Privacy Notice
Last updated: 22 September 2026
Who we are
Musteer is a group trip planning tool operated by Alexander James (sole trader) trading as Musteer, with a correspondence address at The Glas, Pontcanna, CF11 9PF (“we”, “us”, “our”). We are the data controller for personal data collected through the Musteer platform. Our contact email is musteer.app@gmail.com.
What data we collect and why
| Data | Who provides it | Purpose & legal basis |
|---|---|---|
| Email address | Organisers (sign-in) | Authentication: contractual necessity |
| Trip details (name, dates, destination) | Organisers | Core service: contractual necessity |
| Participant status (confirmed / paid) | Organisers | Core service: contractual necessity |
| Survey answers | Survey respondents | Providing survey results to organiser: legitimate interest of organiser; respondent consent obtained at point of submission |
| Respondent name (optional) | Survey respondents | Named survey visibility for organiser: respondent consent |
| Marketing opt-in flag | Survey respondents (optional) | Future marketing communications: consent |
| Anonymised analytics events | Automatic | Service improvement: legitimate interest; no PII stored in analytics events |
| Referral code | Organisers | Tracking referral programme participation: legitimate interest |
| Sign-up IP address | Automatic (sign-up) | Referral fraud prevention: legitimate interest; not used for any other purpose |
| Beta access code used | Organisers (beta programme) | Administering beta access: legitimate interest |
Survey respondents: what you should know
If you complete a Musteer survey, the organiser who created it can see your answers. The organiser is the data controller for the personal data you submit in that survey — Musteer processes it on their behalf. You are always shown a consent notice before submitting; the form cannot be submitted without your acceptance.
If you choose to include your name and opt in to marketing, we may store your name for the organiser to contact you about future trips. You can opt out at any time by emailing musteer.app@gmail.com with the subject line “Unsubscribe”, or clicking the unsubscribe link in any message we send you.
To request deletion of your survey data, email musteer.app@gmail.com with the subject line “Survey data deletion request” and details of the survey you completed. We will action your request within 30 days.
AI processing
Musteer uses the Anthropic Claude API to generate trip planning suggestions, summaries, and other content. When you use an AI-powered feature, trip context (such as destination, dates, group preferences, and activity choices) may be sent to Anthropic's API to generate a response. We do not send personally identifiable information such as names, email addresses, or payment data to the AI unless you explicitly include that information in a prompt.
Anthropic processes API inputs under its own data processing agreement. Anthropic does not use API inputs to train its models. For more information, see Anthropic's Privacy Policy.
How long we keep your data
| Data type | Retention period |
|---|---|
| Trip and organiser account data | Retained while account is active; deleted within 90 days of account closure |
| Survey responses | Retained for 24 months, then anonymised (answers kept, name and contact reference removed) |
| Analytics events | Retained for 12 months, then purged |
| Marketing opt-in records | Retained until unsubscribe request or deletion request |
| Sign-up IP addresses | Retained for 90 days for fraud prevention, then deleted |
Who we share data with
We share data with the following sub-processors:
| Sub-processor | Location | Purpose |
|---|---|---|
| Supabase | EU | Database and authentication |
| Hostinger | EU | Application hosting (VPS) |
| Stripe, Inc. | USA | Payment processing for Pro subscriptions and token purchases |
| Anthropic, PBC | USA | AI content generation (trip planning suggestions) |
| Google LLC | USA | Analytics (Google Analytics 4) — consent required |
| Microsoft Corporation | USA | Behaviour analytics (Microsoft Clarity) — consent required |
| Resend | USA | Transactional email |
| Unsplash | USA | Trip hero images (public CDN; no personal data sent) |
We do not sell personal data to third parties.
International data transfers
Some of our sub-processors are based outside the UK and EEA (see the table above). Where we transfer personal data to countries not covered by UK adequacy regulations, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved under UK GDPR, or the UK International Data Transfer Agreement (IDTA), as applicable. You can request details of the specific safeguards in place by emailing musteer.app@gmail.com.
Cookies
Musteer uses the following cookies. Strictly necessary cookies are set without consent. Analytics and behaviour cookies are set only after you accept cookies via the cookie preferences banner shown on first visit.
| Cookie | Purpose | Type / consent |
|---|---|---|
| Supabase auth session | Keeps you signed in to your Musteer account | Strictly necessary |
musteer_ref | Carries a referral code through sign-up; cleared immediately after sign-up | Strictly necessary |
_ga, _ga_XXXXXX | Google Analytics 4 — measures how the site is used; no personally identifiable information stored | Analytics — consent required |
_clck, _clsk | Microsoft Clarity — records session behaviour to help us identify usability issues | Analytics — consent required |
You can change your cookie preferences at any time using the “Cookie settings” link in the footer.
Your rights
Under UK GDPR and the Data Protection Act 2018 you have the right to: access, rectify, erase, restrict processing of, and port your personal data, and to object to processing based on legitimate interest.
To exercise any of these rights, email musteer.app@gmail.com with the subject line “Data rights request”. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the Information Commissioner's Office (ICO).
Referral programme
When you share a referral link, we store a referral code on your profile. If a friend signs up via your link, we record a referral redemption (including both parties' sign-up IP addresses) solely to validate the referral and prevent abuse. IP addresses are used only for fraud detection and are not shared with third parties or used for any other purpose. Referral rewards (tokens) are credited only after the referred user makes their first purchase.
Changes to this notice
We may update this notice from time to time. Material changes will be communicated to organiser accounts by email at least 14 days before taking effect. The “last updated” date at the top of this page always reflects the current version.