Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, and authentication credentials when you register via email/password, Google, or Apple Sign In.
• Profile Data: Display name, username, biography and avatar. These are visible to other travellers.
• Travel Documents: Passport details and nationality (optional), travel documents and receipts you upload. These are stored on our servers, not only on your device, so they are available when you sign in elsewhere. They are readable only by your own account.
• Optional Age Range: A coarse age bracket, not a date of birth. Stored separately from your profile and never shown to anyone.
• Transaction Data: Email address for eSIM delivery and purchase history. We do not collect or store payment card details.
• Trip Data: Destinations, dates, flights, bookings, packing lists you create within the Service.
• Communications: Messages you send to our support team via WhatsApp or email.

1.2 Information Collected Automatically

• Website usage data: If — and only if — you opt in to analytics cookies on this website, pages visited and interactions may be recorded. Analytics are not currently enabled: no measurement ID is configured, so no analytics script loads even after consent. See Section 7.
• The Aviendra app collects no usage analytics at all. It records no screen views, no taps and no sessions.
• Device Information (website): Browser type, operating system and device type, only under the same consent-gated analytics described above.
• Push token (app): If you turn notifications on, a device token so alerts can reach you. Deleted when you turn them off or sign out.
• Locale and time zone (app): So dates, times and currencies are correct.
• Precise location (app, optional): Only while you are using the app, to show where you are on your journey map and to give directions to places on your itinerary. We do not track you in the background.

1.3 Information We Do Not Collect

• Payment card numbers, CVV codes, or banking details (handled entirely by Stripe)
• Precise geolocation without explicit permission, and never in the background
• Your device address book — Aviendra has no access to your contacts and does not ask for it
• Advertising identifiers. Aviendra does not track you across apps or websites and contains no advertising or attribution software
• Microphone or audio recordings
• Biometric data
• Data from children under 16 (see Section 12)

2. Legal Basis for Processing (GDPR)

We process personal data under the following legal bases:

• Contract Performance: Processing necessary to provide the Service, deliver eSIMs, process bookings, and manage your account (Art. 6(1)(b) GDPR).
• Consent: Analytics cookies and marketing communications (Art. 6(1)(a) GDPR). You can withdraw consent at any time.
• Legitimate Interest: Security monitoring, fraud prevention, and service improvement (Art. 6(1)(f) GDPR).
• Legal Obligation: Retaining transaction records as required by Swiss and EU tax law (Art. 6(1)(c) GDPR).

3. How We Use Your Information

• Provide, operate, and maintain the Service
• Process transactions and deliver purchased eSIMs via email
• Send transactional notifications (order confirmations, eSIM delivery)
• Generate AI trip suggestions and packing recommendations
• Track flights and provide real-time updates
• Improve and develop features based on aggregated, anonymized usage data
• Communicate updates and offers (only with explicit consent)
• Prevent fraud and ensure security of the Service
• Comply with legal obligations

4. Data Storage and Security

Your data is stored on Supabase servers in the EU (AWS eu-west-1, Ireland). We implement the following security measures:

• Encryption in transit using TLS 1.2+ for all connections
• Encryption at rest for database storage (AES-256)
• Row-level security (RLS) policies in Supabase ensuring users can only access their own data
• Secure session handling via HTTP-only cookies
• No sensitive data stored in URLs, logs, or client-side storage beyond authentication tokens
• All payment processing handled by PCI DSS Level 1 compliant providers (Stripe)
• Access restricted to authorized personnel on a need-to-know basis
• Regular security reviews and dependency updates

5. Third-Party Data Processors

We share data with the following third-party service providers, each acting as a data processor under written agreements:

We do not sell, rent, or trade your personal information to any third party. We do not share data with data brokers or advertising networks.

6. AI and Data Processing

Aviendra's AI features are powered by OpenAI, reached through our own server so that no AI provider key is ever held by the app. When you use AI features:

• The text of your request is sent to OpenAI for processing. This can include journey details you asked about
• Your data is not used to train any model
• AI-generated content is clearly marked as suggestions and not guaranteed for accuracy
• No automated decision-making with legal or significant effects is performed

6a. Reports, Blocking and Moderation

Aviendra lets you share journeys with other travellers, add friends, and publish an optional profile. Two safety features create their own records:

If you block somebody

We record that block. It is enforced on our servers, not just in the app: you stop appearing to each other, neither of you can send or accept a friend request, and any journey you were sharing stops being shared for both of you. The person you blocked is not told, and cannot see who blocked them.

If you report somebody

We record your account, their account, what you were looking at, the reason you chose and anything you wrote. We deliberately do not copy your email address or your profile into the report. The person you reported cannot read your report, and neither can any other traveller.

Reports are reviewed by our team, normally within one business day. We may remove a profile photo, biography, name or username, or remove an account entirely. Resolved reports are kept for 12 months and then deleted — see Section 11.

What is and is not allowed is set out in our Community Guidelines.

7. Cookies and Tracking Technologies

7.1 Essential Cookies (No Consent Required)

• Supabase Auth Cookies (sb-*-auth-token): Session management. Expires when session ends or after 7 days. HTTP-only, secure, same-site.
• Cookie Consent Preference (cookie_consent): Stores your consent choice. localStorage. Persists until cleared.

7.2 Analytics Cookies (Consent Required)

• Google Analytics (_ga, _ga_*): Anonymous usage analytics with IP anonymisation, loaded only after explicit opt-in consent. Not currently enabled — no measurement ID is configured, so this script does not load even if you consent. The option remains here because the consent mechanism is in place and we will not enable analytics without it.

We respect the Do Not Track (DNT) browser signal. When DNT is enabled, no analytics cookies are set and no consent banner is shown.

You can manage your cookie preferences at any time by clicking "Cookie Settings" in the website footer, or by clearing your browser's localStorage.

8. Your Rights Under GDPR

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights:

1. Right of Access (Art. 15): Request a copy of all personal data we hold about you.
2. Right to Rectification (Art. 16): Correct inaccurate or incomplete personal data.
3. Right to Erasure (Art. 17): Request deletion of your personal data. You can delete your account via Settings > Delete Account, or by emailing us.
4. Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format (JSON). Request via email.
5. Right to Restrict Processing (Art. 18): Request that we limit how we use your data.
6. Right to Object (Art. 21): Object to processing based on legitimate interests.
7. Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time for analytics, marketing, or other consent-based processing. Use the cookie settings or email us.

To exercise any of these rights, contact: info@aviendra.com

We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority (e.g., FDPIC in Switzerland, CNIL in France, ICO in the UK).

9. Your Rights Under CCPA/CPRA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with specific rights:

• Right to Know: You can request details about the categories and specific pieces of personal information we have collected about you in the past 12 months, the sources, purposes, and categories of third parties with whom we shared it.
• Right to Delete: You can request deletion of your personal information. Use Settings > Delete Account or email info@aviendra.com.
• Right to Correct: You can request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising. No opt-out is necessary, but we state this explicitly for transparency.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for purposes beyond what is necessary to provide the Service.

Categories of personal information collected: Identifiers (name, email), commercial information (purchase history), internet activity (analytics with consent), geolocation (country-level, anonymized).

Categories of personal information sold: None. We do not sell personal information.

To make a request, email info@aviendra.com with subject line "CCPA Request". We will verify your identity before processing.

10. US State Privacy Rights (Other States)

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other US states with consumer privacy laws have similar rights to access, delete, correct, and opt-out. We honor these rights regardless of your state of residence. Contact info@aviendra.com to exercise any data rights.

11. Data Retention

• Active Accounts: Data is retained for as long as your account is active.
• Account Deletion: Personal data removed from production systems within 30 days. Backups purged within 90 days.
• Transaction Records: Retained for 10 years as required by Swiss commercial law (OR Art. 958f).
• Reports about another traveller: Retained for 12 months after the report is resolved, then deleted. Repeated behaviour is only visible over time.
• Blocks: Retained for as long as the block exists. Deleted when you unblock, or when either account is deleted.
• Support Communications: Retained for 2 years after last contact, then deleted.
• Consent Records: Retained for 3 years after consent is given or withdrawn, as proof of compliance.

12. Children's Privacy

The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact info@aviendra.com.

13. International Data Transfers

Your data is primarily processed in the EU (Ireland via Supabase). Where data is transferred outside the EEA (e.g., to US-based processors), we rely on:

• EU Standard Contractual Clauses (SCCs) approved by the European Commission
• The EU-US Data Privacy Framework where applicable
• Adequacy decisions by the European Commission (for Switzerland)

14. Do Not Track

We honor the Do Not Track (DNT) browser signal. When your browser sends a DNT signal:

• No analytics cookies are set
• No third-party tracking scripts are loaded
• No cookie consent banner is displayed

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Display a notice on the website for existing users
• Re-prompt for cookie consent if cookie practices change

Continued use of the Service after changes constitutes acceptance of the updated policy.

16. Contact

For any privacy-related questions, data requests, or complaints:

Email: info@aviendra.com
General: info@aviendra.com
Data Controller: Petertil Tripportier, Switzerland
Brand: Aviendra

We aim to respond to all data protection requests within 30 days.