Voiager Privacy Policy
Last updated: 27 August 2026
⚠️ Draft pending legal review. The controller’s details need filling in and a professional needs to review this before publication. The bracketed fields are deliberately blank.
This policy explains what data Voiager handles, what for, who it is shared with and what you can do about it. It is written to be understood. If anything is unclear, ask us at [email protected] and we will clarify it.
1. Who the controller is
- Controller: [LEGAL NAME]
- Tax ID: [NIF/VAT]
- Address: [FULL ADDRESS]
- Contact: [email protected]
2. What data is handled
2.1 Account data
Email address, password (always stored hashed, never in the clear and never readable by anyone) and preferred language.
2.2 What you record and upload
- The original audio of every voice note.
- The verbatim transcript of that audio.
- Photos you add to a day of a trip.
- Location coordinates at the moment of recording or of dropping a place pin, plus the associated place name.
- Date and time of every memory, with its time zone.
2.3 What the app infers
From the above it generates: summaries, topic tags, a tone indicator, numeric representations of the text so it can be searched by meaning (embeddings), daily summaries with follow-up questions, trip stories, and a traveller profile holding preferences, dietary requirements, interests and travel style, built from what you say out loud.
This derived data is regenerable: it can be deleted and recomputed without affecting the original audio or the transcript.
2.4 Trip data
Name, dates, destinations, planned months, the description of what you want out of the trip, and the cities the app logs automatically while it is in use.
2.5 Technical data
IP address and access logs, used solely for security and to prevent abuse.
2.6 Waiting list
If you leave your email at voiager.app: the address, the language of the page, which form on the page it came from, and the date.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Creating and maintaining the account, and providing the service | Performance of a contract (art. 6(1)(b)) |
| Storing, transcribing and processing audio, photos and text | Performance of a contract (art. 6(1)(b)) |
| Building the traveller profile to personalise suggestions | Performance of a contract (art. 6(1)(b)) |
| Using your location to place memories and give nearby recommendations | Consent (art. 6(1)(a)), withdrawable at any time from your device permissions |
| Sending the launch notice to the waiting list | Consent (art. 6(1)(a)), withdrawable from any email |
| Security, abuse prevention and rate limiting | Legitimate interest (art. 6(1)(f)) |
There is no advertising, no commercial profiling, no selling of data and no automated decision-making with legal effects.
4. Who it is shared with
Voiager does not sell or hand over data. To work, it relies on providers acting as processors, under contract and only on the controller’s instructions:
| Provider | What for | What it receives | Where |
|---|---|---|---|
| OpenAI, L.L.C. | Transcribing audio and generating summaries, stories, recommendations and plans | The audio, its transcript, the traveller profile and trip text | USA |
| [Object storage provider] | Storing audio and photos | The files | [Region] |
| Railway | Hosting the server and database | All service data | [Region] |
| Resend | Sending emails (waiting list and service notices) | The email address | USA/EU |
Important about the AI: content sent to the OpenAI API is not used to train its models, under the terms of its business API.
Services that receive no personal data at all, only approximate coordinates, are also queried: Open-Meteo (weather), Nominatim / OpenStreetMap (area name) and Overpass / OpenStreetMap (nearby places). No user identifier and no content is sent to them.
International transfers
Some providers are in the United States. Those transfers rely on the Standard Contractual Clauses approved by the European Commission and/or the EU-US Data Privacy Framework, depending on the provider.
5. How long it is kept
- While the account is active, all content is kept: that is the point of the product.
- On request to close the account, data is deleted within a maximum of 30 days, except anything that must be kept by law.
- The waiting list is kept until launch or until you unsubscribe, whichever comes first.
- Technical logs are kept for a maximum of 12 months.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw consent at any time, by writing to [email protected] from your account address.
- Requests are answered within a maximum of one month.
- An honest note about deletion and export: the app does not yet have a button that deletes or exports everything automatically. Until it does, both requests are handled manually within that legal deadline. We say so here rather than leaving it implied.
If you believe your data is not being handled properly, you have the right to complain to the Spanish Data Protection Agency (www.aepd.es) or to your own national supervisory authority.
7. Cookies and tracking
- The voiager.app site uses no cookies, no analytics, no pixels and no third-party trackers. That is why there is no consent banner: there is nothing to consent to.
- The app stores on your device only what it needs to work: your session, your preferences, and recordings that have not been uploaded yet. That is technical storage, not tracking.
8. Security
- All traffic is encrypted over HTTPS.
- Passwords are stored hashed; nobody can read them.
- File storage is private: audio and photos are only served through signed links that expire after 24 hours.
- Each person can only reach their own content; that separation is verified automatically on every build of the server.
9. Minors
The service is not aimed at anyone under 16 and we do not knowingly collect data from anyone below that age. If we find such an account, we delete it.
10. Recordings featuring other people
Voiager records the voice of the person using the app. If a recording captures the voice or data of other people, the person recording is responsible for having their knowledge and consent where the law requires it.
11. Changes
If this policy changes materially, we will say so by email and inside the app before the change takes effect. The date of the last update is at the top.