Privacy policy

Last updated: 25 October 2026

Viaggiatore (“we”, “us”) is a travel planning app run by Forma360 Ltd, a company registered in England and Wales (company number 17292397). Forma360 Ltd is the data controller for the personal data described here; its registered office is listed on the Companies House register. This policy explains what we collect, why, who we share it with and the choices you have. If anything is unclear, write to [email protected].

1. What we collect

Account details: your name, email address and either a password (stored only as a secure hash) or your Google account identity if you sign in with Google.
Connected inboxes: if you connect Gmail, we receive read-only access through Google's OAuth. If you connect another provider, we store the app password you give us, encrypted. See section 3 for exactly what we read.
Trip content: trips, bookings, ideas, notes, checklists, expenses, votes and chat messages you or your trip members add.
Things you share with us: links, captions and screenshots of posts (for example Instagram or TikTok reels) that you share into the app.
Taste and home: food preferences and ratings you give, and your home city and airport (which we may infer from your flights; you can change them).
Location: only when you use features such as the food finder, and only while you use them. We don't track your location in the background.
Technical data: basic server logs (IP address, device type, request times and errors) used to keep the service running and secure.

2. How we use it

To build and update your trips from your bookings and keep them in sync for everyone on the trip.
To give AI-powered suggestions: places from shared posts, restaurant picks, day plans, airport advice and trip briefs.
To send service emails, such as password resets and trip invites.
To keep the service secure, prevent abuse and fix problems.

We don't sell your data, use it for advertising or share it with data brokers.

3. Gmail and other inboxes

When you connect an inbox, Viaggiatore looks only at messages from the last 12 months whose subject suggests a travel booking (for example “booking”, “reservation”, “e-ticket”, “itinerary”). It then:

uses an automated filter to set aside marketing and newsletters;
sends the text of likely booking emails to our AI providers to pull out the booking details (dates, times, flight numbers, addresses, booking references);
stores those booking details and the message identifiers, so the same email isn't read twice. We don't keep copies of your emails.

Bookings that belong to a trip you already have (including trips shared with you) are added to it automatically, and changes to them, such as a new flight time, are applied. A new trip is only created after you confirm it. Nobody at Viaggiatore reads your email, except where you ask us to help with a specific problem and give your permission, where it's needed for security (such as investigating abuse), or where the law requires it.

Google API Services: Viaggiatore's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Gmail data to serve ads and don't use it to train general-purpose AI models. We transfer it to our AI providers only to provide the features described above.

You can disconnect an inbox at any time in Profile → Connected inboxes, or remove our access in your Google account settings.

4. Who we share data with

Your trip members: anyone you invite to a trip can see and edit that trip's content, including bookings found in your inbox for that trip, and which travellers each booking covers. When you join someone's trip and already have your own trip for the same dates and place, we merge yours into theirs, so its content becomes visible to the other members.
Service providers that process data for us under contract:
- Railway, for hosting and the database (EU region);
- OpenRouter and the AI model providers it routes requests to, for AI features;
- Google, for sign-in, Gmail access and place details;
- Resend, for transactional email;
- Open-Meteo and Wikipedia, for weather and destination photos (these receive place names and dates, never your identity).
Some of these providers may process data outside the UK and EEA. Where they do, we rely on appropriate safeguards such as standard contractual clauses.
The law: we'll disclose information if the law requires it, or to protect the rights and safety of our users or others.

5. How long we keep it

We keep your data while your account is active. If you disconnect an inbox, we delete its credentials straight away. When you delete your account, we delete your profile, inbox connections, taste profile and the trips only you belong to. Trips you share with others stay with them, but your name is removed from them. Backups are overwritten within 30 days.

6. Your rights

Depending on where you live (including under UK and EU GDPR), you can ask to access, correct, export or delete your data, and to object to or restrict how we use it. You can also complain to your data protection authority (in the UK, the ICO). To use these rights, email [email protected]. You can delete your account yourself in the app (Profile → Delete account) or see how to delete your account.

Our legal bases are: performing our contract with you (running the app), your consent (connecting inboxes and location, which you can withdraw at any time), and our legitimate interests (security and improving the service).

7. Security

Data travels over encrypted connections. Inbox credentials are encrypted at rest and passwords are hashed. No system is perfectly secure, but we work to protect your data and will tell you about any breach as the law requires.

8. Children

Viaggiatore isn't meant for children under 16, and we don't knowingly collect their data.

9. Changes

We'll post any changes here and update the date above. If a change is significant, we'll tell you in the app or by email.