Privacy Policy
Last updated: 14 August 2026 · Effective: 14 August 2026
Vionaut is an AI travel-itinerary app. This policy describes exactly what we collect, why, who processes it on our behalf, and how you delete it. We do not sell your data, we do not show ads, and we do not track you across other apps or websites.
1. Who we are
Vionaut ("Vionaut", "we", "us") is an independently developed mobile application. For the purposes of the EU/UK GDPR we are the data controller for the data described below. For India's Digital Personal Data Protection Act, 2023 (DPDP) we are the Data Fiduciary.
Contact for any privacy question or request: privacy@vionaut.app
2. What we collect
| Category | What it is | Why we need it |
|---|---|---|
| Account & identity | Your email address and the identity returned by the sign-in provider you choose (Google, or Apple where offered), plus your authentication sessions. Your name and profile picture where the provider supplies them. | To create your account, sign you in, and make sure only you can read and edit your own trips. |
| Profile & travel preferences | Display name, avatar, and the preferences you choose during onboarding or later — travel vibe, pace, who you travel with — plus any standing instructions you save for the AI. | To personalise the itineraries we generate for you. |
| Your trips | The destinations and dates you enter, the itineraries generated for you, and any edits you make to them. | This is the product. Your trips are saved to your account so you can return to them. |
| Product analytics | Your account identifier, and a fixed, short list of usage events (app opened, sign-up completed, generation started / succeeded / failed, trip saved). Alongside these, our analytics SDK records standard app and device information: app version and build, device type, manufacturer and model class, OS name and version, screen size, whether the app is running on an emulator, and a session identifier. | To understand whether the app works and whether people find it useful. |
| Diagnostics | Crash and error reports. These are scrubbed before they leave your device and before they are stored: user objects, request bodies, headers and cookies are removed, and only recognised error messages are kept. Release-health reporting includes an anonymous per-installation identifier that is not linked to your account. | To find and fix crashes. |
| Stored on your device | Your travel preferences, your chosen display currency, and a flag recording that you have seen the onboarding screens. | So the app remembers your settings. This stays on your device. |
What we do not collect
- Your location. Vionaut does not request or use your device's location. The map screen does not show your position. Our analytics provider is configured not to derive an approximate location from your IP address.
- Your contacts, photo library, microphone, camera, SMS, or health data. When you share a trip, the app creates an image and hands it to your phone's own share sheet; it does not read your photo library.
- Payment or financial information. The current version of Vionaut has no purchases of any kind. See section 10.
- Advertising identifiers. We run no advertising and no cross-app or cross-site tracking.
- Your email address, your destinations, your prompts, or the AI's responses inside our analytics. None of these are ever attached to an analytics event.
3. How your data is used
- To provide the service: generating, saving, editing and displaying your itineraries.
- To authenticate you and keep your trips private to your account.
- To apply free-tier usage limits (a daily number of generations and AI edits), which we count from your own saved trips.
- To measure whether the product works — activation, retention, and generation success rates — in aggregate.
- To diagnose crashes and errors.
- To respond to you when you contact us.
We do not use your data for automated decisions that produce legal or similarly significant effects, and we do not use it to build advertising profiles.
Legal bases (GDPR)
- Performance of a contract — your account, your trips, and generating itineraries you ask for.
- Legitimate interests — keeping the service secure and working (rate limiting, crash diagnostics, aggregate product analytics).
- Consent — where consent is the applicable basis, you give it at the point of collection and may withdraw it by deleting your account.
4. AI processing
When you generate or edit an itinerary, the details you have supplied — your destination, dates and preferences — are sent to Google Cloud's Vertex AI to produce the itinerary. This processing is carried out by Google as our processor under our Google Cloud agreement.
Your prompts and the model's responses are used to return your itinerary. Vionaut does not store a separate copy of your prompt at the AI provider, and the itinerary that comes back is saved to your account in our own database.
On where AI processing happens. Vionaut uses Google's global endpoint for Vertex AI. This means requests are routed across Google's regions rather than pinned to a single country, and we therefore do not offer a data-residency guarantee for AI processing. We state this plainly rather than imply a locality we do not enforce.
AI output is suggestion, not fact. The app shows a disclaimer to this effect: always verify opening hours, prices, availability and travel requirements yourself.
5. Who processes data on our behalf
We use the following service providers. Each one processes data only to provide its service to us. We do not sell personal data to anyone, and we do not share it for cross-context behavioural advertising.
| Provider | Purpose | What it receives |
|---|---|---|
| Clerk | Authentication | Email, sign-in identity, sessions |
| MongoDB Atlas | Primary database | Profile, preferences, trips |
| Google Cloud (Vertex AI) | AI itinerary generation | Destination, dates, preferences you supply |
| Google Maps Platform | Map display on Android | Map tile requests for the places in your itinerary |
| PostHog | Product analytics | Account identifier, the listed events, app/device information |
| Sentry | Crash and error diagnostics | Scrubbed error reports; anonymous per-install identifier |
| Railway | Application hosting | Processes requests in transit |
| Unsplash | Destination photography | The destination name only — never your identity |
| Upstash Redis | Currency-rate cache | No personal data — currency rates only |
| Frankfurter | Currency exchange rates | No personal data — no user data is sent |
| Cloudflare | Hosting of this website | Standard web request data for these pages |
We may also disclose data where we are legally required to, or to protect the rights, safety and security of our users or the service.
6. International transfers
Vionaut is available globally and our providers operate internationally, so your data may be processed in countries other than your own — including the United States. Where required, transfers rely on the relevant provider's transfer mechanisms, such as Standard Contractual Clauses. As stated in section 4, we do not guarantee that AI processing occurs in any particular country.
7. How long we keep data
| Data | Kept for |
|---|---|
| Account, profile, preferences, trips | The life of your account. Deleted when you delete your account. |
| Authentication data | The life of your account. |
| Product analytics | The life of your account, then deleted on request as part of account deletion. |
| Crash and error reports | Our diagnostics provider's standard retention period. These reports are scrubbed and are not linked to your account. |
| Data on your device | Until you delete the app or clear its data. |
| Currency-rate cache | 24 hours. Contains no personal data. |
8. Your rights
Wherever you live, you can access the data we hold about you, ask us to correct it, and delete your account and its data. You can also ask us to explain what we hold and why.
- India (DPDP). You have the right to access a summary of your personal data and our processing, to correction and erasure, to grievance redressal, and to nominate another person to exercise your rights. Contact us at privacy@vionaut.app and we will respond.
- EU / UK (GDPR). Access, rectification, erasure, restriction, portability, and objection. You may also complain to your local supervisory authority.
- California (CCPA/CPRA). Know, delete, correct, and opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of. We will not discriminate against you for exercising any right.
To exercise any of these, email privacy@vionaut.app, or delete your account directly using the steps below.
9. Deleting your account
You can delete your account in two ways:
- In the app — open Profile and choose Delete Account.
- From the web — use our account deletion page, which works even if you can no longer sign in.
Deleting your account removes your profile and every trip you have saved from our database, and removes your authentication account — immediately, when you delete in the app. Removing your analytics record is completed as part of processing your deletion, and in every case within 30 days. Data held on your own device is removed when you sign out after deletion, or when you uninstall the app or clear its data. Scrubbed crash reports are not linked to your account and expire on our diagnostics provider's standard retention schedule.
Deletion is permanent — your saved itineraries cannot be recovered afterwards.
10. If you subscribe
This section does not apply to the current version of Vionaut. The app as released today has no subscription, no paywall and no purchases, and we collect no payment or transaction data of any kind.
It is published in advance so that you know what would change if we introduce a paid plan in a future release.
If Vionaut later offers a paid subscription, the purchase itself would be processed by Google Play. We would never receive or store your card number or bank details — Google does not give them to us. To manage subscriptions we would use a subscription-management provider, and we would additionally process:
- your subscription status — whether you are on a free trial, active, lapsed or cancelled, and which plan;
- store transaction identifiers issued by Google Play, used to validate your purchase and restore it on a new device;
- the identifiers that link your purchase to your Vionaut account.
We would use this only to unlock the features you paid for, to restore purchases, and to handle billing support. Purchase records would be kept for the life of your account, except where tax or accounting law requires us to keep transaction records for longer. Deleting your account would also delete your customer record at our subscription provider; it would not by itself cancel a subscription bought through Google Play, which you cancel in your Google Play account.
Before any of this takes effect we will update this policy, update our Google Play Data Safety declaration, and disclose the price, billing period and auto-renewal terms in the app.
11. Children
Vionaut is not directed to children. The app is rated for users aged 13 and over, and we do not knowingly collect personal data from anyone under 13. Where local law sets a higher age of digital consent, you must meet that age or have your parent or guardian's consent. If you believe a child has given us personal data, contact privacy@vionaut.app and we will delete it.
12. Security
Data is transmitted over encrypted connections and stored with the providers listed in section 5. Access to your trips is restricted to your own account. Crash reports are scrubbed of personal data before transmission, and our server logs are written without personal information. No system is perfectly secure, but we treat any incident affecting your data seriously and will notify you and the relevant authority where the law requires it.
13. Changes to this policy
If we change this policy we will update the date at the top of this page. For material changes — for example, introducing subscriptions as described in section 10 — we will make the change clear in the app before it takes effect.
14. Contact
Privacy questions, data requests, and grievances: privacy@vionaut.app. We aim to respond within 30 days.