KAYAK is a travel metasearch app operated by KAYAK Software Corporation, a subsidiary of Booking Holdings Inc. (NASDAQ: BKNG), which also owns Booking.com, Priceline, Agoda, OpenTable and Rentalcars.com. Its privacy policy discloses broad data collection (identifiers, commercial information, internet/network activity, permission-gated precise geolocation, and even voluntarily-disclosed sensitive personal information), routine use of third-party advertising cookies, and a CCPA self-declaration that it has "sold" or "shared" several categories of personal information (identifiers, commercial information, internet activity, geolocation, inferences) in the past 12 months, alongside broad sharing with its Booking Holdings "group companies." Ownership is well-documented via Booking Holdings' FY2025 10-K, which names KAYAK as one of five primary consumer-facing brands. No KAYAK-specific breach or regulator action was found; the 10-K describes a NIST-aligned cybersecurity program with biennial third-party assessment at the parent-company level, but no independent audit specific to KAYAK.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
7 ON FILE
[2024-07-25] · COLLECTION
KAYAK's privacy policy states that certain features may prompt the user's device or browser to request access to precise geolocation, which is only processed if the user grants permission, and separately lists broad categories collected including identifiers, commercial information, internet/network activity information (device type, browser settings, site interactions), geolocation data, visual information, professional/employment-related information, and sensitive personal information the user voluntarily discloses.
The KAYAK iOS App Store listing names the app's Seller as "Kayak Software Corp," independently corroborating the operating entity behind the KAYAK brand disclosed in Booking Holdings' SEC filings.
Booking Holdings Inc.'s FY2025 Form 10-K (filed with the SEC) states that the company provides services through five primary consumer-facing brands — Booking.com, Priceline, Agoda, KAYAK, and OpenTable — establishing KAYAK's place in the public, NASDAQ-listed corporate structure.
KAYAK's privacy policy's CCPA disclosure self-declares that in the past 12 months it has "sold" or "shared" the categories identifiers, commercial information, internet activity, geolocation data, and inferences, and separately states that KAYAK shares user information with its affiliates, subsidiaries and its parent corporation Booking Holdings, Inc. and its other subsidiaries ("group companies"), including for enabling single sign-on across Booking Holdings Inc. brands.
Booking Holdings Inc.'s FY2025 Form 10-K states that the company annually measures its security and privacy program maturity against NIST frameworks and engages a third party every other year to assess against those frameworks, with results discussed with the Board of Directors and the Cybersecurity Subcommittee of the Audit Committee; no KAYAK-specific breach or regulator action was found in the sources reviewed.
The KAYAK iOS App Store listing's App Privacy section (developer-declared) states that Identifiers and Usage Data may be used to track the user across apps and websites owned by other companies, and separately that Identifiers, User ID, Device ID, Usage Data, Product Interaction and Advertising Data are linked to the user's identity for Third-Party Advertising purposes.
KAYAK's privacy policy states that it allows the use of third-party cookies, including cookies from its advertising partners, on its sites for purposes such as personalized advertising and measurement, and provides a vendor list for these partners.