← Back to Home

Welcome to Gander

We're Gander Technologies Inc., your AI travel wingman. We help you plan, personalize, and book travel through AI-powered chat and voice tools (including "Gus the Goose"). This privacy policy explains how we collect, use, and protect your information in simple, straightforward language.

We take your privacy seriously. This policy explains how Gander Technologies Inc. ("Gander," "we," "our," or "us") handles your data across our services.

What Information We Collect

Information You Give Us

• Account Information: Email address and password (or Google account info if you use Google sign-in)
• Profile Information: Your name and profile picture (if provided or from Google)
• Trip Information: Travel preferences, destinations, itineraries, and bookings you create
• Social Media Links: URLs from TikTok, Instagram, or other platforms to turn into trip ideas
• Payment Information: Payment confirmations when you book through Gander (processed securely via PCI-DSS-compliant providers)
• Interactions: Chats and conversations with Gus the Goose (our AI assistant)

Information We Collect Automatically

• Usage Information: How you use Gander, including features clicked and time spent planning
• Device Information: Device type, browser, IP address, and device IDs
• Location Data: Location names you enter for trip planning, and device location when you grant permission
• Cookies: We use cookies and similar technologies to improve your experience

How We Use Your Information

We use your information to:

• Provide Our Service: Create personalized trip itineraries, process bookings, and power Gus the Goose
• Build Your Memory Spine: We create a personal travel graph to personalize future trips based on your preferences
• Process Payments: Complete bookings and send confirmations
• Improve Gander: Understand how people use our app to make it better
• Communicate With You: Send trip updates, booking confirmations, and important service announcements
• Keep Things Safe: Detect fraud, prevent spam, and keep your account secure
• Analytics: Generate anonymized analytics for suppliers and partners (only with your consent)

Google Sign-In

If you sign in with Google, we receive your email address, name, and profile picture from Google. We only use this to create your account and let you sign in easily. We don't access your Gmail, Google Drive, or any other Google services.

Google's use of information received from Gander will adhere to Google's API Services User Data Policy, including the Limited Use requirements.

How We Share Your Information

We never sell personal data. Period. We only share information in these limited situations:

• Booking Partners: When you make a booking, we share necessary information with airlines, hotels, and tour operators to complete your purchase
• Payment Processors: Payment information is processed securely via regulated payment service providers (like Stripe or Adyen)
• Service Providers: Trusted third-parties help run Gander (hosting, databases, AI, customer support) under strict confidentiality terms
• Anonymized Analytics: We may share anonymized or aggregated insights with suppliers and partners only with your consent
• Legal Requirements: When required by law or to protect rights and safety
• With Your Permission: When you choose to share trips with friends or collaborators

Your Data Rights

You have full control over your information:

• Access: View all your trip data anytime in your account settings
• Correct: Update your profile, trips, and preferences whenever you want
• Delete: Request account deletion or data erasure ("Right to be Forgotten"). We'll remove your personal information within 30 days
• Export: Download your data in a portable format
• Withdraw Consent: Opt out of marketing or data sharing at any time
• Object: Object to certain data processing activities

To exercise these rights, email us at contact@trygander.com

Data Security

We take security seriously. Your data is encrypted in transit and at rest. We use industry-standard security measures including:

• Secure authentication and access controls
• Encrypted databases and payment processing via PCI-DSS-compliant providers
• Regular security audits and updates
• Monitoring for fraud and unauthorized access

However, no online system is perfectly secure. Please use a strong password and keep it private.

Data Retention

We retain personal data only as long as necessary for your account or to comply with legal obligations:

• Active Accounts: Data is kept while your account remains active
• Deleted Accounts: Personal information is removed within 30 days of deletion
• Legal Requirements: Some data may be retained longer if required by law
• Analytics: Anonymized analytics may be retained for statistical reporting

Children's Privacy

Gander is not intended for children under 13. We don't knowingly collect information from children. If you're a parent and believe your child has given us information, please contact us and we'll delete it.

Changes to This Policy

We may update this privacy policy occasionally. If we make significant changes, we'll notify you by email or through the app. The "Last Updated" date at the top shows when changes were last made.

International Transfers

Gander Technologies Inc. is based in Toronto, Ontario, Canada. Your data is primarily stored in Canada, but may be processed in other countries (including the United States and European Union) to provide our services.

We use standard contractual clauses and comparable protections for cross-border data transfers to ensure your information remains protected regardless of where it's processed.