non-essential cookies via the consent banner. See the relevant section above for who our analytics providers are.

6. International transfers

Some of our providers operate outside the Maldives (including in the EU and the US), so your data may be processed in those regions. We choose reputable providers and rely on appropriate safeguards where required.

7. How long we keep it

We keep your data for as long as your account is active and as needed to provide the service, then for as long as we must for legal, tax, and accounting reasons. When it's no longer needed, we delete or anonymise it.

8. Your rights and choices

You can access and update your details in your account, and you can:

• Download your data — a copy of your profile, bookings, and saved itineraries, from your account page.
• Delete your account — request deletion from your account page.
• Object, correct, or restrict — contact us about any other data-protection request.

To exercise a right or ask a question, email hello@jifuti.com.

9. Security

We protect your data with measures including encrypted connections, access controls, and row-level security on our database, and we keep card data out of our systems entirely. No system is perfectly secure, but we take reasonable steps to safeguard your information.

10. Children

The Service is intended for adults (18+). We don't knowingly collect data from children. If you believe a child has provided us data, contact us and we'll remove it.

11. Changes and contact

We may update this policy; the "last updated" date above shows when. For any privacy question or request, email hello@jifuti.com.