Privacy policy
Last updated 24 October 2026
The short version
- Your photos and videos never leave your iPhone or iPad. Memories are made on the device.
- We keep what the app needs to plan your holidays: your family's preferences, your holidays and your plans.
- We don't show adverts, track you across apps or websites, or sell your information.
- AI suggestions see your family's preferences, children's age ranges and where you're staying, never names or photos.
- Deleting your account in the app deletes everything we hold about you. You can also download a copy of it in the app.
Who we are
Vayanza is provided by Antonio Pagliara, a sole trader trading as Vayanza (“we”, “us”). We are the controller of the personal information described here.
Contact: hello@vayanza.app
What we collect and why
Your account
You sign in with Apple. Apple gives us an identifier for your account, which we link to a random Vayanza account number. We don't ask Apple for your name or email address and we don't keep them. We store a sign-in token from Apple, encrypted, so we can end the link with Apple when you delete your account.
Your family
What you tell us in family setup: the names or nicknames you give each person, whether each is an adult or a child, and an age range (never a date of birth). Also your interests, things to avoid, the food you love, budget, how far you're happy to travel, and whether you use public transport. We use these to choose and explain suggestions. Preferences the app learns from your feedback are shown to you, and are kept only when you confirm them.
Dietary and mobility needs
If you choose to add dietary or mobility needs, they may say something about someone's health. They're optional. We use them only to filter and explain suggestions, with your explicit consent, which you give by adding them. You can remove them at any time in family setup.
Your holidays
Destinations, dates, time zones, where you're staying (a hotel's name or an address you type), ideas you save or reject, the days you plan, reservations you add, routes you ask for, and your ratings and feedback.
When you search, we keep the search (the topic you chose, or what a typed question was about, never its words) and its results for up to 30 days, so you can come back to them. A question you type is sent to find answers and not stored.
Your location
Only when you ask for something near you, such as “near me” suggestions or Today. The app asks for your location while you're using it, never in the background. Your position is sent with that request to find nearby places and kept, rounded to about 11 metres, with that search for up to 30 days; it isn't saved to your holidays. For Today's weather we use only a rough area, rounded to about 11 kilometres.
Photos and videos
If you allow Photos access, the app reads your photos' dates and places on your iPhone or iPad to match them to your holiday. Your photos, videos and highlight videos are never uploaded to us or to anyone else, and are never used to train AI. What the app remembers about them (which photo belongs to which day) stays on your device.
Purchases
Apple handles payment; we never see your card details. Apple sends us the purchase's transaction details (product, dates, renewals, refunds) so we can unlock your plan or Trip Pass, and an anonymous account token so a purchase is matched to the right account.
Device check
To stop scripts misusing paid features, the app uses Apple's App Attest to show our server that requests come from the genuine Vayanza app on a real iPhone or iPad. We store the key App Attest creates for the app on your device, and no device identifier.
Feedback you send
If you send feedback about the app, we keep your answer, any comment you write and the app and iOS versions for 12 months.
If you email us
When you write to hello@vayanza.app we receive your email address, any name you include and what you write. We use them only to reply to you. They aren't linked to your Vayanza account unless you give us your Account ID.
Anonymous usage counts
We keep anonymous daily totals of how the app is used, such as how many searches were made, and anonymous sales totals. They don't identify you and stay after an account is deleted.
Technical records
Our servers record requests (time, account number, what kind of request, whether it worked) to keep the service secure and fix problems. They don't record what you searched for or your family's details. If you share analytics with app developers in your device's settings, Apple sends us crash reports (device model, iOS and app versions and where the app stopped).
Our legal reasons
| What | Lawful basis (UK GDPR) |
|---|---|
| Your account, family, holidays, plans and purchases | Contract: to provide the app you asked for |
| Dietary and mobility needs | Explicit consent, which you can withdraw by removing them |
| Your location and Photos access | Consent, given in iOS and changeable in Settings |
| Security, abuse prevention, technical records and improving the app | Legitimate interests in keeping Vayanza safe and working |
| Purchase records | Legal obligation to keep business records, and contract |
Who we share it with
We use these services to run Vayanza. Each may process your information only on our instructions, for this purpose.
| Service | What for | What they receive |
|---|---|---|
| Amazon Web Services (London region) | Hosting our servers and database | Everything we hold, stored in the UK |
| OpenAI | Understanding your questions, choosing and describing suggestions, and arranging days | Destination, where you're staying (the hotel's name or address you typed, to find ideas near it), interests, dislikes, dietary and mobility needs, budget, children's age ranges, the food you love, preferences you've confirmed, your plans and places, a question you type, and the area and nearby places when you search from where you are. OpenAI may use where you're staying and your destination in web searches it makes for us. Never names, photos or your account details. We ask OpenAI not to store requests; it may keep them for up to 30 days to check for abuse, and doesn't use them to train its models. |
| Apple | Sign in, Maps (places and journey times), weather, App Store payments and App Attest | Your Apple sign-in, where you're staying and the places and positions needed for searches and routes, a rough area for weather, and purchase details |
| Viator | Finding bookable tours that fit your search | The destination, a place's name or the kind of place you're looking for, and the area when you search from where you are. Never who you are or your family's details. |
| Wikidata and Wikipedia | Popular sights and their photos | The destination, or a sight's name and position |
| Cloudflare, Google (Gmail) and Amazon SES | Receiving and answering your emails to hello@vayanza.app | Your email address and your messages |
Booking partners. Some suggestions link to tours on Viator. If you open one, you leave Vayanza and Viator's own privacy policy applies. The link tells Viator that you came from Vayanza, so we may earn a commission; it carries nothing about you or your family.
Photos on cards. A place's photo is loaded straight from the place's own website or from Wikimedia Commons, and a tour's photo from Viator, when the card is shown, so that site sees your device's internet address, as with any web page. We never store these photos.
Maps apps. When you open directions, Apple Maps or Google Maps receives the places you're travelling between.
We don't sell your information or share it for advertising. We'd disclose it only if the law required it.
Outside the UK
OpenAI, Apple, Google and Cloudflare may process information in the United States. Where they do, it's protected by safeguards UK law approves, such as the UK–US data bridge or the UK International Data Transfer Addendum.
How long we keep it
- Your account, family and holidays: until you delete them or your account.
- Searches and their results, and suggested day arrangements: up to 30 days, then deleted automatically.
- Feedback you send about the app: 12 months.
- Support emails: deleted within 12 months of our last message with you.
- Sign-in sessions: 30 days.
- Technical records: 14 days.
- Purchase records: as long as the law requires us to keep business records (usually six years), without your family's details.
- Backups: our database backups roll over within 30 days. If we ever restore one, we delete again anything deleted since it was made.
When you delete your account in the app (Account settings › Delete account), we delete your account, family, holidays, plans, feedback and any unexpired Trip Pass from our servers straight away, and end the link with your Apple sign-in. The app also clears what it holds on your device. We keep only the deleted account's random number, for 31 days, so a restored backup can't bring it back, and backups roll over within 30 days. Deleting your account doesn't cancel an App Store subscription: cancel it in Settings first. You can also delete a single archived holiday permanently in the app.
Children
Accounts are for adults. A parent or guardian can add their children to the family, by name or nickname and an age range only, so suggestions suit them. Children don't have their own accounts and we never ask for a child's date of birth.
Your rights
You can ask us for a copy of your information, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. Most of it you can see, change and delete in the app yourself, and you can download a copy of what we hold in Account settings › What's stored where › Download your data. Email hello@vayanza.app for anything else; we'll reply within a month.
If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Security
Your information is encrypted in transit and at rest. Sign-in tokens are stored encrypted, and our servers check on every request that you can only see your own family's information.
Changes
If we change this policy in a way that matters, we'll tell you in the app before it takes effect. The date at the top shows the latest version.