Skip to main content
musteer
Get started

Privacy Notice

Last updated: 22 September 2026

Who we are

Musteer is a group trip planning tool operated by Alexander James (sole trader) trading as Musteer, with a correspondence address at The Glas, Pontcanna, CF11 9PF (“we”, “us”, “our”). We are the data controller for personal data collected through the Musteer platform. Our contact email is musteer.app@gmail.com.

What data we collect and why

DataWho provides itPurpose & legal basis
Email addressOrganisers (sign-in)Authentication: contractual necessity
Trip details (name, dates, destination)OrganisersCore service: contractual necessity
Participant status (confirmed / paid)OrganisersCore service: contractual necessity
Survey answersSurvey respondentsProviding survey results to organiser: legitimate interest of organiser; respondent consent obtained at point of submission
Respondent name (optional)Survey respondentsNamed survey visibility for organiser: respondent consent
Marketing opt-in flagSurvey respondents (optional)Future marketing communications: consent
Anonymised analytics eventsAutomaticService improvement: legitimate interest; no PII stored in analytics events
Referral codeOrganisersTracking referral programme participation: legitimate interest
Sign-up IP addressAutomatic (sign-up)Referral fraud prevention: legitimate interest; not used for any other purpose
Beta access code usedOrganisers (beta programme)Administering beta access: legitimate interest

Survey respondents: what you should know

If you complete a Musteer survey, the organiser who created it can see your answers. The organiser is the data controller for the personal data you submit in that survey — Musteer processes it on their behalf. You are always shown a consent notice before submitting; the form cannot be submitted without your acceptance.

If you choose to include your name and opt in to marketing, we may store your name for the organiser to contact you about future trips. You can opt out at any time by emailing musteer.app@gmail.com with the subject line “Unsubscribe”, or clicking the unsubscribe link in any message we send you.

To request deletion of your survey data, email musteer.app@gmail.com with the subject line “Survey data deletion request” and details of the survey you completed. We will action your request within 30 days.

AI processing

Musteer uses the Anthropic Claude API to generate trip planning suggestions, summaries, and other content. When you use an AI-powered feature, trip context (such as destination, dates, group preferences, and activity choices) may be sent to Anthropic's API to generate a response. We do not send personally identifiable information such as names, email addresses, or payment data to the AI unless you explicitly include that information in a prompt.

Anthropic processes API inputs under its own data processing agreement. Anthropic does not use API inputs to train its models. For more information, see Anthropic's Privacy Policy.

How long we keep your data

Data typeRetention period
Trip and organiser account dataRetained while account is active; deleted within 90 days of account closure
Survey responsesRetained for 24 months, then anonymised (answers kept, name and contact reference removed)
Analytics eventsRetained for 12 months, then purged
Marketing opt-in recordsRetained until unsubscribe request or deletion request
Sign-up IP addressesRetained for 90 days for fraud prevention, then deleted

Who we share data with

We share data with the following sub-processors:

Sub-processorLocationPurpose
SupabaseEUDatabase and authentication
HostingerEUApplication hosting (VPS)
Stripe, Inc.USAPayment processing for Pro subscriptions and token purchases
Anthropic, PBCUSAAI content generation (trip planning suggestions)
Google LLCUSAAnalytics (Google Analytics 4) — consent required
Microsoft CorporationUSABehaviour analytics (Microsoft Clarity) — consent required
ResendUSATransactional email
UnsplashUSATrip hero images (public CDN; no personal data sent)

We do not sell personal data to third parties.

International data transfers

Some of our sub-processors are based outside the UK and EEA (see the table above). Where we transfer personal data to countries not covered by UK adequacy regulations, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved under UK GDPR, or the UK International Data Transfer Agreement (IDTA), as applicable. You can request details of the specific safeguards in place by emailing musteer.app@gmail.com.

Cookies

Musteer uses the following cookies. Strictly necessary cookies are set without consent. Analytics and behaviour cookies are set only after you accept cookies via the cookie preferences banner shown on first visit.

CookiePurposeType / consent
Supabase auth sessionKeeps you signed in to your Musteer accountStrictly necessary
musteer_refCarries a referral code through sign-up; cleared immediately after sign-upStrictly necessary
_ga, _ga_XXXXXXGoogle Analytics 4 — measures how the site is used; no personally identifiable information storedAnalytics — consent required
_clck, _clskMicrosoft Clarity — records session behaviour to help us identify usability issuesAnalytics — consent required

You can change your cookie preferences at any time using the “Cookie settings” link in the footer.

Your rights

Under UK GDPR and the Data Protection Act 2018 you have the right to: access, rectify, erase, restrict processing of, and port your personal data, and to object to processing based on legitimate interest.

To exercise any of these rights, email musteer.app@gmail.com with the subject line “Data rights request”. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the Information Commissioner's Office (ICO).

Referral programme

When you share a referral link, we store a referral code on your profile. If a friend signs up via your link, we record a referral redemption (including both parties' sign-up IP addresses) solely to validate the referral and prevent abuse. IP addresses are used only for fraud detection and are not shared with third parties or used for any other purpose. Referral rewards (tokens) are credited only after the referred user makes their first purchase.

Changes to this notice

We may update this notice from time to time. Material changes will be communicated to organiser accounts by email at least 14 days before taking effect. The “last updated” date at the top of this page always reflects the current version.