Privacy Policy

This Privacy Policy explains how Fix AI, Inc., doing business as Vaya ("Vaya", "we", "us", or "our"), collects, uses, discloses, and retains personal information when you use the Vaya mobile application, flyvaya.com, and related services (collectively, the "Service"). Fix AI, Inc. is the controller of the personal information described in this policy unless stated otherwise.

1. Information We Collect

Account and profile information

We collect information used to create and manage your account, such as your email address, phone number when provided, account identifier, sign-in provider, username, profile picture, birth month and year, selected home city and its coordinates, and selected home airport. We may derive your age from the birth information you provide.

Visits, content, and interactions

We collect visits, posts, photos, videos, captions, comments, mentions, tagged companions, visibility choices, ratings, place-comparison answers, personal rankings, lists, saved posts and places, likes, follows, and other interactions. We also collect trip names and dates, trip members and roles, invitations, itinerary items, and visited status. Public content and place lists may be visible to other users as described below. Trip information is shared with the people who join that trip.

Contacts and friend connections

If you choose to sync your contacts, we collect and store their phone numbers to match contacts with Vaya users and suggest people you may know or want to invite. Contact names stay on your device and are not uploaded to our servers. Other users may upload your phone number from their contacts. We use contact matches and follow relationships to suggest connections, and your profile may be suggested to others, including people who already have your number.

Location information

If you grant location permission, the app may use your device location to suggest nearby cities or an airport. The app may send latitude and longitude to Vaya to find nearby cities. We may also suggest cities using approximate location inferred from your IP address. Vaya stores your selected home city, its coordinates, and your selected home airport, as well as the places you log or save. We do not need precise background location to provide the Service.

Device, usage, and diagnostics

We and our service providers collect technical and usage information such as IP address, device and app identifiers, device model, operating-system and app versions, language, time zone, notification token and status, referral or attribution information, feature usage, searches, screens viewed, interactions, approximate location inferred from IP address, session information, crash data, server logs, and error traces. Vaya does not use this information for targeted advertising.

Purchase and support information

For prior Vaya Pro subscriptions, we may receive subscription status, product, transaction, expiration, and refund information from app marketplace and subscription providers. We do not receive your full payment-card number. We also collect messages and attachments you send when requesting support, account recovery, a refund, or another privacy request.

Information from third-party sources

We may receive information from third-party sign-in services, app marketplace and subscription providers, and analytics, attribution, and reliability providers. Vaya also displays content about places and travel with creator attribution from third-party social platforms and travel websites. That may include a creator's public name or handle, source link, and content that Vaya is permitted to display.

2. How We Use Information

We use personal information to:

• Create, authenticate, maintain, recover, and delete accounts
• Provide visit logs, ratings, personal rankings, place lists, profiles, posts, comments, and sharing
• Help people find friends and discover places, and provide trips, collaboration, and travel deals
• Identify and summarize places and organize, enrich, and moderate content using automated systems
• Calculate personal place rankings from your ratings and place comparisons
• Personalize recommendations using your activity, connections, and selected home city or airport
• Promote Vaya using content that you choose to make public
• Send requested push notifications and Service communications
• Operate, analyze, debug, secure, and improve the Service
• Prevent fraud, abuse, security incidents, and violations of our Terms
• Respond to support, account recovery, legal, and privacy requests
• Comply with law and establish, exercise, or defend legal claims

Where European or United Kingdom data-protection law applies, we process information as needed to perform our contract with you, based on our legitimate interests in operating, securing, and improving the Service, with your consent where required for optional permissions or communications, and to comply with legal obligations. You may withdraw consent at any time, without affecting processing already completed.

3. Public and Collaborative Information

Your username, profile picture, home city or airport-derived location, and home-city coordinates may be visible to other users. Public visits and posts, associated ratings and rankings, comments, tags, likes, and follower and following lists may also be visible to others. Your Want to go and custom place lists can be viewed and saved by other users. Other users see only public visits in your Visited list. Public posts and profiles may also be accessible through share links. People you invite to a trip can see the trip and its members and can contribute according to their role. Content shared publicly can be copied or reshared by others, and Vaya cannot control copies made outside the Service. Your email address, phone number, birth information, and private account settings are not displayed publicly by Vaya. Contact matching can associate your profile with a phone number another user already has.

4. How We Disclose Information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or use it to show targeted advertisements. We disclose information in the following limited circumstances:

• Vendors: We disclose personal information to vendors when needed to provide, operate, secure, analyze, and improve the Service. They may process that information only for the services they provide to us and as permitted by law.
• Other users: We disclose profile, visit, list, rating, ranking, and social information as described above, provide contact matches and friend suggestions, and share trip information with collaborators.
• Legal and safety: We may disclose information if reasonably necessary to comply with law or legal process, protect rights and safety, investigate abuse, or enforce our Terms.
• Business transfers: Information may be disclosed as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law.

We do not send your Vaya account information to airlines, hotels, or travel providers merely because we display a deal. When you follow a third-party link, the destination site receives information normally sent by your browser or device and any information you choose to provide there. Its own privacy policy applies.

5. Data Retention and Account Deletion

We retain account information while your account is active and as reasonably needed for the purposes described in this policy. Retention periods vary based on the type of information, why we use it, legal and security requirements, and the retention settings of our service providers.

When you request account deletion in the app, we immediately disable and hide the account, profile, posts, and affected trips. We retain the deleted account and its content for up to 90 days so you can contact team@flyvaya.com to request support-assisted recovery. Recovery is not automatic or guaranteed. Creating a new account with the same email address does not restore the deleted account.

After 90 days, we permanently delete the account, profile, posts, private uploaded files, and other account-linked records from our active systems and storage backups. The account can no longer be recovered.

If you participated in a shared trip, the trip may remain for its other members after your membership and account link are removed. Information another person copied or reshared outside Vaya is outside our control.

We may retain information for longer where required by law or reasonably necessary to protect the Service, prevent fraud or abuse, resolve disputes, or enforce agreements. We may retain information that has been aggregated or deidentified so it can no longer reasonably identify you.

6. Your Choices and Privacy Rights

Depending on where you live, you may have the right to:

• Access or receive a copy of personal information we hold about you
• Correct inaccurate personal information
• Delete personal information
• Object to or restrict certain processing
• Withdraw consent where processing relies on consent
• Receive portable data where applicable
• Appeal our response or complain to your local data-protection authority

You can edit certain profile information in the app, control notifications and location permission in device settings, choose public or private visibility for your posts, and request account deletion in the app. You can also control contact access in your device settings. For other requests, including deletion of synced contacts, email team@flyvaya.com. We may need to verify your identity and may deny or limit a request where permitted by law. Authorized agents may submit requests where local law permits, subject to verification of their authority.

California and other United States residents may exercise applicable access, correction, deletion, and appeal rights without discriminatory treatment. Because Vaya does not sell personal information or share it for cross-context behavioral advertising, we do not offer a sale or targeted-advertising opt-out.

7. International Data Transfers

Vaya is based in the United States, and we and our service providers process information in the United States and other countries. These countries may have different data-protection laws from where you live. Where required, we rely on recognized safeguards for international transfers, such as contractual protections, or another lawful transfer mechanism.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. A higher minimum age may apply where local law requires it. If you believe a child has provided personal information in violation of this section, contact team@flyvaya.com so we can investigate and delete it.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls and encryption in transit and at rest where supported. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Third-Party Services and Links

The Service links to social platforms, maps, travel websites, and other third-party services. We do not control those services or their privacy practices. Review their policies before providing information or completing a transaction.

11. Changes to This Policy

We may update this policy as the Service or law changes. We will post the revised policy and update the date above. If a change is material, we will provide reasonable additional notice through the Service, by email, or by another appropriate method.

12. Contact Us

To ask a privacy question or exercise a privacy right, contact team@flyvaya.com.