Voyage
Privacy

Privacy policy

Voyage needs some data to build and keep your trips. Here is what we collect, why, with whom and how you control it. No ads, no tracking and no selling of data.

Updated on October 24, 2026

01

Who we are

Voyage is an app by CodeSwift, the controller of your personal data under Brazil's General Data Protection Law (LGPD, Law 13.709/2018). For any privacy matter, including reaching our data protection officer, write to our support e-mail.

This policy applies to the Voyage app on iPhone and Android and to this website. The Portuguese version prevails in case of any discrepancy.

02

What we collect

Account

Your e-mail, used to sign in with a code, the name you choose and an internal account identifier.

Trips and preferences

Origin, destination, dates, who's coming along (for example, kids or a pet), trip style and comfort, the cars you add and the itineraries generated. Also what you ask for in “Request adjustments”.

Location

Only when you choose “Where I am” as the origin or open the map with permission granted. Stored coordinates expire after 30 days. Your live position during the trip stays on the device and is not sent to us.

Journal

The photos, memories and captions you add, your thumbs-up and thumbs-down stop ratings and your checklist items.

Device and diagnostics

A token to send notifications (such as “itinerary ready”) and app crash and performance reports, which are not linked to your identity. The Google Maps SDK collects map usage and diagnostic data on its own.

Purchases

If you buy the Pass or subscribe to Pro, we receive the purchase confirmation and status. Payment is handled by the App Store or Google Play: we never see your card details.

What we don't do

We don't show ads, don't track you across apps and websites, don't use an advertising identifier and don't sell data. What you type in the address search is sent to Google to suggest places and is not stored.

03

Why we use it and on what legal basis

  • Providing the service (performance of contract): creating your account, building, saving and syncing itineraries, showing your journal, applying your plan's limits and sending trip notifications.
  • Improving and protecting the app (legitimate interest): fixing bugs, measuring performance, preventing abuse and limiting automated use.
  • Features that need permission (consent): location, photos and notifications. You can revoke them at any time in your phone settings.
  • Complying with legal obligations, such as keeping records required by law and responding to orders from authorities.

Stop ratings also help pick better places for everyone, in aggregate and without linking them to you.

04

Who we share it with

Data only goes to service providers processing it on our behalf, each for its part of the service:

  • Supabase: database, sign-in and photo storage.
  • Google Maps Platform: routes, places, opening hours and the map. Use of the map is subject to the Google Maps Additional Terms and the Google Privacy Policy.
  • Google Gemini: the trip profile (route, dates, group and preferences) and adjustment requests, to write itinerary texts and suggestions. We use the paid tier of the API, under which Google does not use this content to improve its own products.
  • Firebase Cloud Messaging (Google): delivering notifications.
  • Sentry: crash and performance reports, without data that identifies you.
  • RevenueCat, Apple and Google Play: purchases and subscriptions.

Other than that, we only share data when required by law, by order of a competent authority.

05

International transfer

Some of these providers store or process data outside Brazil, for example in the United States. These transfers follow article 33 of the LGPD, with contractual safeguards equivalent to those required in Brazil.

06

How long we keep it

  • Account, trip and journal data are kept for as long as the account exists.
  • Origin coordinates and route data from Google expire after 30 days.
  • When you delete your account, we erase the data from systems in use. Backups are replaced within a limited period, and purchase records are kept for as long as the law requires.

See the details on Delete account.

07

Your rights

Under the LGPD, you can ask for confirmation of and access to your data, correction, anonymization or deletion, portability, information on who we share it with and withdrawal of consent.

  • Download your data: in the app, under Profile → Download my data.
  • Delete your account: in the app, under Profile → Delete account, or via the Delete account page.
  • Any other request: through our e-mail. We reply within 15 days.

You can also file a complaint with Brazil's National Data Protection Authority (ANPD).

08

Security

All communication is encrypted (HTTPS). On the server, each account can only access its own data. On the device, the session is kept in the iPhone Keychain or the Android Keystore, and local data is encrypted. No system is infallible; if an incident could put you at risk, we will notify you and the ANPD.

09

Children and teenagers

Voyage is not made for children. Anyone under 18 should use the app with the permission and supervision of their parents or guardians. Data about children travelling along is limited to what you enter to build the itinerary, such as “with kids”.

10

Changes to this policy

When we change this policy, we update the date at the top. If the change is significant, we'll let you know in the app before it takes effect.

Privacy policy · Voyage