Privacy Policy

About this Policy

Effective Date: 24 September 2026

This Privacy Policy explains what personal information the CoVoyage website and mobile application (the "Platform") collect, why, who we share it with, and the choices you have. The Platform is operated by Gil Breuer, an individual based in Israel ("CoVoyage," "we," "us," or "our").

1. Information you give us

• Account details: name, email address, password (stored only as a one-way hash) or the identity returned by Google or Facebook sign-in.
• Profile: photo, bio, languages, interests, travel style, and home country.
• Trips and schedules: destinations, dates, and the activities you plan or join.
• Messages: chats with other travelers, groups, and providers, including photos and files you attach.
• Verification documents: an identity document (travelers) or business licence (providers), used only to verify the account.
• Posts and reviews you publish on the Platform.
• Provider business details: business name, services, prices, and availability.

2. Information from your device

The mobile app asks for these permissions only when you use the feature that needs them. You can refuse or revoke any of them in your device settings; the rest of the app keeps working.

• Location: read once when you open nearby activities, nearby travelers, or spontaneous mode, to show results near you. It is not tracked in the background. If you choose to share your location in a chat, that location is saved in the message and visible to the people in that conversation.
• Camera: to scan a provider check-in QR code and to take photos you choose to upload.
• Photos and files: only the images or documents you pick to upload.
• Microphone and speech recognition: to dictate messages. Speech is converted to text by your device's speech service; we receive only the resulting text if you send it.
• Notifications: a push token, so we can notify you about messages and group updates.

3. Information collected automatically

We record basic product-usage events (for example, which screens are opened and which features are used), app version, platform, language, and approximate country. We do not store your IP address in these events, and they never include message content, passwords, documents, or precise location. Usage events are deleted after 180 days.

We also keep technical logs needed to run and secure the service, such as error logs and sign-in records.

4. How we use information

• To run your account and show your trips, groups, and messages.
• To match you with compatible travelers, groups, and activity providers.
• To verify identities and keep the community safe, including reviewing reports of misconduct.
• To send service emails and notifications (for example, email verification, password reset, and group updates).
• To translate chat messages when you ask for a translation.
• To improve the Platform using aggregated usage statistics.
• To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information and we do not show third-party advertising.

5. What other users can see

Your name, profile photo, bio, languages, and interests are visible to other users so they can decide whether to travel with you. Your trips are private by default; an activity is shown to others only when you choose to share it. Messages are visible to the members of that conversation. Verification documents are never shown to other users.

6. Service providers we share information with

We use the following processors to operate the Platform. They receive only what they need to provide their service to us:

• Supabase — database, sign-in, and file storage.
• Render and Vercel — application hosting.
• Google and Facebook — sign-in, if you choose it.
• Cloudflare Turnstile and Google reCAPTCHA — bot protection on sign-up and sign-in.
• SendGrid — sending service emails.
• Expo — delivering push notifications.
• Google (Gemini) and Anthropic (Claude) — AI features such as message translation; the text you ask to process is sent to the provider.

We may also disclose information if required by law, or to protect the safety of our users or the public.

7. How long we keep information

We keep your information while your account is open. When you delete your account, we delete your profile, trips, group memberships, messages you sent, uploaded files, sign-in credentials, and usage events. Some records may be kept where they belong to another user or where the law requires it — for example, a completed booking in a provider's records or a report of misconduct — and are kept only as long as needed for that purpose.

8. Your choices and rights

• Access and correct: view and edit your profile in the app at any time.
• Delete: delete your account in the app (Profile → Settings → Delete my account) or follow the steps at /delete-account.
• Permissions: turn off location, camera, microphone, or notifications in your device settings.
• Other requests (a copy of your data, objections, or questions): email gil.breuer@gmail.com.

Depending on where you live, you may have additional rights under local law, including the right to complain to a data-protection authority.

9. Security

All traffic to the Platform is encrypted in transit (HTTPS). Passwords are stored as one-way hashes, and verification documents are stored in private storage that only authorised staff can open. No system is perfectly secure, so please use a strong password and tell us about any suspected misuse.

10. Age requirement

CoVoyage connects adults who travel together. You must be at least 18 years old to use the Platform, and we do not knowingly collect information from anyone younger. If you believe a minor has created an account, contact us and we will delete it.

11. International transfers

Our service providers may store and process information in countries other than yours. We use providers that apply appropriate safeguards to personal information.

12. Changes to this Policy

We may update this Policy. We will change the Effective Date above and, for significant changes, notify you in the app or by email.

13. Contact

• Email: gil.breuer@gmail.com
• Operator: Gil Breuer (Israel)