Traveley

Privacy Policy

What data Traveley collects, how it is used, and the choices you have.

Traveley (“the App”) is developed and published by Avakiam (“we”, “us”, “our”), based in Girona, Spain. Traveley builds day-by-day travel itineraries from a destination and a set of dates or a trip length, using an artificial intelligence model, and lets you save the itineraries you like. This Privacy Policy explains what information the App collects, how it is used, and the choices available to you. It applies to the version of Traveley distributed on Google Play (package name com.avakiam.traveley) and, where applicable, other app stores and the web version.

Who is responsible for your data

Avakiam is the data controller for the information described in this policy. You can reach us through the contact form on our website at avakiam.com.

Summary

Traveley shows ads, and they are how the App pays for itself. It contains no analytics or tracking SDK, and it never asks for or reads your device's location. Creating an account is optional and is only needed to save itineraries, and to buy extra ones — on its own it does not change how many itineraries you get. The two identifiers used to run the free plan — your device identifier and your IP address — are never stored in readable form: only an irreversible hash of each is kept.

Information we collect

The trip details you enter

To generate an itinerary the App sends the destination you typed, the dates or number of days you chose, and any preferences or refinement instructions you wrote, to our server function, which passes them to Google's Gemini model to produce the itinerary. These inputs describe a trip, not you: we do not ask for your name or your age in order to plan a trip, and you should not enter personal or sensitive information in the free-text fields. The one personal detail the App ever asks for is optional, and it is described under “Passport country and country of departure” below.

Device identifier

The free plan allows a limited number of itineraries per device, so the App needs a way to recognise the same device across sessions. On Android this is the Google Play advertising ID; on other platforms, and on Android devices without Play services, it is a random identifier generated by the App and stored in the operating system's secure storage (the Keychain on iOS).

This identifier does two jobs. It counts your free itineraries, and — only if you allow it — it is what Google AdMob uses to choose which ads to show you. See Advertising below for the choice you are given and how to change it.

For counting itineraries it never reaches our database in readable form: before it is stored, it is combined with a secret value held on our server and converted into an irreversible SHA-256 hash. We do not build an advertising profile of you ourselves, and the ad network tells us nothing about you in return. On Android you can reset the advertising ID at any time from Settings > Google > Ads, where you can also switch off ad personalisation altogether.

IP address

When the App contacts our server, your IP address is visible to it, as it is to any internet service. We use it as a secondary anti-abuse signal, to stop one person exhausting the free plan by resetting their device identifier. Like the device identifier, it is never stored as an IP address: only an irreversible hash of it is written to our records, and we cannot recover the original address from that hash.

Account information (optional)

You can generate itineraries without an account. Signing in is required only to save them, so they are waiting for you on any device where you sign in; it does not give you more itineraries, as the free allowance is the same with or without an account. Sign-in is handled through Google, and we receive your name, email address and profile picture from your Google account to create and identify your account. We never see or handle your Google password.

Passport country and country of departure (optional)

The App can show a short practical briefing for a destination — money and tipping, entry requirements, health, plug sockets, getting around. Two of those answers mean nothing without knowing who is travelling, so the trip form asks, optionally, for the country of your passport and the country you are setting off from. Those are countries, never a document: we do not ask for, see or store a passport number, any identity document, or your date of birth.

They are only stored if you have an account. Without one you are asked each time, the answer is used for that one briefing, and nothing is written down. With an account they are saved to your profile so you are not asked again, and you can see, change or clear them at any time from Your profile in the App's menu. They are also stored alongside an itinerary you save, so that trip keeps the briefing it was written with.

The two country codes are sent to our server function, which passes them to Google's Gemini model to write the briefing, and the result is cached on our servers so the same answer can serve every traveller with the same passport and destination. That cache is keyed by country, never by you: it holds no account identifier and no device identifier.

Itineraries you save

If you are signed in and choose to save an itinerary, the itinerary itself — destination, dates, daily plan, and the places it suggests — is stored in our database, linked to your account, so you can find it again on any device where you sign in. Itineraries you do not save are not stored on our servers.

Usage records

We keep a minimal ledger of generation activity: the hashed device identifier, the hashed IP address, a timestamp, and whether the request was a new itinerary or a refinement of an existing one. We also record extra itineraries you have been given — one earned by watching a rewarded video, and any you have bought — so the allowance can be counted correctly. This is what enforces the free plan. It contains no trip content and no account details.

Reports you send

Every itinerary carries a report button, so you can tell us when the AI produces something offensive, wrong or unsafe. If you use it, we store the reason you picked, anything you chose to write, and a copy of the itinerary you were looking at, linked to your account. Nothing is stored unless you tap the button and send the report.

Booking link taps

Some stops in an itinerary are things you can book, and those carry a link to a booking partner. If you follow one, we record that the tap happened: which partner, whether it came from a single activity or from the destination card, the destination, the search term we sent the partner, the type of activity, the interface language, and a timestamp, linked to your account or to your anonymous session. The search term is a public place name that we compose from the itinerary — it is never anything you wrote about yourself. We use these records to learn which suggestions travellers actually find useful, so the links can be shown where they help and taken away where they do not. We do not receive any information about what you then view, book or pay on the partner's site.

Your packing list

Traveley can turn an itinerary into a packing checklist. The list is written by the same AI model from the trip you already have — its destination, its length, the season and the activities in it — so no new information about you is collected in order to produce it.

The list is stored inside the itinerary, which means that if you save that trip the list is saved with it: the suggestions, which items you have ticked off, and any items you added yourself. Anything you type into the list is stored exactly as you wrote it, so please do not put personal or sensitive information there. For a trip you never save, the list stays on your device.

Weather (Traveley Pro)

With a Traveley Pro subscription, the packing list takes the weather into account. To do that, our server sends the approximate coordinates of places in your itinerary — rounded to about 11 km, and no more than three of them per trip — to Open-Meteo, a weather service, along with the month or the dates of the trip.

Those are the coordinates of your destination, not of you. The App still never requests location permission and never reads your device's position; the coordinates come from the itinerary the AI wrote. Nothing identifying you is sent with the request — no account, no device identifier, and not your IP address, because the request is made by our server rather than by your phone.

The answers are cached on our servers by place and month, so one answer serves every traveller going to that region at that time of year. Without a Pro subscription no weather request is made at all, and no coordinates from your trip leave our servers.

Advertising

Traveley shows two kinds of ad, both served by Google AdMob:

  • A banner at the foot of the screen while your itinerary is being generated.
  • A video you can choose to watch when you have used your free itineraries, in exchange for one more.

The ads are what pay for the App: every itinerary costs us a request to an AI model, whether or not you ever book anything. There is no ad anywhere else — in particular, none on the itinerary itself.

To serve them, Google receives technical information from your device, including your advertising identifier, your IP address, and general information about your device and the App, and may use it to select, cap and measure ads under its own privacy policy. We receive none of that back. We tell the ad network nothing about your trips: the destination you typed and the itinerary you were given are never sent with an ad request.

If you are in the European Economic Area, the UK or Switzerland, you are asked first. On first run the App shows a consent form from Google's User Messaging Platform, where you choose whether ads may be personalised. If you decline, you still see ads, but they are chosen without your advertising identifier. You can change or withdraw that choice at any time from Ad privacy choices on the App's About screen.

Watching a rewarded video is always optional, and declining one takes nothing away from you.

A Traveley Pro subscription removes both kinds of ad for as long as it is active.

Purchases

You can buy a pack of extra itineraries. We never see your card. The payment is handled entirely by Google Play or the App Store, who take the money and tell us only that a purchase was made.

What we store is the store's own transaction identifier, which product it was, how many itineraries it is worth, and the date — linked to your account. The identifier is what stops the same purchase being credited twice, and it is what we use to find your purchase if you ever ask us about it.

Buying requires signing in, and not for our convenience: a purchase is attached to your account so it follows you to a new phone. Bought without an account it could only be tied to the handset that made it, and would be lost with that handset.

There is also a subscription, Traveley Pro, which renews every month until you cancel it. It is sold and billed through Google Play on the same terms as above: we never see your card, and Google tells us only that a subscription exists and how long it is paid up for.

For a subscription we store, linked to your account, the store's purchase token, the date your access currently runs until, and the date we last checked it with the store. We re-check with Google periodically, and Google also notifies us when something changes — a renewal, a cancellation, a refund — so that access matches what has actually been paid for. We keep the token after a subscription ends, so that resuming it restores your access instead of requiring a new purchase.

You manage or cancel a subscription in Google Play, not in the App. Cancelling stops the next renewal; it does not end the month you have already paid for.

Trips kept on your device

The trips you have saved are also written to your phone's own storage, so you can read them with no connection — which is when an itinerary is usually needed. That copy never leaves your device, is removed when you sign out or delete your account, and goes with the app if you uninstall it.

Reading that copy without a connection is a Traveley Pro feature, so when you subscribe the App also stores the date your subscription runs to, whether it is set to renew, and which store sold it in the operating system’s secure storage — that is the only way it can tell whether you are entitled, and show you your subscription, while there is no server to ask. Those three facts and nothing else: no payment details, no card number, no store account. It is removed when you sign out or delete your account.

Device language

The App reads your device's language setting to display the interface in English, Spanish, Catalan, French, Italian or Russian, and generates your itinerary in that language. This setting stays on your device.

What we do not collect

  • Location. The App does not request location permission and never reads your position. “Open in Maps” simply hands a place name to Google Maps. With a Traveley Pro subscription the App does look up the weather, but from the coordinates of the destinations in your itinerary — never from your own position; see Weather above.
  • Contacts, photos, files, camera or microphone. None of these are accessed.
  • Analytics, and anything about your trips. There is no third-party analytics SDK in the App, and nothing you do inside it — the destinations you search for, the itineraries you are given, the notes you write — is shared with advertisers. Ads are served by Google AdMob, which receives technical information about your device but no trip content; see Advertising above. The App does contain affiliate booking links, which are labelled as such where they appear: if you follow one, the partner's own website may set a cookie so that a booking can be attributed to us. That happens on their site and under their privacy policy, not ours — see “Booking link taps” above for the only part we record.

How this information is used

  • To generate the itinerary you asked for, and to refine it when you request changes.
  • To write the practical briefing for a destination — money, entry requirements, health, plugs — for the passport country and country of departure you chose to give.
  • To store and retrieve the itineraries you choose to save.
  • To authenticate you when you sign in.
  • To count free itineraries and refinements, and to prevent abuse of the free plan.
  • To display activity photos and let you open a place in Google Maps.
  • To review itineraries you report, and to correct what the app produces.
  • To see which booking suggestions travellers find useful, so the links appear where they help and are removed where they are ignored.
  • To show the ads that fund the App, and to add an itinerary to your allowance when you choose to watch a rewarded video.
  • To confirm a purchase with the store and credit the itineraries it paid for, and to answer questions or refund requests about it afterwards.
  • To write your packing list, and to keep the items you tick off or add to it.
  • To look up typical or forecast weather for a Traveley Pro subscriber's trip, so the packing list matches the conditions.
  • To start, renew and end a Traveley Pro subscription, and to know whether an account currently has the access it is paying for.

We do not sell your personal data, we do not use it to build advertising profiles, and we do not use it for any purpose beyond operating the App and the services described here.

Where the EU General Data Protection Regulation applies, we rely on: performance of a contract for generating and saving your itineraries, managing your account, and delivering anything you have bought; and our legitimate interest in keeping the service available and affordable, both for the anti-abuse measures described above (device and IP hashing) and for the record of booking link taps, which tells us which suggestions are worth keeping.

For personalised advertising we rely on your consent, which is requested through the form described under Advertising and which you can withdraw at any time from the App's About screen. Where consent is declined, or is not required in your country, ads are shown without your advertising identifier on the basis of our legitimate interest in funding the App.

Third-party services

The App relies on the following third-party services, each of which processes some data under its own privacy policy:

Some of these providers process data outside the European Economic Area. Where that happens, the transfer relies on the safeguards those providers put in place, such as the European Commission's standard contractual clauses.

Data retention

Saved itineraries are kept until you delete them in the App or delete your account. Account details are kept for as long as your account exists, including the passport country and country of departure if you gave them — you can change or clear those yourself at any time from Your profile in the App. Usage records, which contain only hashed identifiers and timestamps, are kept for as long as they are needed to enforce the free plan's lifetime and monthly limits; the same applies to the record of itineraries earned from rewarded videos. Purchase records are kept for as long as tax and accounting rules require, and because a refund or a support question can only be answered from them. Records of booking link taps are kept while they remain useful for deciding where the links belong, and they survive the deletion of an account with the link to your identity removed, so that past demand for a destination is not silently rewritten. Trip details sent for generation are not retained by us beyond producing the itinerary; if you do not save it, we do not keep it. Subscription records — the store's purchase token, the current expiry date and the date it was last checked — are kept while a subscription exists and afterwards, so that resuming it restores access rather than requiring a new purchase.

Your rights

If you are located in the European Economic Area, the UK, or another jurisdiction with similar data protection laws, you may have the right to access, correct, delete, or export your data, and to object to or restrict certain processing. You can delete any saved itinerary directly in the App, and you can delete your whole account from the menu in the App — see how to delete your account for the steps and for what is removed. To exercise any other right, use the contact form on avakiam.com. You also have the right to lodge a complaint with your local supervisory authority; in Spain this is the Agencia Española de Protección de Datos.

Please note that hashed device and IP records cannot be linked back to you by us, so we may be unable to identify and delete them on request without additional information from you.

Children's privacy

Traveley is not directed at children under 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

About AI-generated content

Itineraries are produced by an AI model and may contain inaccurate information about places, opening hours, prices or travel times. They are suggestions, not verified travel advice — please check important details, such as bookings and opening times, before relying on them. The practical briefing for a destination comes from the same model and is reused for a few weeks, so it can be out of date — entry requirements above all. Always confirm visa and entry rules with an official source — your destination's embassy or consulate, or your airline — before you book or travel.

Security

Access to saved itineraries is restricted at database level so an account can only reach its own data. Traffic between the App and our servers is encrypted in transit, the device identifier is held in the operating system's secure storage, and the identifiers used for quota enforcement are stored only as irreversible hashes. No method of electronic storage or transmission is 100% secure, but we work with reputable providers and keep the App's dependencies up to date.

Changes to this policy

We may update this Privacy Policy from time to time, for example when the App adds or removes a feature or service. Material changes will be reflected by updating the “Last updated” date at the top of this page.

Contact

Questions about this Privacy Policy or your data can be sent through the contact form on avakiam.com.

Traveley plans trips with AI, and an AI can be wrong. Check opening hours, prices and availability before you travel — and especially before you book or pay for anything.