Voiager Privacy Policy
Last updated: 13 October 2026
⚠️ Draft pending legal review. The controller’s details need filling in and a professional needs to review this before publication. The bracketed fields are deliberately blank.
This policy explains what data Voiager handles, what for, who it is shared with and what you can do about it. It is written to be understood. If anything is unclear, ask us at [email protected] and we will clarify it.
1. Who the controller is
- Controller: [LEGAL NAME]
- Tax ID: [NIF/VAT]
- Address: [FULL ADDRESS]
- Contact: [email protected]
2. What data is handled
2.1 Account data
Email address, password (always stored hashed, never in the clear and never readable by anyone) and preferred language.
2.2 What you record and upload
- The original audio of every voice note.
- The verbatim transcript of that audio.
- Photos you add to a day of a trip.
- Location coordinates at the moment of recording or of dropping a place pin, plus the associated place name.
- Date and time of every memory, with its time zone.
2.3 What the app infers
From the above it generates: summaries, topic tags, a tone indicator, numeric representations of the text so it can be searched by meaning (embeddings), daily summaries with follow-up questions, trip stories, and a traveller profile holding preferences, dietary requirements, interests and travel style, built from what you say out loud.
This derived data is regenerable: it can be deleted and recomputed without affecting the original audio or the transcript.
2.4 Trip data
Name, dates, destinations, planned months, the description of what you want out of the trip, and the cities the app logs automatically while it is in use.
And each trip’s plan, if you use it: the places you save, with their city, their type (see, eat, stay or do), their day, their time, where they are on the map and whether you did them; the list of things to do before you leave; your notes; and the conversation with the planner.
The questions you ask in the chat about your memories, with what was said earlier in that conversation, and the preferences you type to ask for a Tips recommendation are sent to answer them and are not stored.
2.5 Technical data
IP address and access logs, used solely for security and to prevent abuse.
2.6 Waiting list
If you leave your email at voiager.app: the address, the language of the page, which form on the page it came from, and the date.
2.7 Emails sent to us and emails we write
If you write to hello@, support@ or [email protected]: your address, your name (if your email includes it), the addresses you sent it to, the address you ask us to reply to, the subject, the text of the message, the name, type and size of each attachment, the spam score the email provider calculates, and the date. The reply we send you is kept too. The attachments themselves and the HTML version of the message are not stored.
If Voiager writes to you first from those addresses (for example, to pick up something that started elsewhere), we keep your address, the subject, the text and the date.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Creating and maintaining the account, and providing the service | Performance of a contract (art. 6(1)(b)) |
| Storing, transcribing and processing audio, photos and text | Performance of a contract (art. 6(1)(b)) |
| Building the traveller profile to personalise suggestions | Performance of a contract (art. 6(1)(b)) |
| Using your location to place memories and give nearby recommendations | Consent (art. 6(1)(a)), withdrawable at any time from your device permissions |
| Sending the launch notice to the waiting list | Consent (art. 6(1)(a)), withdrawable from any email |
| Security, abuse prevention and rate limiting | Legitimate interest (art. 6(1)(f)) |
| Answering the emails sent to us and keeping track of the conversation | Legitimate interest in answering whoever writes (art. 6(1)(f)); if the question is about your own account, performance of a contract (art. 6(1)(b)) |
| Writing to someone from our addresses (for example, to pick up something that started elsewhere) | Legitimate interest (art. 6(1)(f)) |
There is no advertising, no commercial profiling, no selling of data and no automated decision-making with legal effects.
4. Who it is shared with
Voiager does not sell or hand over data. To work, it relies on providers acting as processors, under contract and only on the controller’s instructions:
| Provider | What for | What it receives | Where |
|---|---|---|---|
| OpenAI Ireland Ltd | Transcribing audio, generating summaries, stories and recommendations (and plans, when the planner uses its fallback model), and answering questions about memories and searching them | The audio, its transcript, the traveller profile, trip text, what the traveller types in the chat about their memories (the question and what was said earlier in that conversation), what they search for in their memories (to work out its meaning), the preferences they type for a Tips recommendation, the phone’s position when it asks for recommendations, and the places in the trip plan — their name, their city, their type (see, eat, stay or do), whether they are done and how far away the traveller is — for Tips recommendations and questions about the trip | USA |
| Anthropic Ireland, Limited | Helping plan the trip: the plan chat, the before-you-go list and organising the days | What the traveller types or dictates in the plan chat; the trip’s name, dates (or the months it could take place) and destinations, and the name and destinations of their previous trips; their traveller profile (which may include their dietary requirements or nationality, if they shared them); what they said they want from that trip; what is saved in the plan, including dismissed to-dos; and the app language | USA |
| Cloudflare, Inc. | Storing audio and photos; and receiving and forwarding emails addressed to @voiager.app | The files; and, for each email sent to us, the sender, the recipient and the whole message | USA (the files are stored in Western Europe) |
| Railway | Hosting the servers and the databases, including the email one | All service data | EU (Netherlands) |
| Sendinblue SAS (Brevo) | Receiving the emails sent to us, delivering our replies and the emails we write, and sending notices to the waiting list | The address and name of whoever writes and the content of the message; the address of whoever we write to; the waiting-list address | EU (France) |
Important about the AI: content sent to the OpenAI and Anthropic APIs is not used to train their models, under the terms of their business APIs.
Map and weather services are also queried, and no identifier of the traveller is sent to them (not their name, email or account):
- Open-Meteo (weather) receives the phone’s position.
- Overpass / OpenStreetMap (nearby places) receives the phone’s position and, if the traveller shared them in their profile or in the request, their dietary requirements, to look for places that meet them.
- Nominatim / OpenStreetMap (the area name, and where a place is) receives, from Voiager’s server, the phone’s position or the point the traveller picks or moves on the map, what they type to search for a place, the name of each place in their plan, as they wrote it, with its city, and the app language. Nominatim does not receive the phone’s IP address.
- OpenStreetMap (the map tiles when picking a place) receives, from the phone, its IP address and the area of the map being viewed.
- OpenFreeMap (the map tiles) receives, from the phone, its IP address and the area of the map being viewed.
International transfers
Some providers are in the United States. Those transfers rely on the Standard Contractual Clauses approved by the European Commission and/or the EU-US Data Privacy Framework, depending on the provider.
5. How long it is kept
- While the account is active, all content is kept: that is the point of the product.
- On request to close the account, data is deleted within a maximum of 30 days, except anything that must be kept by law.
- The waiting list is kept until launch or until you unsubscribe, whichever comes first.
- Emails sent to us and the ones we write, with our replies, are kept for up to 24 months from when they arrive or go out, so we can answer and follow the conversation, and are then deleted automatically. You can ask for them to be deleted sooner by writing to [email protected]. Anything deleted may remain in the email database’s backups until they are rotated.
- Technical logs are kept for a maximum of 12 months.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw consent at any time, by writing to [email protected] from your account address.
- Requests are answered within a maximum of one month.
- An honest note about deletion and export: the app does not yet have a button that deletes or exports everything automatically. Until it does, both requests are handled manually within that legal deadline. We say so here rather than leaving it implied.
If you believe your data is not being handled properly, you have the right to complain to the Spanish Data Protection Agency (www.aepd.es) or to your own national supervisory authority.
7. Cookies and tracking
- The voiager.app site uses no cookies, no analytics, no pixels and no third-party trackers. That is why there is no consent banner: there is nothing to consent to.
- The app stores on your device only what it needs to work: your session, your preferences, and recordings that have not been uploaded yet. That is technical storage, not tracking.
8. Security
- All traffic is encrypted over HTTPS.
- Passwords are stored hashed; nobody can read them.
- File storage is private: audio and photos are only served through signed links that expire after 24 hours.
- Each person can only reach their own content; that separation is verified automatically on every build of the server.
9. Minors
The service is not aimed at anyone under 16 and we do not knowingly collect data from anyone below that age. If we find such an account, we delete it.
10. Recordings featuring other people
Voiager records the voice of the person using the app. If a recording captures the voice or data of other people, the person recording is responsible for having their knowledge and consent where the law requires it.
11. Changes
If this policy changes materially, we will say so by email and inside the app before the change takes effect. The date of the last update is at the top.