Privacy & security

Zavelo is a self-hosted family travel app. Your household data (trips, schedules, family profiles, loyalty accounts, and AI-generated ideas) is stored in a local SQLite database on your Mac mini — not on a shared cloud database.

Who can access your data

  • Only signed-in users linked to your household can read or change your data.
  • Session cookies are HttpOnly and never exposed to JavaScript.
  • Passwords are hashed with scrypt; we never store plain-text passwords.

AI / LLM

Trip ideas are generated by Google Gemini using a redacted planning packet — not a raw database export. Prompts are sent to Google's API; we do not use local Ollama or send data to OpenAI or Anthropic unless you explicitly configure those providers.

Your rights

You can export or delete household data from Account settings. Contact your household owner to remove your login.

Back to account