Overview
This Privacy Policy explains how VOYA (the "App") collects, uses, shares, and protects your information. By using the App, you consent to this Policy.
Information We Collect
- Account Information: name, email, username, and credentials (hashed by our auth provider).
- Profile Information: avatar image and optional bio/preferences.
- Trip Data: trips you create or join, dates, destinations, activities, notes, and associated metadata (including city place IDs and coordinates you choose for trips).
- Chat Messages: messages you send/receive in chats and conversations related to trips or friends.
- Friends & Invitations: friend relationships, requests, and trip invitations you send/receive.
- Device & Notifications: device identifiers or FCM tokens to deliver push notifications. Tokens are cleaned up on logout.
- Subscription Status: active products/entitlements via RevenueCat (Apple App Store / Google Play) to enable premium features (no full payment card data stored by us).
- Diagnostics & Logs: basic app logs and error information to improve reliability and debug issues.
Location and Places
The App uses place information to improve trip planning (e.g., Google Places search, place details, and coordinates for trip destinations and activities). We do not continuously track your device location. You may provide city coordinates or select places during planning to improve search relevance.
How We Use Your Information
- Provide and operate core features (trip generation, trip management, chat, invitations).
- Generate trip ideas with AI providers at your request (content you provide may be processed by those providers).
- Improve relevance of place search and recommendations (e.g., using trip city coordinates).
- Send notifications about trip activity, invites, messages, and updates you opt into.
- Maintain safety, prevent fraud/abuse, and enforce our Terms.
- Comply with legal obligations.
Sharing and Disclosures
- Service Providers: we use vendors to run the App, including Supabase (auth/database/storage/realtime), Google Places API (places), Firebase Cloud Messaging (notifications), RevenueCat (Apple App Store / Google Play subscriptions), and AI providers (e.g., OpenAI, Google). Your data may be processed by these providers subject to their terms/policies.
- With Other Users: when you join a trip or a chat, relevant profile and trip information is visible to participants. Messages are visible to chat participants.
- Legal & Safety: we may disclose information to comply with law, protect rights, or prevent harm.
Data Retention
- We retain data while your account remains active. You can delete your account in Settings; this deletes your user and associated data subject to necessary legal retention and technical limitations.
- Notification tokens are removed on logout for the current device to prevent cross‑user notifications.
Security
- Data is transmitted over encrypted channels (HTTPS).
- We implement access controls and database policies to limit unauthorized access.
- No system is 100% secure; use strong passwords and protect your devices.
Your Rights and Choices
- Access & Correction: you may review or edit profile details in the App.
- Deletion: you may delete your account in Settings. This action is irreversible.
- Notifications: control push notifications in system settings and in‑app settings where available.
Children’s Privacy
The App is not directed to children under 13. If you believe a child provided us information, contact us and we will take appropriate action.
International Data Transfers
Your information may be processed and stored in data centers operated by our providers in various regions, subject to their safeguards and applicable law.
Changes to this Policy
We may update this Policy from time to time. The updated version will be posted in the App. Continued use constitutes acceptance.
Contact Us
For privacy questions or requests, contact Support from within the App or via the contact information listed on our App Store or Google Play listing.