Legal

Privacy Policy

Last updated: 22 March 2026

Voyara ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Voyara mobile application.

1. Information We Collect

We collect the following types of information:

2. How We Use Your Information

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following lawful bases:

Processing ActivityLawful Basis
Creating and managing your accountContractual necessity — required to provide the service
Storing and syncing your trips and itinerariesContractual necessity — core feature of the app
Location data for nearby attractionsConsent — you grant permission through your device OS
Service notifications (reminders, chat alerts)Contractual necessity — integral to the service
Marketing notifications (weekly inspiration)Consent — only sent if you explicitly opt in in settings
AI processing of trip inputs (Google Gemini)Contractual necessity — AI generation is the core service
Analytics via MixpanelConsent — only if you opt in during first launch
Crash reporting via SentryLegitimate interest — necessary to maintain app stability

You may withdraw consent at any time by adjusting settings in the app or contacting us at support@voyara.org.

4. AI & Third-Party Services

We use the following third-party services to operate Voyara. Each acts as a data processor on our behalf.

ServicePurposeData Shared
Supabase Database, authentication, real-time sync Account info, trips, messages, push tokens
Google (Gemini API) AI-powered trip itinerary generation Trip destination, duration, travel preferences you enter
Google Maps / OpenStreetMap Displaying maps and activity locations No personal data — map display only
Wikipedia REST API Destination images and summaries No personal data
Mixpanel Analytics to understand how the app is used Usage events — only if you opt in to analytics
Sentry Crash reporting to fix bugs Device info, app state at crash (no email or name)
RevenueCat Subscription and in-app purchase management Subscription status, purchase history
Expo Push notification delivery Device push token
Apple / Google Authentication (Sign in with Apple / Google) Name, email, profile picture
AI-Generated Content: Itineraries, suggested activities, opening hours, prices, and transport options are generated by AI and may be inaccurate or outdated. Always verify details independently before travelling. Voyara is not responsible for inaccuracies in AI-generated content.

We do not sell your personal data to any third party.

5. Data Storage & Security

Your data is stored securely using Supabase (hosted on AWS infrastructure). We use industry-standard encryption for data in transit (HTTPS/TLS) and at rest. Access to your data is controlled by Row Level Security — you can only access your own data.

6. International Data Transfers

Voyara is operated from India. Your data is stored on Supabase infrastructure hosted on Amazon Web Services (AWS) in the ap-southeast-2 region (Sydney, Australia). If you are located in the EEA or UK, your data is transferred outside your region.

Where such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) as provided by our data processors' Data Processing Agreements. For more information, contact us at support@voyara.org.

7. Data Retention

We retain your data for as long as your account is active. Specific retention periods:

Data TypeRetention Period
Account and profile dataUntil you delete your account
Trip itineraries and plansUntil you delete the trip or your account
Chat messages in shared tripsUntil the shared trip or your account is deleted
Push notification tokensCleared immediately on sign-out or account deletion
Analytics data (Mixpanel)Up to 5 years per Mixpanel's data retention policy
Crash reports (Sentry)90 days per Sentry's data retention policy

When you delete your account, your data is permanently removed from our systems within 30 days. Some data may be retained longer if required by law.

8. Push Notifications

We send two types of push notifications:

9. Children's Privacy

Voyara is not directed at children under the age of 13. Users must confirm they are 13 or older before creating an account. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately at support@voyara.org.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, use the in-app settings or contact us at support@voyara.org. We will respond within 30 days (45 days for US state law requests).

11. Your Privacy Rights (California & US State Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) give you the right to:

We do not sell your personal information. We share usage analytics data with Mixpanel only if you have opted in to analytics. To opt out, go to Settings → Privacy → Analytics in the app, or contact us at support@voyara.org.

Similar rights apply to residents of Virginia, Colorado, Texas, and other US states with privacy laws. We will respond to all requests within 45 days.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

The AK Labs
56, South Maharajapuram Street, Puliyampatti
Aruppukottai, Tamil Nadu 626101, India
support@voyara.org