Privacy Policy — Voyagera

The short version. We collect what the app needs to build your trips and run properly. We do not sell your personal information, do not share it for cross-context behavioural advertising, and use no third-party advertising or analytics SDKs. Much of your trip content stays on your device. Your precise location is used on your phone and never leaves it. AI features send trip details to an AI provider. We do not ask for or store dietary rules or accessibility needs at all. Usage analytics are linked to your account and can be switched off in Settings. This box is a summary; the numbered sections are the policy.

1.Who we are and what this covers

Voyagera (“we”, “us”, “our”) provides a travel-planning app and the voyagera.app website (together, the “Service”). The data controller responsible for your personal information is Blue Helix LLC, a limited liability company formed in the State of Wyoming, United States, which operates Voyagera.

Contact for all privacy matters: hello@voyagera.app.

This policy applies to the app and the website. It does not apply to third-party services you reach through the Service — those have their own policies, and we say who they are in Section 11. Your use of the Service is also governed by our Terms & Conditions.

2.Information we collect

2.1 Information you give us

Account details — name, email address, and sign-in identifiers. If you sign in with Google or Apple, we receive your name, email, and a provider user id (and, from Apple, a relay email if you choose to hide yours). We never receive your password for those accounts.
Profile — handle, display name, avatar, bio, and any links you add. Some of this is public: see Section 9.
Trip content — destinations, dates, itineraries, stops, notes, bookings, budgets, saved places, reactions, packing lists, bucket lists, and photos you upload.
Travel preferences — how you like to travel: pace, budget, the kinds of places you enjoy, how you get around, and where you stay. We do not ask for, store, or send dietary rules or accessibility needs. We used to, and removed them: those can reveal or imply health, disability, religion or belief, and neither was needed to do the job. If you want to filter restaurants by a dietary tag you can do it in the moment, on the meal picker; that choice is not saved. Step-free access is shown as a fact about a place, not recorded as a fact about you.
Messages — what you write in a shared trip's chat, visible to the other travellers on that trip.
Reports and correspondence — content reports you file, blocks you set, and anything you email us.

2.2 Information collected automatically

Device and technical data — app version, platform and OS version, device model, language, time zone, and general region. Contacting any server necessarily reveals your IP address to it, which implies approximate location; we add no tracking identifiers of our own.
Usage analytics — first-party only, and linked to your account: see Section 5 for exactly what this is and how to turn it off.
Diagnostics — counts of in-app errors, to find and fix crashes and bugs.
Precise location — used only on the features described in Section 6, each of which you start yourself, and only on your device. It is never sent to our servers or anyone else's.

2.3 Information from others

Apple and Google — sign-in details, and confirmation that a purchase was made (never your card or billing details).
Other travellers — what people write about a trip you are both on, and content published by creators you follow.

We do not buy personal information, and we do not obtain data from data brokers or advertising networks. Please do not enter government identifiers, financial account details, health records, or other sensitive information into trip notes or chat — those fields are not designed for it.

3.How we use your information, and our legal bases

We use personal information only for the purposes below. Where the UK or EU GDPR applies to you, the legal basis for each is shown.

To provide the Service — create your account, build and sync your trips, run the features you use, deliver guides you unlocked, and support you. Basis: performance of a contract.
To run AI features at your request. Basis: performance of a contract.
To process purchases and keep what you bought unlocked across your devices. Basis: performance of a contract; and legal obligation for tax and records.
To send notifications you have enabled. Basis: consent, which you can withdraw in your device settings.
To keep the Service secure, stable, and free of abuse — debugging, error diagnostics, fraud and abuse prevention, rate limiting, and moderation. Basis: legitimate interests in running a safe and functioning service, and legal obligation.
To understand and improve the Service through usage analytics. Basis: legitimate interests, balanced against your rights — which is why it is limited to counts, excludes your content, and can be switched off.
To communicate with you about the Service, changes, and support. Basis: performance of a contract and legitimate interests.
To comply with law and to establish, exercise, or defend legal claims. Basis: legal obligation and legitimate interests.

We do not use your personal information for advertising, ad targeting, ad measurement, or cross-app tracking, and we do not build advertising profiles.

Where we rely on legitimate interests, you may object — see Section 16. Where we rely on consent, you may withdraw it at any time, without affecting processing already carried out.

4.AI features: what is sent, and to whom

Where the AI runs depends on your device and your settings. Some requests can run entirely on your phone's own built-in model, in which case nothing leaves the device and no provider sees it. When on-device AI is unavailable, switched off, or unsuited to the request, the request goes to a cloud AI provider.

4.1 Which providers

Cloud AI requests are handled by third-party AI providers we engage for that purpose. Different features may use different providers, and one of them routes requests onward to a model provider on its own network — so more than one company may process a single request, each under its own terms.

We change AI providers and models from time to time as we tune quality, cost, and speed, which is why we describe them by category rather than by name. If you want to know which providers currently receive data from a particular feature, email us at hello@voyagera.app and we will tell you.

4.2 What is sent

We send only what the feature needs to answer, and we add no advertising or tracking identifiers. Depending on the feature, this can include: your destination, dates, trip logistics and style, the stops and place names on your itinerary, and your recent messages in that chat. It does not include dietary rules or accessibility needs — we hold neither, so neither can be sent. If you have a hard requirement, say so in the message; that text is yours to give, and goes only where the rest of your message goes.

Names. In chat, real names are replaced with neutral labels (“Traveler 1”, “Traveler 2”) before the request is sent and swapped back only after the reply returns — this covers speakers, the traveller list, the trip title, and names written inside messages. Place names and stop titles are deliberately not replaced, because they must match real places. In itinerary generation, traveller names are not currently replaced and may be sent.

4.3 What that means for you

These providers handle the data under their own terms and may use it to operate and improve their services. This is therefore not processing carried out solely on our behalf.
To make repeat requests faster and cheaper, a provider may briefly retain the leading, repeated part of a request in a short-lived inference cache. This is a performance cache, not model training, and it cannot contribute your content to anyone else's answer — a request only benefits from it by already containing the same text.
Processing may take place on servers in the United States and elsewhere.
Please do not enter sensitive personal information into AI features, and do not enter information about other people that they would not want sent.

4.4 Audio guides are different

Audio guides do not use that path and never send your location. Each guide is written ahead of time by us and stored in our own backend; the app downloads the guide for the place you are at and adds a short taste-matched aside on the device. No location, destination, place name, or preference of yours is sent to an AI provider for audio guides.

4.5 Narration voices

By default a guide is spoken by your phone's own voice or by a voice model running on the device, and nothing leaves the phone. If you switch on one of the optional cloud voices, that stop's narration text — our guide writing about a place, never anything you wrote — is sent through our audio cache (a Cloudflare Worker we operate) to a third-party voice provider, which returns an audio clip. Each clip is cached, so a stop is sent at most once and then replays offline. Those requests carry your sign-in token so we can prevent abuse; the stored audio carries no account identifier, and no location is ever attached.

AI output can be inaccurate or incomplete. Please read the Terms before relying on it.

5.Usage analytics

We use first-party analytics only — no Google Analytics, no Firebase, no advertising SDK, no third-party analytics of any kind.

Usage analytics are linked to your account, not anonymous. When you are signed in, daily counters are stored against your user id in our own database. We describe it as “counts” because of what it measures, not because it is unattributable to you.

What it records: daily counts and durations — app opens, screens and tabs viewed, time spent, which features were used, permission prompts seen, and tallies of in-app errors.

What it never records: your trip content, notes, messages, search text, photos, or location.

Your control: it is on by default and you can switch it off at any time in the app under Settings → Usage analytics. Switching it off stops the collection immediately and app-wide; nothing else about the app changes. If you are not signed in, nothing is sent to our servers.

6.Location

Three features use your device's location, and you start each of them yourself. None of them sends your coordinates off the device.

Check-in — tap to log where you are onto today's plan. Your position is read on the phone and used only to sort the nearby places we show you, then discarded. If you pick a place, the stop is saved with that place's own public location from our catalog — not with your GPS reading. If you type a place in instead, no coordinates are saved at all.
Audio guides — while a guide is playing, the app follows your position so the right stop narrates as you arrive and the distance readout stays honest. On an outdoor walking guide it keeps following with your screen locked, so the tour does not stop when the phone goes in your pocket. Your position is used on the phone and is never transmitted.
The audio map and “a guide near you” reminders — a single position reading, compared on the device against guides already stored on it, to sort what is close by. Also never transmitted.

We request “While Using the App” location only — never “Always” — and we do not track you in the background when no guide is playing. Whenever a guide is following you, iOS shows its location indicator and Android shows an ongoing notification. You can turn the permission off at any time in your device settings; the features that need it will stop working, and the rest of the app is unaffected. We do not sell location data, share it with data brokers, or use it for advertising.

7.Purchases

If you buy an audio guide, we record what was bought and when: the product, the store's transaction reference, and which guide or city it unlocks. We keep it because that is what makes a guide you paid for stay unlocked — on every device you sign in on, and offline.

The payment itself is taken by Apple or Google, which act as merchant of record. We never see your card, bank, or billing details. Their own privacy policies govern the payment. Deleting your Voyagera account deletes our record of what you bought — and with it your unlocks — while Apple's or Google's record of the transaction stays with them, as their terms and tax rules require.

8.Notifications

Reminders about your own trip are scheduled on your device and reach no server. When someone posts in a shared trip's chat, the sender's name, the trip title, and a short preview of the message travel through Expo's push service and then Apple's or Google's notification service to reach your phone. To do that we store a push token for your device. If you turn the notification off, nothing is sent.

9.Public content, profiles and the community

Some things are public by design: a trip you publish to Explore, your creator profile (handle, display name, avatar, bio, links), and your follower relationships.

Public means public. Anyone can view, save, screenshot, copy, cache, or re-share public content, and search engines may index it. Published plans are stripped of exact dates, but everything else you put in them is visible. Unpublishing removes it from Voyagera going forward — it cannot recall copies that already exist elsewhere. Please do not publish home or workplace addresses, real-time whereabouts, or other people's personal information.

Within a shared trip, the other travellers can see that trip's stops, notes, dates, chat, and check-ins. Remove people you no longer want to have access.

10.Where your data is stored

Much of your trip content is stored locally on your device. When the Service syncs, backs up, or a feature requires it, that data is also stored on our backend, hosted on Supabase. Guide audio and map tiles are served from Cloudflare infrastructure we operate.

We and our providers process data in the United States and other countries, which may have data-protection laws different from your own. Where we transfer personal data out of the UK, the EEA, or Switzerland, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with additional measures where needed. You can ask us for details of the safeguards used.

11.Who we share with

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. To run the app we rely on a small set of providers, each receiving only what its feature needs:

Supabase — hosts our backend: your account, synced trips, trip chat, published plans, uploaded photos, purchase records, and analytics rows.
Cloudflare — our own infrastructure: serves offline map tiles and runs the audio cache that stores and delivers guide narration.
Third-party AI providers — the cloud AI behind itinerary generation, place suggestions, and the in-trip concierge. More than one company may be involved in a single request, each handling the data under its own terms (Section 4). We change these providers from time to time and will name the current ones on request.
Google — Google Sign-In, if you choose it.
Apple — Sign in with Apple, and Apple Maps places and directions on iOS.
Expo, then Apple or Google — deliver push notifications (Section 8).
Apple and Google (App Store and Google Play) — take payment for purchases, under their own terms. Card and billing details go to them, never to us.
RevenueCat — checks store receipts and tells our backend what to unlock. It receives your Voyagera account id, the product bought, and the store's transaction record. It does not receive your trips, messages, or location, and there is no advertising identifier in this app for it to receive. We use it for purchases and purchase reporting only — never for advertising or cross-app tracking.
Third-party voice providers — the optional cloud narration voices. If you switch one on, it receives the guide text of a stop, under its own terms, and returns audio. Off unless you choose them.
Open-Meteo (weather and geocoding), OpenStreetMap / Overpass / Photon (place search), Wikipedia / Wikimedia and Unsplash (place and cover photos), Nager.Date (public holidays), OSRM / Protomaps (routing and map data), and, where enabled, Ticketmaster (local events) — these receive a place or destination name, never your identity.
Apple Maps / Google Maps — when you tap “Get directions” we hand off to your maps app; and a shared plan may embed Instagram or TikTok videos your device loads directly from those platforms. Their own privacy terms then apply.

We also disclose information:

When you choose to publish or share — see Section 9.
For legal reasons — to comply with applicable law, regulation, legal process, or an enforceable governmental or law-enforcement request; to enforce our Terms; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of Voyagera, our users, or the public. Where we are legally permitted and it is reasonable to do so, we will try to notify you.
In a corporate transaction — in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, in which case we will require the recipient to honour this policy or give you notice and a choice before your information becomes subject to a materially different policy.
With your consent, for anything else.

Our service providers act on our behalf under contractual obligations to protect your data and use it only for the services they provide us — except the AI and voice providers described in Section 4, which act under their own terms. Calling any provider necessarily reveals your device's IP address to it as a normal part of the request; we add no tracking identifiers of our own.

12.How long we keep it

Account, profile, trips, messages, and purchase records — for as long as your account is open.
When you delete your account in the app — your account and its data are erased from our systems immediately. Deletion requests sent by email are completed within 30 days of verification, and usually much sooner.
Backups — deleted data may persist in encrypted backups for a limited period until they are routinely overwritten, after which it is gone. It is not restored to active use in the meantime.
Usage analytics — kept as daily rows tied to your account, and deleted with your account.
Guide narration audio — cached clips are kept indefinitely so guides replay offline and without re-synthesis. They contain our guide text spoken aloud and carry no account identifier or location.
Published content — remains visible until you unpublish or delete it, subject to Section 9.
Content on your device — removed when you delete it or uninstall the app. We cannot delete it for you.
Records we must keep — limited information retained where necessary for tax, accounting, security, fraud prevention, safety, or to establish, exercise, or defend legal claims, for as long as that purpose requires and no longer. Moderation records may be retained to enforce bans.

13.Security

We use reasonable technical and organizational measures appropriate to the risk, including encryption in transit, encryption at rest with our hosting provider, database-level access rules that restrict each account to its own data, access controls, and authentication handled by established providers.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials and your device secure, and for who you invite to a trip. If we become aware of a breach affecting your personal information, we will notify you and the relevant regulators where the law requires it, within the timeframes the law sets.

14.Children

The Service is not directed to children and is not intended for anyone under 16, or the minimum age required in your country if that is higher. We do not knowingly collect personal information from children, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has provided us information, email hello@voyagera.app and we will delete it and close the account.

15.Cookies, local storage and tracking

The website sets no cookies and runs no analytics, advertising, or tracking scripts. It uses a single item of browser local storage to remember which headline to show next — a functional preference that identifies nobody and is never sent anywhere. Fonts are loaded from Google Fonts, which necessarily receives your IP address as part of that request.

The app uses no cookies and contains no advertising or tracking SDK. It stores your trips and settings on your device so it works offline. There is no advertising identifier in this app, and we do not track you across other companies' apps or websites.

16.Your privacy rights

Wherever you live, you can:

Edit or delete your trip content in the app, and unpublish public trips.
Permanently delete your account and its data at any time — in the app under Settings → Delete account & data, or by request. See Delete your account.
Turn usage analytics off under Settings → Usage analytics.
Control location and notification permissions in your device settings.
Contact us at hello@voyagera.app about anything in this policy.

16.1 If you are in the UK, EEA or Switzerland

You have the right to: access your personal data and receive a copy; have inaccurate data corrected; have data erased; restrict or object to processing, including processing based on legitimate interests; receive your data in a portable format and have it transmitted to another controller; and withdraw consent at any time without affecting processing already carried out.

You also have the right to lodge a complaint with your data-protection supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk); in the EEA, your national authority. We would appreciate the chance to address your concern first.

16.2 If you are in the United States

Depending on your state — including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others with comprehensive privacy laws — you may have the right to: know and access the personal information we have collected about you, the categories of sources, our purposes, and the categories of recipients; obtain a portable copy; request correction; request deletion; opt out of sale, of sharing for cross-context behavioural advertising, and of profiling with legal or similarly significant effects; limit the use of sensitive personal information; and not be discriminated against for exercising these rights.

We do not sell your personal information, and we have not sold or shared it for cross-context behavioural advertising in the preceding 12 months — including the personal information of anyone under 16. We do not use or disclose sensitive personal information for purposes beyond those permitted under the California Consumer Privacy Act, and we do not engage in profiling that produces legal or similarly significant effects.

Categories of personal information we collect (as those categories are defined by California law): identifiers; customer records; commercial information (what you purchased); internet or other electronic network activity; geolocation data (precise geolocation is processed on your device only and does not reach us — see Section 6); audio content you generate only in the sense of guide playback state (we do not record audio from your microphone); professional or employment information — none; biometric information — none; and inferences drawn to personalize suggestions. We collect sensitive personal information only in the form of any health-, disability-, religion- or belief-adjacent preferences you choose to enter (Section 2.1), used solely to provide the features you asked for; precise geolocation stays on your device (Section 6).

To exercise a right, email hello@voyagera.app. We will verify your request against your account, usually by confirming control of the account email, and respond within the time the law allows (generally 45 days, extendable once where permitted). An authorized agent may submit a request on your behalf with written proof of authority, and we may still ask you to verify your own identity. If we decline a request you may appeal by replying to our response; where your state provides one, you may also contact your Attorney General.

16.3 Global Privacy Control and Do Not Track

Because we do not sell or share personal information, and set no advertising cookies, there is nothing for an opt-out signal to switch off. We honour the Global Privacy Control signal where it applies. Browsers' “Do Not Track” signals have no consistent standard and the site does not track you regardless.

17.Automated decision-making

The Service uses automated systems to generate suggestions, sort content, and personalize recommendations. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. Moderation and enforcement decisions involve human review before an account is suspended or terminated.

18.Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above, and for material changes we will give reasonable notice — in the app, by email, or on this page — before they take effect, and obtain your consent where the law requires it. Your continued use of the Service after changes take effect means you accept the updated policy.

19.Contact us

Questions, requests, or complaints about privacy: email hello@voyagera.app. Please tell us which right you are exercising and the email address on your account so we can find you.

Voyagera is operated by Blue Helix LLC, State of Wyoming, United States.