VoyTix Privacy Policy
VoyTix ("we", "us", "our") is a travel planning application. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and the choices you have. By creating an account or using VoyTix, you agree to this policy.
1. Information We Collect
Account Information
- Name — provided at registration, stored encrypted.
- Email address — used for login, verification, and support. Stored encrypted and as a one-way hash for lookups.
- Password — stored as a salted bcrypt hash. We never store or see your plain-text password.
Trip & Planning Data
- Trip destinations, dates, budgets, preferences, and itinerary content you create inside the app.
- Flight and hotel search queries and results you interact with.
Subscription & Billing
- Your subscription status (free or Pro), billing cycle, and trial/renewal dates.
- Payment card details are never stored by us — they are handled entirely by Stripe (see Third Parties below).
Usage & Analytics
- Feature usage events (e.g. which screens you visit, which features you use) — used to improve the app.
- Error and crash data to help us fix bugs.
- We do not use advertising trackers or sell data to advertisers.
Push Notifications
- If you grant notification permission, we store a flag confirming permission was granted (no device token is stored on our servers — notifications are scheduled locally on your device via Expo Notifications).
- Notifications include trip reminders, flight check-in alerts, hotel check-in/check-out reminders, and tour reminders. They are generated from your own trip data and never used for advertising.
- You can disable notifications at any time in your device settings (iOS: Settings → Notifications → VoyTix; Android: Settings → Apps → VoyTix → Notifications).
Biometric Authentication
- VoyTix offers optional Face ID (iOS) or fingerprint (Android) authentication.
- Biometric matching is performed entirely on your device by the operating system. We never receive, transmit, or store any biometric data.
- We store only an encrypted session token in your device's secure enclave to keep you signed in — not any biometric template.
Trip Sharing & Gifting
- When you generate a share link, a sanitized version of your trip (destination, dates, highlights) is accessible to anyone with the link.
- When a recipient opens your link and saves it ("claims" the trip), an encrypted copy of the full itinerary is stored in their account. By sharing a link, you consent to this.
- To count unique views of your shared link we compute a one-way anonymous fingerprint from the viewer's IP address and browser/device information. This fingerprint is used only for view counting and is not linked to any account or used for any other purpose.
Referral Programme
- When you share your invite code, we track how many friends sign up using that code so we can credit you with complimentary Pro access if you reach the referral threshold.
- We store your referral code, the number of signups attributed to it, and whether the Pro reward has been claimed. We do not share your identity with the friends you invite.
Local Device Storage
- AsyncStorage — stores non-sensitive preferences and temporary state (e.g. a pending share token while you are not logged in).
- Secure Store (iOS) / Keystore (Android) — stores your encrypted session token so you stay signed in between sessions.
- This data remains on your device and is not synced to any third party. Deleting the app removes all locally stored data.
Device Information
- Operating system, app version, and device type — used for compatibility and bug fixing only.
- VoyTix never requests GPS or precise location. To price the Ideas tab from an airport near you, our server estimates your approximate area (city level) from your IP address, using a database held on our own server, and picks a nearby major airport. If no estimate is available, it uses the origin of a trip you are planning or have saved. Your IP address and the estimated area are not stored for this purpose, are not linked to your account, and are not sent to any third party; only the chosen airport is used in the flight search. IP Geolocation by DB-IP.
2. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Authenticate your account and keep it secure | Email, password hash, session tokens |
| Deliver trip planning features | Trip data, destinations, preferences |
| Price the Ideas tab from an airport near you | Approximate area estimated from your IP address (not stored), or the origin of a trip you are planning or have saved |
| Process payments and manage subscriptions | Email (passed to Stripe), subscription status |
| Send email verification and password reset codes | Email address |
| Respond to support requests | Email, account details |
| Improve the app and fix bugs | Anonymised usage events, error logs |
3. Third-Party Services
We share limited data with the following services to operate the app:
| Service | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing & subscription management (web/direct billing) | Name, email, billing info |
| RevenueCat | In-app purchase management for Apple App Store and Google Play subscriptions | App user ID, purchase receipts (no payment card data) |
| Anthropic (Claude AI) | AI-powered itinerary generation | Trip destinations, preferences (no personal ID) |
| Amadeus | Flight search | Search queries (origin, destination, dates) |
| Google Places | Location autocomplete | Place search text |
| AviationStack | Live flight tracking | Flight numbers |
| SerpAPI | Activity and experience search | Destination and activity queries |
| Travelpayouts (affiliate network) | Affiliate programme connecting users to flight, car rental, transfer, eSIM and insurance partners | Referral click events (no personal data). A cookie may be set on the partner's site to attribute purchases. |
We do not sell, rent, or trade your personal information to any third party for marketing purposes.
Affiliate tracking: When you click a partner booking link in the app (e.g. Aviasales, GetRentacar, Airalo, EKTA, Kiwitaxi), a tracking cookie is set by the partner's website. This cookie records the referral so we can be credited if you complete a booking within the partner's attribution window (typically 30 days). We do not receive any personal or payment information from these partners — only confirmation that a sale occurred.
4. Data Security
- Passwords stored as salted bcrypt hashes — never reversible.
- Session tokens stored as one-way hashes — cannot be recovered if leaked.
- Email addresses and trip data encrypted at rest using AES-256-GCM.
- All data in transit is protected by HTTPS/TLS.
- Payment card data is handled exclusively by Stripe — we never see or store it.
5. Data Retention
- Your account data is retained as long as your account is active.
- When you delete your account (in-app or via the web deletion form), all personal data is permanently deleted within 30 days.
- Anonymised, aggregated analytics data may be retained longer for product improvement.
6. Your Rights & Controls
- Delete your account — from the Account tab in the app, or via our web deletion form.
- Access your data — email us at daronov@voytix.com and we will provide a copy of your personal data.
- Correct your data — update your name and email from within the app.
- Opt out of emails — contact support to unsubscribe from non-essential emails.
California residents may have additional rights under the CCPA. EU/UK residents may have additional rights under GDPR. Contact us at daronov@voytix.com to exercise any of these rights.
7. Children's Privacy
VoyTix is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at daronov@voytix.com and we will delete it promptly.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. Continued use of the app after changes constitutes acceptance of the new policy.
9. Contact Us
Questions about this policy? Contact us at daronov@voytix.com.