Privacy policy
Your privacy on Rovoya
Last updated 24 September 2026
Rovoya helps groups plan trips together, so some of what you add is shared with your group. This policy explains what we collect, who sees it, and the choices you have. We’ve written it in plain language; if anything is unclear, email privacy@rovoya.travel.
Who we are
Rovoya is run by Wilson Labs Limited, New Zealand (“Rovoya”, “we”, “us”). We’re responsible for the personal information described here. You can reach us at privacy@rovoya.travel.
Rovoya is getting ready for a private beta. This policy covers this website and the Rovoya app during the beta, and we’ll update it as the service grows.
This website
This site (rovoya.travel) uses no cookies, no analytics and no advertising trackers, and loads nothing from other companies. Our host, Cloudflare, processes your IP address and basic request details to deliver pages and protect the site from abuse. If you email us, we keep your message and email address to reply and, if you asked, to invite you to the beta.
What we collect in the app
| What | Why |
|---|---|
| Your email address, name, and a confirmation that you’re 18 or over | To create your account, sign you in with a one-time code, and show your name to people on your trips. |
| Your travel quiz answers and the travel style worked out from them | To suggest places and activities that suit you and your group. |
| For each trip: where you’re leaving from, your budget range, days you can’t travel, and deal-breakers (such as the longest flight you’d take) | To find destinations, dates and estimates that work for everyone. |
| Accessibility and dietary needs, only if you choose to add them and give permission | Only to check which places and activities suit you. You can withdraw permission at any time, and we remove them. |
| What you add to a trip: ideas, reactions, itinerary items, tasks, bookings (including references and prices), files, shared costs and payments you record | To run the trip with your group. |
| Notification settings, your device’s time zone, and push notification tokens for your phones | To send notifications you’ve asked for, and not during your night. |
| How the app is used (pages opened, steps completed), stored under a pseudonymous ID | To understand what works and fix what doesn’t. This never includes private preferences or anything you write. |
| Security and technical logs | To keep the service secure and working. |
Who sees what
People on a trip see the trip’s shared information: its plan, ideas, itinerary, shared bookings and costs, and each other’s names. Some things are always private to you:
- your budget range (the group only ever sees a shared range, once enough people have chosen one);
- where you’re leaving from, if you choose to keep it private;
- days you can’t travel (the group only sees dates that work for everyone);
- your deal-breakers, accessibility and dietary needs;
- your Dislike and Veto reactions, veto reasons and notes, and your reactions to destinations;
- bookings, files and flight options you keep to yourself.
Love and Like reactions on activities and options show your name to the group. The trip’s activity history shows who did what kind of thing (for example “Sam added a booking”), never what anyone chose privately.
How we use AI
Rovoya uses AI models to suggest destinations, activities, places to stay and ways to travel, to word explanations, and to estimate typical prices. We send these models what they need about places, dates and the group’s combined preferences, not your email address. Private details are sent only as anonymous numbers and categories, never with names or anything you wrote, and every sentence the AI writes is checked by our own rules before anyone sees it, so it can’t reveal someone’s private choices. We keep an encrypted copy of AI requests and replies for 30 days to fix problems, then delete it.
Companies that help us run Rovoya
We use trusted providers to run the service. They process information only on our behalf and for these purposes:
| Provider | What for |
|---|---|
| Cloudflare | Hosting this website and handling email sent to rovoya.travel |
| Fly.io and Neon | Running the app and storing its database |
| An S3-compatible storage provider | Storing files you attach to bookings |
| Resend | Sending sign-in codes and the daily email you can turn on |
| Expo | Delivering notifications to the Rovoya phone apps |
| Anthropic and OpenAI | AI suggestions and wording, as described above |
We also use a few services that receive no personal information: photo search (Pexels, with generic phrases like “Lisbon tram”), exchange rates (Frankfurter) and recent flight fares (Travelpayouts, with city codes and a month only). Some of our providers store or process information outside your country. When that happens, we make sure it’s protected in a way that’s comparable to the privacy law that applies to us.
Links to booking sites
When you open a link to a booking site from Rovoya, that site’s own privacy policy applies. Some links include an affiliate code so Rovoya may earn a commission; we don’t send your name, email or trip details with them.
We don’t sell your information
We don’t sell personal information, share it for advertising, or show ads.
How long we keep things
- Your account: until you delete it. When you do, your profile and private information are deleted, and you appear as “Former traveller” in trips you were part of.
- Trips: until the organiser deletes them (then 30 days to recover, then gone). Finished trips are archived after 90 days.
- Encrypted AI requests: 30 days. Security audit logs: 2 years. Usage data: 25 months, then only combined totals.
- Backups expire after 35 days.
Your choices and rights
- See and correct your information: most of it is in the app, and you can ask us for a copy of everything we hold about you.
- Withdraw permission for accessibility and dietary needs at any time.
- Choose which notifications you get, and turn the daily email on or off.
- Delete your account. If you organise a trip with other people, you’ll first choose who takes over.
- Ask us a question or make a complaint at privacy@rovoya.travel. We’ll reply within 20 working days. If you’re not happy with our answer, you can complain to the privacy regulator where you live.
Keeping it safe
Information is encrypted in transit and at rest. Access inside Rovoya is limited so each person can only read what they’re allowed to see, enforced by the database itself. If a privacy breach is likely to cause serious harm, we’ll tell the people affected and the regulator as the law requires.
Age
Rovoya is for people aged 18 and over.
Changes
If we change this policy in a way that matters, we’ll tell you in the app or by email before the change takes effect.