Travel AI Privacy Policy

Last Updated: 23/02/2026

📋1. DATA CONTROLLER

Identity: Carlos Cao López

Contact: carloscao@travelai.art

📩2. WHAT DATA DO WE PROCESS?

  • Identity Data: Email, User ID, name.
  • Usage and Technical Data: Device information, tokens, logs.
  • Geolocation Data: GPS coordinates.
  • Multimedia Content: Photographs of artworks.
  • Transactional Data: Subscriptions, payments via Stripe.
  • Advertising and Tracking Data: Device advertising identifiers (e.g., Apple IDFA, Android Advertising ID) and app interaction events. This data is linked to your user identity.

🎯3. PURPOSE OF PROCESSING

  • Service Provision: Identifying artworks via AI.
  • Account Management: Authentication and profile management.
  • Billing: Premium/Travel Pass subscriptions.
  • AI Service Improvement: Only with consent.
  • Communications: Push notifications.
  • Marketing and Third-Party Advertising: To measure app installations, analyze user interactions, and deliver personalized advertisements through third-party platforms (such as Meta/Facebook).

📜4. LEGAL BASIS

  • Execution of the Contract: To provide the service.
  • Consent: Geolocation, notifications, AI training, and cross-app tracking for personalized advertising (via App Tracking Transparency).
  • Legitimate Interest: Security.
  • Legal Obligation: Billing and tax compliance.

5. DATA RETENTION

  • Active Data: Retained as long as the account exists.
  • Account Deletion: Immediate deletion of personal data upon account deletion.
  • Statistics: Anonymized images may be kept for statistical purposes.
  • Tax Data: Retained for 5-10 years as required by law.

🤝6. RECIPIENTS (THIRD PARTIES)

  • Supabase: Database and authentication.
  • Stripe: Payment processing.
  • Expo: Notifications services.
  • AI Providers: Google Cloud, OpenAI, Alibaba Cloud.
  • Advertising Partners: Meta Platforms, Inc. (for ad tracking, attribution, and delivery of targeted ads).
  • AppsFlyer: Mobile attribution and marketing analytics platform (for measuring advertising campaign effectiveness and install attribution).

⚙️7. YOUR RIGHTS

Rights to Access, Rectification, Deletion, Opposition, Portability, and Limitation.

You may modify your profile, download your data, or delete your account directly within the app.

🔒8. SECURITY MEASURES

  • SSL/TLS Encryption (HTTPS).
  • JWT Tokens.
  • No storage of full credit card details.

Contact