Plain English. Nothing sneaky.

What we collect

• · The trip prompt you type.
• · The itinerary RIKAR generates from it.
• · Your email, only if you sign up or join the waitlist.
• · If you subscribe: subscription status, tier, renewal date. No card details.
• · Basic, aggregate analytics (page views, button clicks). No cross-site tracking, no ad networks.

What we don't collect

• · Your inbox. Email import is opt-in and explicit.
• · Your location, unless you paste a city into the prompt.
• · Your contacts, calendar, browsing history, or device data.
• · Your card details. Stripe handles payment data — it never touches our servers.

What we never do

• · Sell your trip data.
• · Hand it to ad networks.
• · Train third-party AI models on your trips.
• · Claim live booking availability, live prices, or real-time award seat data. Costs we show are estimates. Always confirm before you book.

Where your data lives

Your trips and account data are stored on US-based infrastructure, encrypted at rest. You can export or delete them at any time.

Email

We send transactional email — sign-in codes, welcome notes, trip-saved confirmations. Mail sent to support@rikar.ai reaches a monitored inbox so a human can read it.

Booking-confirmation import (Atlas tier) is strictly opt-in. You forward a confirmation to your private RIKAR address; we attach it to your trip and don’t keep the raw email past 30 days. We will never read your inbox without your action.

Payments

Founder Pass ($9/month) is processed by a PCI-compliant payment provider. Card details never touch our servers.

Third-party providers

We use a small set of trusted third-party providers to run the service — for hosting, authentication, payments, email delivery, AI generation, maps, and error reporting. Each one only receives the minimum data it needs to do its job, and none of them are permitted to sell or repurpose your data. A current list is available on request at support@rikar.ai.

How long we keep things

We keep your trips and account data while your account is active. If you go inactive for 12 months, trips are deleted. If you ask us to delete your account, everything is wiped within 30 days.

Your rights

You can ask to see, correct, export, or delete the data we hold about you at any time. EU / UK / EEA and California residents have specific rights under GDPR and CCPA — including the right to object to processing and to opt out of any sale or sharing of personal data. We don’t sell or share it. Write to support@rikar.ai and we’ll respond within 30 days.

Age

RIKAR is for travelers aged 16 and over. We don’t knowingly collect data from anyone younger. If you believe a child has signed up, write to us and we’ll remove the account.

Contact

Questions, data export, deletion — write to support@rikar.ai. Replies within 72 hours.