Privacy Policy

This Privacy Policy describes how Viajaro (“we”, “our” or “the app”) collects, uses and protects your information when you use our AI-powered travel planning application, available on iOS, Android and Web (the “Service”).

1. Information we collect

• Account data: email, name, and login credentials when you sign up or sign in with email/password, Google, or Apple (Sign in with Apple, iOS only).
• Trip and itinerary data: destinations, dates, travel preferences (budget, interests, pace) and the AI-generated itineraries you create and edit.
• Booking data: flights (including layovers), lodging, car rentals, tours, restaurants, entry tickets and passes, and long-distance transport (train/bus). This includes documents you scan (PDF or photo) so the app can auto-fill booking details using OCR and AI extraction.
• Identity documents (sensitive data): scanned passports, visas and other travel documents you choose to store in your document vault.
• Expense data: expenses you log, categories, how they’re split among trip participants, and the resulting balances and settlements.
• Group trip data: collaborators you invite by email, participants without an account you add as placeholders, their assigned roles (owner/editor/viewer), and any information you choose to share with them. Public sharing links can be opened by anyone who has the link. Depending on the scope you choose (a booking, a day, or a whole trip), the page may show dates, destinations, booking details, confirmation codes or flight PNRs, addresses and costs. You can choose a 24-hour, 7-day or no-expiry link and revoke it.
• Approximate location and service requests: ipwho.is infers an approximate city (not precise GPS) from your IP address when you use the home-city suggestion. Open-Meteo receives place-search text or destination coordinates for location search and weather. open.er-api.com receives currency-rate requests. These services receive the network IP address and technical request data when contacted.
• Push notification token: used to deliver reminders about upcoming bookings, pending charges, and trip invitations.
• Purchase data: if you subscribe to Viajaro Plus (monthly or annual) or buy a Trip Pass, we store the plan, its status, its start and expiry dates, the trip a Trip Pass applies to, and the associated AI credits. Payments are processed by Apple (App Store) or Google (Google Play): we never receive or store your card details.
• Usage data (analytics): pseudonymous usage events, such as creating a trip, generating an itinerary or opening the plans screen, along with your device platform and a random identifier that persists on that installation. PostHog also receives the IP address and technical request data needed to receive events. Events are designed not to include trip, document or expense contents. You can turn analytics off in Profile → Support → “Share usage analytics”.
• Feedback: ratings and comments you send from the app. Feedback is stored with your account identifier, category, rating and screen name.
• Diagnostic data: crash and error reports collected when Sentry is configured for the app. Reports can include stack traces, error messages and technical context; an error message can contain details from a failed request, so these reports may be linked to your account and may include personal data.

2. How we use your information

• Generate and personalize itineraries with AI.
• Auto-fill bookings from documents you scan.
• Create, maintain and secure your account, including group trips, roles and sharing.
• Track expenses and calculate balances between travelers.
• Manage your subscription, Trip Passes and AI credits.
• Understand, in aggregate, how the app is used so we can improve it.
• Send push notifications about your bookings and invitations.
• Diagnose errors and improve the Service.
• Respond to your support requests.

3. Use of artificial intelligence

To generate itineraries, answer travel questions, and extract booking or expense details, Viajaro sends relevant information you provide to OpenAI. Depending on the feature, this can include destinations, dates, travel preferences, free-text questions or expense descriptions, and the text or images/PDFs you ask the app to analyze. OpenAI processes this information to return the requested result under its own privacy policy and terms of use.

Viajaro also records technical AI-call logs in Supabase, including the account identifier, feature, model, timing, token counts and status. On errors, logs may also retain error details and the model’s raw response. These logs are removed when the account deletion process completes after its 30-day grace period.

AI-generated itineraries and extracted data are suggestions and may contain errors; see the disclaimer in our Terms of Service.

4. Service providers

We work with the following providers to operate the Service. We don’t sell your personal information; we share only what’s needed for each provider to perform its function, and these providers may process your data outside your country of residence:

• OpenAI — itinerary generation and OCR/AI extraction of data from scanned documents and bookings.
• Supabase — database, authentication and file storage, including files in your document vault.
• Sentry — crash and error reporting when enabled in the app build. Reports may contain stack traces, error messages and technical context, and can include account identifiers or personal data present in a failed request.
• Expo — delivery of push notifications.
• RevenueCat — management of in-app subscriptions and purchases. It receives your account identifier and purchase history, not your payment details.
• Apple (App Store) and Google (Google Play) — payment processing for subscriptions and Trip Passes.
• PostHog — pseudonymous usage analytics using a persistent random installation identifier (can be turned off in the app). PostHog receives request IP and technical request data; its retention depends on the project’s configuration.
• ipwho.is — approximate city lookup from the request IP address, without GPS, when you use the home-city suggestion.
• Open-Meteo — place search and weather requests using search terms or destination coordinates.
• open.er-api.com — currency exchange-rate requests; it receives the request IP and requested base currency.
• Unsplash — destination names are sent from Viajaro servers to find suggested cover photos; Unsplash also serves image files to your device.
• Google Maps on Android and Apple Maps on iOS — map displays using destination and booking coordinates.
• Google and Apple — social sign-in (OAuth and Sign in with Apple).

5. Data retention and deletion

We keep your account data while your account is active. When you delete a trip, booking, expense or document, it moves to a trash/recycle bin first and is automatically and permanently purged after 30 days. The app can also keep an encrypted offline copy of cached trip data and attachments on your device; attachments are temporarily decrypted in the app’s cache when you view them. The app removes offline data on sign-out, and temporary viewing files are cleared on app startup.

You can request deletion of your account and all your data at any time. Your account enters a 30-day grace period during which you can cancel the request; after that, your data is permanently deleted. See our Delete account page for instructions, both inside the app and by contacting us directly. Deleting your account does not cancel an active subscription: manage it from the App Store or Google Play.

6. Your rights

Depending on your location, you may have the right to access, correct, export or delete your personal information, and to object to or limit certain uses of your data. Most of these actions are available directly in the app, including turning off usage analytics; for anything else, contact us at [email protected].

7. International data transfers

Because our service providers operate internationally, your information may be processed in countries other than your own, including the United States, under those providers’ own data protection safeguards.

8. Security

We apply reasonable technical and organizational measures to protect your information against unauthorized access, loss or alteration. However, no system is 100% secure and we cannot guarantee absolute security.

9. Children’s privacy

The Service is not directed at children under 16 years old, and we don’t knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. We’ll post any changes on this page along with the date of the last update.

11. Contact

Data controller: OASIS HOSPITALITY & TECH E.I.R.L., a company registered in Peru.

If you have questions about this Privacy Policy, contact us at [email protected].