Travo Privacy Policy

Personal Data
While using our App, we may ask you to provide us with certain personally identifiable information, such as your email address, to use some of our services. We use this information to provide and improve our services.

Location Data
We use location data such as GPS to provide the core services of Travo, such as locating nearby monuments and points of interest. You can enable or disable location services through your device settings.

Usage Data
We may also collect data on how the App is accessed and used. This may include information such as your device's Internet Protocol address (e.g. IP address), browser type, and other diagnostic data.

Use of Data
Travo uses the collected data for various purposes:

• To provide and maintain our services
• To notify you about changes to our services
• To provide customer support
• To detect, prevent and address technical issues

Disclosure of Data
We may disclose your data if required to do so by law or in response to valid requests by public authorities. We may also disclose your information if we believe that such action is necessary to comply with the law, protect against fraud, or protect the property or safety of Travo, our users, or others.

We use the following service providers to run Travo. They process data only to provide their service to us.

• Firebase (Google): sign-in (Authentication), app usage analytics (Analytics), crash reports (Crashlytics) and push notifications (Cloud Messaging). Data: account identifier, email address, device and app information, app usage events, crash details and a push notification token.
• Sign-in providers (Google, Apple, Facebook, X): if you choose to sign in with one of them, the provider shares basic profile data with us, such as your name and email address.
• RevenueCat, Apple App Store and Google Play: in-app subscriptions and purchases. Data: an app user identifier, purchase and subscription status. Payment details are handled by Apple or Google, not by us.
• Stripe: subscriptions bought on our web app. Data: email address, subscription and payment status. Card details are handled by Stripe, not by us.
• PageDuel: product analytics in the app and on our website. Data: app and page usage events and device and browser information.
• Microsoft Azure OpenAI: AI features such as place descriptions and facts, audio guides, trip itineraries, finding places in video transcripts and reading booking emails you forward to us. Data: the content needed for the request, such as a place or city name, your trip details, a video transcript or the text of a forwarded email.
• OpenAI: converting the audio of an imported video to text when the video has no transcript. Data: the audio of the video you import.
• Amazon Web Services (AWS): hosting of our servers and database, and email (Amazon SES) for receiving booking emails you forward to us and sending verification codes. Data: your account and trip data, forwarded emails and their PDF attachments.
• Google Maps, OpenStreetMap and CARTO: maps and place information. Data: the map area you view and, when you allow it, your location to show nearby places.
• Telegram: internal error reports sent to our team. Data: error details, device information (such as model and operating system) and the screen where the error happened.

When you import a video, we fetch the YouTube, Instagram or TikTok link you provide to get its transcript or audio. When you forward a booking email, we process the email and its PDF attachments to add the booking to your trip.

The Travo app does not show ads. We do not use your device advertising identifier (IDFA on iOS, AAID on Android) for advertising or to track you across other companies' apps and websites.

Our website travo.me uses Google Analytics 4 and PageDuel to understand how visitors use the site, for example which pages are viewed and where visitors come from. These tools may collect your IP address, browser and device information and the pages you visit. Google Analytics may set cookies in your browser.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the data, and whether we can achieve those purposes through other means, as well as the applicable legal, regulatory, tax, accounting, or other requirements.

By law, we also have to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers for tax purposes.

You are entitled to delete your account directly via the App, and in some circumstances, you can ask us to delete your data. In some circumstances, we will anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

• Request access to your personal data
• Request correction of your personal data
• Request erasure of your personal data
• Object to processing of your personal data
• Request restriction of processing your personal data
• Request transfer of your personal data
• Right to withdraw consent

If you wish to exercise any of the rights set out above, please contact us.

You have the right to see the personal data we hold about you. This is called a Subject Access Request. If you would like a copy of the personal data we hold about you, please email us at hi@travo.me.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

We may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

We may update our Privacy Policy from time to time. You are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted on this page.