Privacy Policy

What we collect, why, who sees it, and how to control it

Last updated 2026-09-19 · Effective 2026-09-19

Adventure Knit is operated by Kanban Technologies LLC ("we", "us"), 312 W 2nd St, Unit #A3553, Casper, WY 82601, United States. We are responsible for the personal data described here. This policy covers the Adventure Knit website, apps, emails and support channels. We do not sell your personal data.

1 What we collect

Information you give us

  • Account: name, email, phone number and password (stored only as a secure hash).
  • Profile (optional): date of birth, gender, country and profile photo.
  • Travel and health details (optional): medical conditions, allergies, medications, dietary and mobility needs, emergency contacts, ID documents and travel insurance details. See section 3.
  • Bookings: the tour, dates, number of travellers and any special requests.
  • Payments: handled by Stripe. We receive the payment and refund status, never your card number.
  • Messages and attachments you send to Operators or our support team, and reviews you write.
  • Custom trip requests: destinations, dates, group size, budget, preferences and any needs you describe.
  • Friends you invite: the names and email addresses you enter to send a referral invite.
  • Newsletter: your email address and confirmation, if you subscribe.

Information collected automatically

  • Device and log data: IP address, browser, device type and approximate location (country and city, derived from your IP).
  • Sign-in history: time, IP address, device and whether a sign-in succeeded, to protect your account.
  • How you found us: the website or campaign link that brought you (UTM parameters), ad click IDs from Google, Microsoft or Meta ads (gclid, msclkid, fbclid), and a friend's referral code. We use these to learn which campaigns work; we don't pass them back to ad networks.
  • Usage analytics (only with your consent): pages you view, clicks and time on page, through Google Analytics and our own analytics tool.
  • Error diagnostics: when something breaks, and for a small sample of visits, our error-monitoring provider records technical details and a replay of the page with all text masked and all images blocked.

Information from others

  • Google or Facebook, if you sign in with them: your name, email address and profile photo.
  • Operators: booking confirmations, changes and replies to your requests.
  • Stripe: payment and refund status.
  • A friend who invites you: your name and email address, so we can send their invite.

2 How we use it, and our legal basis

PurposeLegal basis (EU/UK)
Run your account, take bookings and payments, pass bookings to Operators, handle refunds and supportContract
Booking and account emails (confirmations, reminders, security alerts)Contract
Travel and health details you add to your profileYour explicit consent (you can remove them at any time)
Keep the platform secure, prevent fraud and abuse, fix errorsLegitimate interests
Measure which campaigns bring visitors; improve the siteLegitimate interests; consent for analytics cookies
Reminders about a booking you started, alerts you set up, referral invites you asked us to sendLegitimate interests (unsubscribe any time)
Newsletter and offersConsent (opt-in only)
Keep tax and accounting records; answer lawful requestsLegal obligation

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.

3 Health and travel details

Medical conditions, allergies, medications, dietary and mobility needs are sensitive. You only add them if you choose to. We use them to help you plan trips and to show them back to you. We do not send them to Operators automatically. If an Operator needs to know something for your safety, put it in your booking's special requests or message them. That message then goes to that Operator. You can edit or remove these details in your profile at any time.

4 Who we share it with

  • The Operator you book, message or request a quote from gets what they need to run your trip: your name, contact details, travellers, dates and special requests. For custom trip requests, matching Operators see the request but not your name or email until you book.
  • Other users: your published reviews show your first name and last initial. A friend you invited sees your first name in their invite.
  • Service providers who process data for us under contract, only to provide their service (listed below).
  • Authorities, when the law requires it, and to protect people's safety or our legal rights.
  • A buyer or successor if our business is sold or merged, under this policy.
ProviderWhat for
StripeCard payments and refunds
Laravel CloudHosting for our servers and database
VercelWebsite hosting and cookieless page-view statistics
Cloud file storage (Laravel Cloud, Amazon Web Services)Photos, documents and message attachments
ResendSending our emails
GoogleGoogle sign-in; Google Analytics (only with your consent)
Meta (Facebook)Facebook sign-in, if you use it
SentryError monitoring and masked session replays
Wise and banksPaying Operators (Operator data only)
AnthropicAI drafting of invitations to tour operators (operator business data only, never traveller data)
TwilioText messages to tour operators (operator data only)

5 If you are a tour operator

We collect business contact details that operators publish on their own websites and on travel marketplaces (business name, email, phone, website and social links) to invite them to list on Adventure Knit. We may use an AI writing tool to draft those invitations. Every invitation has an opt-out link, and emailing support@adventureknit.com removes you from our outreach. Operators who sign up also give us verification documents (business registration, ID and proof of address), which are used only to verify them.

6 Emails and your choices

  • Booking, payment and security emails are part of the service. You can't turn these off while you have an account.
  • Newsletters and offers are sent only if you opt in, and every email has a one-click unsubscribe link.
  • When you unsubscribe, we keep your email address on a "do not email" list so we don't contact you again. Deleting that entry would allow us to email you again, so we keep it.

7 How long we keep it

  • Account, profile, travel and health details, sign-in history: until you delete them or your account.
  • Booking, payment and refund records: 7 years, for tax and accounting. After account deletion they no longer show your name or contact details.
  • Messages: kept with the booking or support case. Attachments are deleted 30 days after the conversation is closed.
  • Our own analytics: 90 days. Google Analytics: up to 14 months. Error diagnostics and replays: up to 90 days.
  • "Do not email" list, record of what terms you accepted, and proof that a deletion request was completed: kept indefinitely.

8 Deleting your account and your data

  1. Sign in, open Account Settings and choose Delete Account. Your data is erased immediately.
  2. Or email support@adventureknit.com from the address on your account, with "Delete my account" in the subject line. We complete email requests within 30 days.

What is erased: your name, email, phone, password, profile and photo, travel and health details, emergency contacts, ID documents, saved tours and alerts, sign-in history, referral invites you sent, and the link between your visits and your identity.

What we keep: booking, payment and refund records (required for tax, but no longer showing your name or contact details), your reviews (shown as "Deleted User"), and the records listed at the end of section 7.

You can't delete your account while a paid trip is still ahead, because the Operator needs your details to run it. Cancel the trip or wait until it is over, or contact us.

If you signed up with Google or Facebook, deleting your account also removes what we received from them. You can also disconnect Adventure Knit under Facebook Settings → Apps and Websites.

9 Your rights

Depending on where you live, you can ask us to:

  • Access your data and get a copy in a portable format (JSON).
  • Correct it. Most of it you can edit yourself in your profile.
  • Delete it (see section 8).
  • Object to or restrict processing based on our legitimate interests.
  • Withdraw consent at any time: remove health details, unsubscribe, or change cookie choices through "Cookie Preferences" in the footer.

US residents (including California): you have the right to know, access, correct and delete your personal information. We don't sell it or share it for cross-context behavioural advertising, and we won't treat you differently for using your rights.

Email support@adventureknit.com with "Privacy request" in the subject. We answer within 30 days (45 where US state law allows) and may ask you to confirm your identity. You can also complain to your local data protection authority.

10 Cookies and similar technologies

We use essential storage to keep you signed in and remember your choices. Analytics cookies only run if you accept them. We don't use advertising or retargeting pixels. Full list and controls: Cookie Policy.

11 International transfers

We are based in the United States and our main providers process data in the US and other countries. When data from the EU, UK or Switzerland is transferred, we rely on the providers' Standard Contractual Clauses or the EU–US Data Privacy Framework where they are certified.

12 Security

We use encryption in transit (HTTPS), hashed passwords and role-based access controls. No system is perfectly secure. If a breach affects you, we will tell you and the authorities as the law requires.

13 Children

Adventure Knit is for adults. You must be 18 or older to create an account. We don't knowingly collect personal data from anyone under 18. A parent or guardian booking a trip that includes children gives us only the number of child travellers. If you believe a child has given us personal data, contact us and we will delete it.

14 Changes to this policy

If we make material changes, we will email account holders and show a notice on the site before they take effect. The date at the top always shows the current version.

15 Contact

  • Company: Kanban Technologies LLC, operating Adventure Knit
  • Address: 312 W 2nd St, Unit #A3553, Casper, WY 82601, United States
  • Email: support@adventureknit.com (subject "Privacy request")
  • Phone: +1 (440) 791-4645
  • Governing law: Wyoming, United States