Together Voyage — Privacy Policy

1. Who this policy covers

This Privacy Policy explains how Together Voyage, a product of Together Community (Abu Dhabi, United Arab Emirates), collects, uses, and protects your personal data when you use togethervoyage.com and related applications (the “Service”).

2. What we collect

• Account information: the email address and password you sign up with, and any display name, handle, or profile visibility setting you choose.
• Trip content: itinerary entries, places, photos, journal entries, packing lists, expenses, and messages you and your trip’s travelers submit.
• Usage data: basic technical data needed to operate the Service — for example, timestamps of actions like AI requests or photo uploads, used to enforce the usage limits described in the Terms.
• AI interactions: questions you send to the AI help desk, and trip content used to generate AI place suggestions.

We do not currently collect payment information, since there is no live payment system during this trial.

3. How we use it

We use your data to: provide and operate the Service (showing your trips to the travelers you invite); enforce the content and usage limits described in the Terms; operate the AI features, which send relevant content to Anthropic for processing (see Section 5); apply content moderation, particularly to content you choose to publish publicly; and communicate with you about your account (e.g. support requests you send us).

4. Where your data is stored

Your data is stored and processed on servers located outside the UAE — currently in the Mumbai, India region, through our infrastructure provider, Supabase. By using the Service, you acknowledge this cross-border transfer of your data from the UAE to India.

5. Third parties we share data with

• Anthropic (Claude API) — receives your AI help desk questions and relevant trip content, to generate AI place suggestions and help desk answers. By default, Anthropic does not use data submitted through its commercial API to train its models.
• Supabase — hosts our database, authentication, and file storage (Mumbai region).
• Vercel — hosts the application.
• Wikimedia Commons and OpenStreetMap/Photon — we query these services for place data and images to enrich your itinerary entries; we don’t send them your personal data, only place/location search terms.

We do not sell your personal data.

6. Publishing and sanitization

If you choose to publish a trip publicly, we automatically sanitize it before anything is shown publicly — aliasing traveler names, coarsening exact dates and addresses, and stripping photo metadata (EXIF). Accepted travelers on a trip can always see full, unsanitized trip content regardless of publish settings; the public only ever sees the sanitized version.

7. Your rights

Subject to applicable law, you may have rights to access, correct, export, or request deletion of your personal data. To exercise these rights, or to ask us any question about how we handle your data, contact hello@togethervoyage.com.

8. Data retention

We retain your account and trip data for as long as your account is active. If you request account deletion (Section 7), we will delete your personal data, other than what we’re required to retain by law.

9. Security

We take reasonable technical measures to protect your data, including relying on Supabase’s infrastructure-level security (encryption in transit, row-level access controls). No online service can guarantee perfect security.

10. Children

The Service is not directed at anyone under 18 (see the Terms, Section 2), and we do not knowingly collect data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time, including to reflect regulatory changes or new features. We will indicate the “Last updated” date above and, for material changes, provide reasonable notice.

12. Contact

Questions about this Privacy Policy can be sent to hello@togethervoyage.com.