Privacy Policy
Effective Date: March 7, 2026
Last Updated: March 7, 2026
Introduction
Abdirahman Areys ("Company," "we," "us," or "our") operates the Veya mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App and related services (collectively, the "Service").
Veya is an AI-powered day planner, itinerary generator, and city guide designed to help you optimize your free time with personalized daily plans. This Privacy Policy applies to users in the United States and Canada and is designed to comply with the California Consumer Privacy Act (CCPA), California Online Privacy Protection Act (CalOPPA), and the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada.
By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use the Service.
1. Information We Collect
We collect information you provide directly to us, information collected automatically through your use of the Service, and information from third-party sources as described below.
1.1 Personal Information You Provide
When you create an account, use certain features, or contact us, we may collect the following categories of personal information:
| Category of Data | Specific Data Elements | Purpose |
|---|---|---|
| Identity Data | Name, age, gender | Account creation and personalization of recommendations |
| Contact Information | Email address | Account authentication, communications, and support |
| User Preferences | Interests, budget preferences, activity preferences | Customizing itineraries and recommendations |
1.2 Information Collected Automatically
When you access or use our Service, we automatically collect certain information, including:
| Category of Data | Specific Data Elements | Purpose |
|---|---|---|
| Location Data | GPS coordinates (coarse and fine location) | Finding nearby places and generating location-based itineraries |
| Device Data | Device ID, device model, operating system version, unique device identifiers, device fingerprint | Analytics, debugging, service optimization, security, and anonymous usage tracking |
| Usage Data | Itineraries generated, saved places, app interaction logs, feature usage patterns, session duration | Service improvement, personalization, and analytics |
1.3 Financial Information
When you make a purchase or subscribe to our premium services:
- Purchase History: We collect information about your subscription status, purchase history, and transaction records.
- Payment Processing: We do NOT directly collect, store, or process credit card numbers or other payment card information. All payment transactions are processed securely through the Apple App Store or Google Play Store and our subscription management provider, RevenueCat.
2. How We Use Your Information
We use the information we collect for the following purposes:
2.1 To Provide and Maintain the Service
- Generate personalized day plans, itineraries, and city guides
- Process and manage your account
- Facilitate transactions and manage subscriptions
- Respond to your comments, questions, and requests
2.2 To Personalize Your Experience
- Provide age-appropriate and interest-based recommendations
- Customize content based on your preferences and usage patterns
- Utilize proprietary algorithms and AI systems to enhance recommendation quality
2.3 To Improve and Optimize the Service
- Analyze usage trends and patterns to improve functionality
- Conduct research and development
- Monitor and analyze the effectiveness of our Service
- Identify and fix technical issues
2.4 To Process Payments
- Process subscription payments and in-app purchases
- Manage billing and subscription status
- Handle purchase restoration requests
2.5 Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Contractual Necessity: Processing necessary to fulfill our contract with you and deliver the Service you have requested.
- Consent: Where you have provided explicit consent for specific processing activities.
- Legitimate Interests: Where processing serves our legitimate business interests, such as fraud prevention and service improvement, balanced against your privacy rights.
- Legal Obligations: Where processing is necessary to comply with applicable laws and regulations.
3. How We Share Your Information
We may share your information with third-party service providers who assist us in operating the Service. We require these providers to maintain the confidentiality and security of your information and to use it only for the purposes for which it was disclosed.
3.1 Third-Party Service Providers
| Service Provider | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication services and database hosting | User profiles, saved trips, authentication credentials |
| RevenueCat | Subscription management and purchase processing | Purchase history, subscription status, user identifiers |
| Apple | Sign in with Apple authentication and in-app purchases | Authentication data, purchase and subscription information |
| Google Gemini AI | AI-powered itinerary generation and activity recommendations | User preferences, location context, age, gender, and query data necessary for content generation |
| Google Places API | Place details, photos, and location search | Location data, search queries for place information |
| Expo / EAS | App updates and push notifications | Device identifiers, push notification tokens |
3.2 Other Disclosures
We may also disclose your information:
- To comply with applicable laws, regulations, legal processes, or governmental requests
- To enforce our Terms of Service and other agreements
- To protect the rights, privacy, safety, or property of Veya, our users, or others
- In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company
- With your consent or at your direction
3.3 No Sale of Personal Information
We do not sell your personal information to third parties for monetary or other valuable consideration. For purposes of the CCPA, Veya does not "sell" personal information as defined under California law.
4. Your Rights and Choices
Depending on your jurisdiction, you may have certain rights regarding your personal information. We are committed to honoring these rights for all users in the United States and Canada.
4.1 Right to Access
You have the right to request access to the personal information we hold about you. Upon verification of your identity, we will provide you with a copy of your personal data in a commonly used electronic format within the timeframe required by applicable law.
4.2 Right to Deletion
You have the right to request deletion of your personal information. You may delete your account and associated data at any time through the App settings. When you request deletion:
- Your account and profile information will be permanently deleted from our servers
- Your saved itineraries, preferences, and usage history will be removed
- Some information may be retained as required by law or for legitimate business purposes (such as fraud prevention)
- Information already shared with third-party service providers will be subject to their respective data retention policies
4.3 Right to Correction
You have the right to request correction of inaccurate personal information. You can update most of your account information directly through the App settings.
4.4 Right to Opt-Out
You may opt out of:
- Marketing Communications: You can unsubscribe from promotional emails by clicking the "unsubscribe" link in any marketing email or by contacting us directly.
- Location Services: You can disable location access through your device's operating system settings at any time.
- Push Notifications: You can disable push notifications through your device settings.
4.5 California Residents - Additional Rights (CCPA/CalOPPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Online Privacy Protection Act (CalOPPA):
- Right to Know: The right to request specific pieces of personal information we have collected about you in the preceding 12 months.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
- Do Not Track Signals: We currently do not respond to "Do Not Track" browser signals. However, you can control tracking through your device settings and browser preferences.
- Shine the Light: California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes.
4.6 Canadian Residents - Additional Rights (PIPEDA)
If you are a Canadian resident, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA):
- Right of Access: You may request access to your personal information held by us.
- Right to Challenge Compliance: You may challenge our compliance with PIPEDA by contacting our Privacy Officer.
- Right to Withdraw Consent: You may withdraw your consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions.
4.7 Exercising Your Rights
To exercise any of these rights, please contact us at admin@veyatrips.app. We will respond to your request within the timeframe required by applicable law (generally within 30-45 days). We may request additional information to verify your identity before processing your request.
5. Children's Privacy
The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13 years of age. The App requires users to confirm they are 13 years of age or older during the onboarding process.
If we become aware that we have collected personal information from a child under the age of 13 without verification of parental consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 13, please contact us immediately at admin@veyatrips.app.
For users between 13 and 18 years of age (or the age of majority in their jurisdiction), we recommend that a parent or guardian review this Privacy Policy with them.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with the Service. Specifically:
- Account Data: Retained for the duration of your active account and deleted upon request or account termination.
- Usage Data: May be retained in aggregated, anonymized form for analytics purposes.
- Transaction Records: Retained as required for legal, tax, and accounting purposes.
- Communication Records: Retained for customer support purposes and to comply with legal obligations.
When we no longer need to retain your personal information, we will securely delete or anonymize it in accordance with our data retention policies and applicable law.
7. Data Security
We implement industry-standard security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:
- Encryption in Transit: All data transmitted between your device and our servers is encrypted using HTTPS/TLS protocols.
- Encryption at Rest: Personal data stored on our servers is encrypted using industry-standard encryption methods.
- Access Controls: We limit access to personal information to authorized personnel who require it to perform their job functions.
- Infrastructure Security: Our service providers maintain SOC 2 compliance and implement comprehensive security measures.
While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.
8. International Data Transfers
Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.
If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal information, to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.
We ensure appropriate safeguards are in place to protect your information when it is transferred internationally, including contractual protections with our service providers.
9. Third-Party Links and Services
The Service may contain links to third-party websites, applications, or services that are not owned or controlled by us. This Privacy Policy does not apply to such third-party services, and we are not responsible for their privacy practices.
We encourage you to review the privacy policies of any third-party services you access through our App.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:
- We will update the "Last Updated" date at the top of this Privacy Policy
- We may notify you via the App or by email for significant changes
- Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy
We encourage you to periodically review this Privacy Policy to stay informed about how we are protecting your information.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Abdirahman Areys
Email: support@veyatrips.app
For Canadian residents, you may also file a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.
For California residents, you may contact the California Attorney General's office for information regarding your rights under California law.
12. Consent
By using the Veya App and Service, you hereby consent to this Privacy Policy and agree to its terms.