Privacy policy
Short version: we collect what we need to run the app, we keep it in the EU, and you can delete your account whenever you like.
Draft for the launch period. Last updated: 14 November 2026.
Who we are
Journiva is a student project. For any privacy question, write to [email protected].
What we collect
- Account details: your email and name, and which sign-in method you use (Apple, Google or email). We never see your password for Apple or Google.
- Your trips: the events you pick, trip plans, dates, budgets and the friends you invite to a plan. Trips are visible only to their members.
- Location (optional): coarse location, only if you allow it, to suggest events and trips near you. The app works without it.
- Usage data: which screens you open and which buttons you tap, so we can improve the app.
- Crash and error reports: technical details about errors, such as device type, app version and the error itself.
- Partner link clicks: when you tap a booking link, we log that you did, so we can tell which partners are useful.
- Waitlist (this website): if you ask to hear when the app is out, we store your email, the date, and where you signed up. If you signed up from the quick quiz on the homepage, we also store your answers (the kind of event, the city, who's coming and the budget feel), so we know what people want. Nothing else, and only after you tick the box. The quiz answers themselves are not sent anywhere unless you sign up; looking up an event sends only the event type and city to our database, not who you are.
We don't sell your data and we don't use advertising trackers.
Who processes it
- Supabase (EU region, Frankfurt): stores accounts, trips and the waitlist, and handles sign-in.
- PostHog (EU cloud): product analytics (the usage data above).
- Sentry: crash and error reports.
- Cloudflare: hosts this website and may log technical request data such as IP addresses for security.
- Affiliate partners: if you follow a partner link, you leave Journiva. The partner then handles your data under its own privacy policy. The link may contain a code that tells the partner the booking came from us, not who you are.
Trip text may be drafted with an AI service. We send only trip details such as the event, dates and city, not your name or email.
Why we use it (legal basis)
The waitlist relies on your consent (the box you tick). You can withdraw it any time by emailing us, and we delete your entry.
Running your account and trips is needed to provide the service. Analytics and error reports rely on your consent, or our legitimate interest in keeping the app working, depending on the setting in the app. You can change that choice in the app.
How long we keep it
Waitlist entries are kept until we send the one "the app is out" email, then deleted, and in any case no longer than 12 months.
Account and trip data stays until you delete your account. Analytics and error reports are kept for a limited period set in those tools. Deleted accounts are removed from our database straight away. Backups may hold copies for a short time before they expire.
Your rights
Under GDPR you can ask to see, correct, export or delete your data, object to processing, and complain to your national data protection authority. Email [email protected]. To delete your account, see how to delete your account.
Age
Journiva is for people aged 18 and over.
Changes
If this policy changes in a way that matters, we'll update the date above and tell you in the app.