awayo
Privacy Policy
Last updated: 31 October 2026
This policy explains what personal data the Awayo app and website ("Awayo", "we", "us") collect, why, who we share it with, and the choices and rights you have.
1. Who is responsible
The controller of your personal data is Anastasiia Shapovalova, Warsaw, Poland (Awayo is run by Anastasiia Shapovalova as an individual). Contact for anything about privacy: info@awayo.ai.
2. What we collect
Account
Your email address, name, username, and, if you add them, a profile photo, cover image, bio, home city, languages and interests. If you sign in with Google, we receive your name, email address and profile photo from Google (see section 5).
Trips and what you add to them
Trips (destinations, dates, who is travelling, including the age of children you add), itineraries, wishlists, expenses and repayments, bookings and the files you attach to them (for example tickets, booking confirmations and insurance documents), and saved spots.
Messages
Messages, photos, files and locations you send in private chats, groups and trip chats, and questions you ask the trip's travel agent.
Location
Only when you ask for it: to show places near you, to save a spot (such as where you parked), to send your location in a chat, or to share your live location for a period you choose. Live location updates while the app is open and stops when the time is up or when you stop it. We do not track your location in the background.
Device and technical data
A push notification token for your device (if you allow notifications), your device's time zone (for quiet hours), app settings, and crash reports (device model, operating system, app version and the error) that help us fix problems.
3. How we use it
- To provide Awayo: your account, trip planning, sharing with the people you invite, bookings, expenses, chats, reminders and notifications.
- To provide the AI features you choose to use: building an itinerary, reading details from booking files you upload, preparing packing and travel advice, and answering questions in the trip's agent chat.
- To keep Awayo secure and working, prevent abuse, and fix errors.
- To contact you about your account or important changes. We do not send marketing emails unless you agree to them.
Legal bases (where the GDPR applies): performing our contract with you (providing the app), our legitimate interests (security, fixing errors, improving the service), and your consent (for example notifications and location, which you can withdraw in your phone's settings at any time).
4. Who can see your data
Other travellers: people on a trip see the trip, its plan and expenses, the trip chat and the bookings you choose to share with the trip. Your private bookings and their files are visible only to you. The trip's agent chat is visible to everyone on the trip. People in a chat see what is sent in it. Your public profile (name, username, photo and what you choose to show) can be seen by other Awayo users, depending on your privacy settings.
Service providers process data for us under contracts that require them to protect it:
| Provider | What for |
|---|---|
| Supabase | Hosting our database, file storage, sign-in and server functions. Data is stored in the European Union (Ireland). |
| Anthropic (Claude) | AI features: reading booking files you upload, travel advice and the trip agent. Only the data needed for the request is sent; Anthropic does not use it to train its models. |
| Google sign-in (if you use it), and place information, ratings and photos (Google Maps Platform). Maps on Android use Google Maps. | |
| Apple | Maps on iPhone, push notification delivery, and the App Store. |
| Expo | Delivering push notifications and app updates. |
| Sentry | Crash reports. |
Some providers are located outside the European Economic Area. Where that is the case, transfers are protected by the European Commission's Standard Contractual Clauses or an adequacy decision.
We do not sell your personal data, and we do not use it for advertising.
5. Google user data
If you sign in with Google, Awayo receives only your name, email address and profile photo. We use them only to create your account, sign you in and show your name and photo in Awayo. We do not access your Gmail, contacts, calendar or any other Google data, we do not share Google user data with anyone except the providers above that host your account, and we do not use it for advertising.
Awayo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. How long we keep it
We keep your data while you have an account. When you delete your account (Profile → Settings → Delete account), we delete your profile and your personal data. Trips you own are passed to another traveller on the trip, or deleted if there is none. Messages you sent in shared chats may remain visible to the other people in them without your name. Backups are overwritten within 30 days. Crash reports are kept for up to 90 days.
7. Your rights
You can see and change most of your data in the app, and delete your account at any time. You also have the right to request a copy of your data, its correction or deletion, to restrict or object to processing, and to data portability. Write to info@awayo.ai. You can also complain to your data protection authority (in Poland: the President of the Personal Data Protection Office, UODO).
8. Children
Awayo accounts are for people aged 16 and over. Parents can add children to a trip (a name and age) to plan for them; children do not get their own account.
9. Security
Data is encrypted in transit, access is limited by strict rules so people only see what they are allowed to, and booking files and chat files are stored privately.
10. Changes
If we change this policy, we will update the date above and, for important changes, tell you in the app.