Privacy Policy

Last updated: 14 July 2026 · Version 2

This policy explains what personal data Aviora collects, why, how we protect it, and the rights you have. We aim to collect as little as possible and to keep your travel data yours.

1. Who we are

Aviora ("Aviora", "we", "us", "our") is a service operated by The Visionary Platform Ltd, a company registered in England & Wales (company number 17198186), registered office 167–169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom. For the purposes of the UK GDPR and the Data Protection Act 2018, The Visionary Platform Ltd is the data controller for personal data processed through the Aviora app and website.

Questions or requests about your data? Email [email protected].

2. Information we collect

• Account details — your name and email address when you create an account, used to sign you in and personalise the service.
• Trip & preference data — itineraries and day plans you generate, saved trips and places, and the interests, pace and budget you tell us.
• Your AI memory (taste profile) — Aviora builds a profile of your travel taste from what you save and interact with (see section 5).
• Content you create — notes, lists, saved places and any photos or reviews you add.
• Booking details you provide — if you paste or forward a flight or hotel confirmation into Aviora, we process that text to extract your trip's dates, flights and accommodation. We store the extracted trip details, not the original email.
• Location — with your permission, your device location powers live features (see section 6).
• On-device data — some sensitive preferences (dietary requirements, passport nationality, visas you hold and their expiry, packing choices, notification preferences) are stored locally on your device and are not uploaded to our servers.
• Subscription & payment data — if you buy Aviora Plus, payment is handled by our payment providers (Stripe on the web; Apple or Google for in-app purchases). We receive your subscription status, not your full card details.
• Usage & diagnostics — anonymised product analytics and crash reports that help us improve reliability.

3. How we use your information, and our lawful bases

Under the UK GDPR we rely on the following lawful bases:

• To provide the service you ask for — generating itineraries, day plans, assistant replies, live features and reminders (lawful basis: performance of a contract).
• To personalise recommendations using your taste profile, and to operate, secure, debug and improve Aviora (lawful basis: our legitimate interests).
• To use your device location and to send you notifications (lawful basis: your consent, withdrawable at any time in your device or app settings).
• To take payment for subscriptions (lawful basis: performance of a contract).
• To meet legal obligations, such as tax and accounting (lawful basis: legal obligation).

4. AI processing

Aviora uses artificial intelligence to generate itineraries, day plans, recommendations, assistant replies and travel guidance.

• What we send, and why. When you ask Aviora to generate something, your request and relevant travel preferences may be processed by one or more third-party AI providers acting as our processors, solely to generate the response you asked for. We do not intentionally send your name, email, payment information or other personal information that isn't needed to fulfil your request.
• Retention of prompts. We do not keep the raw prompts beyond what is needed to provide, secure and debug the service. Our AI providers process requests under their own terms; we do not receive, and do not control, any copy a provider retains.
• Training. We do not use your prompts or content to train our own models, and we select AI providers on the basis that they do not use data sent through their API to train their models. Where a provider's terms differ, we work to limit or disable such use.
• Deleting your AI memory. The taste profile Aviora builds can be viewed, edited, deleted item-by-item, or reset entirely at any time in the app (Profile → AI Memory). See section 5.

5. Your AI memory

To make recommendations feel personal, Aviora remembers things like your favourite destinations, the food and activities you enjoy, your travel pace, and things you'd rather avoid. This profile is built from what you save and interact with in the app.

You are always in control: you can view, edit, delete individual items, or reset your entire memory at any time in the app. Deleting your account removes it entirely.

6. Location data

Location powers Aviora's live features. We are transparent about how it's used:

• When it's collected. Only when you use a location feature and have granted permission — for your position on the map, nearby recommendations, walking routes, weather where you are, arrival detection, and time-based reminders (Live Companion).
• Foreground use. Location is used primarily while the app is open and you're using a live feature.
• Background use. We do not track your location in the background without your explicit consent. If a future feature (such as geofenced arrival reminders) needs background location, we will ask for that permission separately and explain why before enabling it.
• When it stops. Location access stops when you close the live feature or revoke permission in your device settings. You can turn it off at any time.
• No advertising use. Location is used in the moment to help you travel. It is never sold or used for advertising, and we do not continuously track you for profiling.

7. Third-party services

To deliver core features we share the minimum necessary data with trusted providers, each acting under their own privacy terms:

• Supabase — secure account authentication and trip storage (our processor).
• AI providers (e.g. Groq, Google Gemini, OpenAI, Mistral, OpenRouter, Cerebras) — process your requests to generate responses, as described in section 4.
• Google Places — ratings, opening hours and prices for places you view.
• OpenWeather — weather forecasts for your destinations.
• Analytics & crash reporting — anonymised usage and error data.
• Affiliate partners — Travelpayouts/Hotellook (hotels), Aviasales (flights), Viator and GetYourGuide (experiences). See our Affiliate Disclosure.
• Payments — Stripe (web), Apple App Store and Google Play (in-app purchases).
• Mapping & visa data — open data sources (OpenStreetMap, CARTO, the Passport Index dataset).

8. International transfers

Some of our providers (for example certain AI and hosting services) process data outside the UK, including in the United States. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or an adequacy decision, so your data receives an equivalent level of protection.

9. Data retention

We keep personal data only as long as we need it. As a guide:

• Account information — until you delete your account.
• Trips, plans & AI memory — until you delete them, reset your memory, or delete your account.
• Analytics & diagnostics — in anonymised or aggregated form, up to 24 months.
• Support correspondence — up to 2 years after your query is resolved.
• Billing & tax records — 6 years, to comply with UK tax law.

Data stored locally on your device is removed when you delete it or uninstall the app.

10. Automated decision-making

Aviora's recommendations are generated automatically using AI and third-party data, but they are intended to assist rather than replace your own decision-making. We do not use automated decision-making that produces legal effects concerning you, or similarly significantly affects you, within the meaning of Article 22 of the UK GDPR.

11. Visa & travel guidance

Visa and travel information in Aviora is guidance only and may be incomplete or out of date. Always confirm requirements with the official embassy or immigration authority before you book or travel.

12. Your rights

Depending on where you live, you have the right to access, correct, export, delete or restrict the processing of your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time. To exercise these rights, email [email protected].

If you are in the UK and believe we have not handled your data properly, you may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. We'd appreciate the chance to help first.

13. Children

Aviora is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

14. Security

We use industry-standard measures to protect your data and limit access to it. No method of transmission or storage is completely secure, but we work to safeguard your information.

15. Changes to this policy

We may update this policy from time to time. We'll revise the "last updated" date above and, for material changes, notify you in the app.

16. Contact

Questions about privacy? Email [email protected].