VoyajeBoard is a travel planning service operated by Voyajer Media LLC ("VoyajeBoard," "we," "us," or "our"). VoyajeBoard, the voyajeboard.com website, and the VoyajeBoard mobile and browser apps are properties of Voyajer Media LLC. VoyajeBoard helps travelers plan trips, collaborate with trip members, manage itineraries and shared budgets, follow destinations, receive alerts, and open booking links from travel partners. You can reach us using the contact details below:
Email: support@voyajeboard.com
Mailing address: 1320 N. Wicker Park Ave, Chicago, IL 60622
Personal Data We Collect
Contact and Account Info: email address, display name, first and last name, and date of birth. We use your email address and name for account creation, sign-in, account recovery, invitations, and collaborator identity, and your date of birth to confirm that you are 13 or older. Location: user-entered or selected destinations, place names, addresses, city-level locations, and precise latitude and longitude for trip destinations, itinerary items, maps, distance estimates, and reviews. VoyajeBoard does not read device GPS location. Sign-In Activity: each time you sign in, we record the IP address, device name, and platform, and our backend provider estimates an approximate city and country from that IP address. You can see this in Settings under Signed-In Devices. Authorized staff can see it for security and support. It is kept for 180 days.User Content: trip plans, itinerary items, notes, comments, daybook entries, reviews, travel feed posts, uploaded profile photos, trip photos or videos, expense receipts, shared budget records, quiz free-text responses, and customer or Explorer feedback. Identifiers: Appwrite user ID, PostHog distinct ID tied to the Appwrite user after login, and limited device or installation identifiers used by Sentry for crash and diagnostic analysis. A random installation identifier created by the app and stored on your device, used only to prevent repeat free trials. VoyajeBoard does not collect the device advertising identifier (IDFA). Network and Device Data: the IP address that comes with each request to our servers, and device identifiers such as the push notification token and the installation identifiers above, used to deliver the service, keep it secure, prevent fraud and abuse, limit request rates, and diagnose problems.Usage Data: screen views, taps, feature usage, lifecycle analytics, destination quiz analytics, review prompt analytics, affiliate booking clicks, sponsored content interactions, partner content impressions, travel feed view state, and internal cost guardrail counters. Diagnostics: crash logs, performance data, error reports, diagnostic breadcrumbs, and other diagnostic data used to monitor reliability and investigate support issues. Explorer feedback can include an opt-out allowlist of device model and manufacturer, platform and OS version, device type, app version, build number, and physical-device or simulator state. It does not add location, advertising IDs, contacts, photos, or message content. Push Notification Data: push notification token and notification preference settings when you opt in to push notifications.Purchase and Subscription State: subscription entitlement ID, product ID, renewal state, trial dates, current period dates, source, and status needed to keep optional Plus access in sync. RevenueCat and the app stores handle in-app purchases, and Stripe handles payment card details for purchases made on the web. VoyajeBoard does not collect health and fitness data, payment card data, credit information, phone contacts, sensitive personal information such as religion or political opinion, browsing history, persisted search history, or advertising identifiers.Marketing Preferences: whether you agreed to receive VoyajeBoard marketing email, and when you made or changed that choice.User-entered shared expenses are treated as user content for trip budgeting, not as financial account information.
Sources Of Personal Data
We collect personal data from these sources:
User-provided data: account details, profile settings, trips, comments, reviews, daybook entries, destinations, itinerary items, expenses, receipts, photos, and support messages.
Automatic data: analytics events, affiliate click records, app diagnostics, crash reports, performance events, device metadata needed for debugging, product analytics events when configured, and push tokens after notification permission is granted.
Third-party APIs and partners: place details, maps, weather, currency conversion, AI suggestions, travel content, destination content, activity or booking content, and booking link attribution data returned by partners. For details on device storage, session technologies, and analytics tools, see the VoyajeBoard Cookie Policy.
How We Use Personal Data
We use personal data for these purposes:
Account management: create accounts, authenticate users, manage sessions, support account recovery, honor account deletion requests, and maintain settings.
Subscription access: initialize subscription services, identify the signed-in user, cache the latest Plus entitlement locally for offline boot, and mirror server webhook events into our subscription records.
Support and safety: respond to support requests, debug issues, prevent abuse, enforce community standards, manage reports and blocks, screen uploaded photos and reviews for unsafe content, and maintain service security.
Account security: show you where and on which devices your account is signed in, so you can spot a sign-in you do not recognize.
Marketing: if you opt in, send VoyajeBoard news and travel ideas by email. Every marketing email has an unsubscribe link.
Promotion integrity: prevent abuse of promotions, including free trials, by recognizing an email address or device that has already used a trial.
Legal and compliance: meet app store, privacy, tax, fraud-prevention, safety, and recordkeeping obligations.
Affiliate Click Tracking Disclosure
When you tap a booking link, we record the click for analytics. The destination partner may receive an attribution parameter that identifies VoyajeBoard as the referrer. They do not receive your personal information from us through that attribution. The partner may separately collect information from you if you continue on the partner website or app, create an account there, make a booking, or contact that partner. That partner's privacy policy applies to what you provide directly to them.
AI Features
Some VoyajeBoard features use OpenAI to process the information you give them. OpenAI is used for trip planning and itinerary suggestions, itinerary narration, activity recommendations, suggestions for open time in a trip, packing suggestions, budget estimates, expense category suggestions, reading a receipt image when you scan a receipt, trip recaps, alert summaries, destination matching, and automated moderation of reviews. We send only the information the feature needs, such as your trip details and preferences, the receipt image you scan, or the text of a review.Before your information is first sent to OpenAI from an AI feature, VoyajeBoard asks for your permission. You can withdraw that permission at any time in Settings > Privacy & Security > AI Data Sharing. Automated review moderation is a safety process, so it checks every submitted review whether or not you have given that permission. Content written by AI is marked with VeeBee, the AI travel companion in VoyajeBoard. AI-generated content can be wrong, so check important details before you rely on them.Translation of trip content, reviews, and other text into your language uses Google Cloud Translation. If Google Cloud Translation is unavailable, text may be translated by OpenAI instead. For signed-in travelers, that happens only with AI Data Sharing permission.
Legal Bases
Where applicable law requires a legal basis for processing personal data, we rely on:
Contract: to provide account access, trip planning, collaboration, support, security, and other app functionality requested by you.
Consent: for optional permissions and features such as photos, camera access, push notifications, sending your information to OpenAI from AI features, certain personalization choices, and any marketing communications where required.
Legitimate interest: to operate and improve VoyajeBoard, measure product usage, track affiliate clicks, prevent abuse (including abuse of free trials and other promotions), diagnose issues, keep the service secure, respond to support needs, and maintain business records.
Legal obligation: to comply with applicable law, app marketplace requirements, valid legal process, and recordkeeping duties. You may withdraw consent where the app or applicable law allows it. Withdrawing consent does not affect processing that happened before withdrawal.
Recipients Of Personal Data
We share personal data with service providers and partners only as needed to operate VoyajeBoard, provide requested features, support users, measure performance, and comply with law. A summary list is in the Subprocessors section of our Data Processing Policy at https://voyajeboard.com/dpa. Recipient Purpose Appwrite Authentication, database, file storage, user profiles, trip records, settings, permissions, backend app data, and the approximate city and country shown in Sign-In Activity. RevenueCat Optional Plus subscription entitlement management, product configuration, renewal events, and webhook delivery. Stripe Payment processing for VoyajeBoard Plus purchases made in a web browser through Stripe-hosted checkout. From VoyajeBoard, Stripe receives your VoyajeBoard account ID and the billing period you choose; you enter your payment details directly with Stripe, and VoyajeBoard never receives your card number.Sentry Crash reporting, performance monitoring, diagnostic breadcrumbs, and issue investigation. PostHog Product analytics, feature usage reporting, and funnel measurement when configured. Recipient Purpose OpenAI The AI features listed in AI Features above, including automated review moderation and backup translation. Google Cloud Places, Maps, distance, geocoding, Google Cloud Translation for translating content into your language, Google Cloud Vision for automated safety screening of every uploaded photo, and related cloud services. WeatherAPI.com Weather, forecast, and astronomy data for destination and trip weather features when configured.Viator, TripAdvisor, GetYourGuide Activity, destination, review, and attraction content, affiliate booking links, and click attribution. Booking.com and Expedia Hotel booking links, affiliate attribution, and booking-related partner content. Amazon Associates Links to travel products on Amazon from the VoyajeBoard website, and affiliate attribution. Impact Links to travel brands and products from the VoyajeBoard website, affiliate attribution, and the images in labeled ads, which your browser loads from the brand's or Impact's servers. App stores and platform providers App distribution, crash reporting, app review, billing records for platform-controlled transactions, and platform compliance. Legal, safety, and professional advisors Compliance, enforcement, audit, insurance, legal claims, or protection of rights.Other service providers: Render hosts the VoyajeBoard servers. Postmark sends transactional email, such as welcome, data export, subscription, and account deletion messages, and marketing email if you opt in. Vercel hosts VoyajeCommand, our internal support and operations console, which stores support conversations, moderation records, and marketing preferences. Inngest runs scheduled jobs for that console, such as sending marketing email. AeroDataBox, through RapidAPI, receives flight numbers and dates to return flight status for your trips. The Expo Push Notification Service delivers push notifications to your device. Better Stack (Logtail) stores server logs, which can include IP addresses and account identifiers, for security and diagnostics. OpenStreetMap Overpass receives map coordinates to return nearby transit data for maps. Abstract API receives IP addresses that authorized staff check to prevent fraud and abuse. Apple receives and returns sign-in data when you choose Sign in with Apple.Every third party that receives personal data from VoyajeBoard, including AI providers such as OpenAI, is bound to protect that data with the same or equal protection described in this Privacy Policy, and may use it only to provide its service to VoyajeBoard or as this policy describes.Affiliate partners receive attribution parameters or click context needed to identify VoyajeBoard as the referrer. VoyajeBoard does not send your account profile, trip notes, comments, receipts, or personal travel content to those partners unless a specific feature clearly requires a partner request that you initiate. For the plain-language revenue disclosure and current partner list, see "Partner Disclosure" at https://voyajeboard.com/help/affiliate-disclosure.
Retention
We keep personal data only as long as needed for the purposes described in this policy, unless a longer period is required for legal, safety, fraud-prevention, backup, or dispute-resolution reasons. A detailed collection-level retention schedule is maintained internally. Data category Retention period Account, profile, and settings Kept while the account is active. Deleted or de-identified after account deletion, usually within 30 days, with backups retained up to 90 days.Trips, trip items, comments, trip media, and expenses Kept until deleted by the user, deleted through account deletion, or 3 years after no recorded trip activity. Same-trip planning records cascade with the parent trip. Backups may remain up to 90 days. Expense receipts Kept for 7 years where needed for tax compliance or related recordkeeping, then deleted or de-identified. Travel feed content Kept for 180 days unless deleted earlier through trip deletion, account deletion, or safety enforcement.Affiliate clicks, partner impressions, analytics, and product interaction data Analytics events are kept for 90 days. Affiliate booking records are kept until deleted by the user or account deletion, unless a longer period is required for commission reconciliation, tax, fraud-prevention, or dispute-resolution reasons.Data category Retention period Subscription mirror records Kept while the account or subscription support need remains active, then deleted or de-identified with account deletion unless retention is required for tax, fraud-prevention, dispute-resolution, or app-store reconciliation reasons. Crash, performance, and diagnostics Error reports are kept for 30 days unless needed longer to investigate a security, reliability, legal, or abuse issue.Support, safety, legal, and abuse records Kept for up to 3 years, or longer if needed to comply with law, enforce terms, resolve disputes, or protect users and the service. Push tokens Kept until replaced, disabled, stale, or deleted with the account. Sign-in activity, including IP address, device, and approximate city and country Kept for 180 days.Public trip share links Kept until you turn the link off, the link expires, or you delete your account. If you plan to delete a trip and no longer want it shared, turn its public link off first.Free trial claim records Kept for 3 years after the claim. These records contain only a one-way keyed hash of your normalized email address and of the app's installation identifier, are not linked to your account, and are kept after account deletion so a trial cannot be claimed again.
Your Rights And Choices
Depending on where you live, you may have the right to:
Access the personal data we hold about you.
Correct inaccurate or incomplete personal data.
Delete personal data.
Restrict certain processing.
Receive a portable copy of certain personal data.
Object to certain processing, including processing based on legitimate interest.
Withdraw consent where processing is based on consent.
File a complaint with a privacy regulator or data protection authority. You can manage many choices in the app, including profile visibility, blocked users, notification preferences, data export requests, data deletion requests, and account deletion. We aim to deliver data exports within 24 hours. You can also contact support@voyajeboard.com to make a request. We may need to verify your identity before completing a request. We answer verified requests within the time the law sets, such as one month under the GDPR and 45 days under California law, and we tell you if we need an extension the law allows. If we decline a request, you can ask us to reconsider by replying to our answer. Where your state allows it, an authorized agent can make a request for you. We will not deny you service, charge you a different price, or give you a lower quality of service because you used a privacy right. To stop marketing email, use the unsubscribe link in any marketing email. VoyajeBoard does not sell personal information and does not share personal information for cross-context behavioral advertising. Where applicable law treats certain analytics activity as a "sale" or "share," you may exercise the related opt-out rights by contacting us, and we honor recognized opt-out preference signals where required by law.
Children's Privacy
Children under 13 are not permitted to use VoyajeBoard. Users must give their date of birth and confirm during registration that they are 13 years of age or older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to VoyajeBoard, contact support@voyajeboard.com so we can review and delete the information where required by the Children's Online Privacy Protection Act ("COPPA") and other applicable laws.
International Transfers
VoyajeBoard and its providers may process personal data in the United States and other countries where we or our service providers operate. These countries may have data protection laws that differ from the laws where you live. Where required, we use appropriate safeguards such as contractual protections, data processing agreements, and transfer mechanisms recognized by applicable law.
Security
We use technical and organizational safeguards designed to protect personal data, including account authentication, role-based permissions, limited provider access, encrypted transport, monitoring, and operational controls. Authorized VoyajeBoard staff can access account data when needed to provide support, review reported content and moderate the community, and protect the security of the service. Staff access is limited by access controls and recorded in audit logs. No system is completely secure, and we cannot guarantee absolute security.
Changes To This Policy
We may update this Privacy Policy as VoyajeBoard changes. When we make material changes, we will update the "Last updated" date and provide additional notice when required by law or app marketplace rules. Continued use of VoyajeBoard after an update means the updated policy applies.
Contact
For privacy questions, requests, or complaints, contact:
Email: support@voyajeboard.com
Mailing address: Voyajer Media LLC, 1320 N. Wicker Park Ave, Chicago, IL 60622