Your trips are yours
Voya is a group trip planner. This page says what it keeps about you, why, who helps run it, and how to get it deleted. No ads, no selling data, no tracking you across other apps or websites.
Who we are
Voya is made by David Sullivan in London, UK, who is responsible for your data under UK data protection law (UK GDPR). Questions or requests: dev@sullios.com.
What Voya keeps
| What | Why |
|---|---|
| Your name, colour and home city | So people on your trips know who's who, and to show times back home. |
| Your email address (and Apple or Google sign-in) | To sign you in. We don't send marketing. |
| Your trips: plans, bookings, booking references, dates, ideas, votes, comments, lists and shared money | That's the app. Most of it is shared with the people on that trip; plans you mark "Only you" are seen only by you. |
| Tickets, boarding passes and trip photos you add | So you and (if you choose) your group can open them, including offline. Kept in private storage, opened through links that expire. |
| Booking emails you forward to your Voya address, and links or lists you paste | To turn them into plans or saved places for you. |
| Places you save to your Plan | Your own list. Only you can see it. |
| Your Monzo, PayPal or Revolut username, if you add one | So people on your trips can pay you back. Only usernames, never account or card numbers. Only people on your trips see it. |
| A notification token for your phone | To send you trip notifications, if you allow them. |
| Feedback you send from the app | Your message, a screenshot if you add one, the screen you were on, and your email only if you choose to include it, so we can fix things and reply. |
| Crash and error reports | To find and fix bugs. They include the error, the screen, the app version, the phone model and an anonymous account id; we strip names, emails, invite links and file links out on your phone before anything is sent. |
Your location is used on your phone (to show where you are on the trip map and roughly how far the next plan is). The one time it leaves your phone is when you ask Voya what's near you: then your position goes with that question so Google Places can find what's close. It's used for that answer only and not stored. Smart reminders are scheduled on your phone too, and the copy of your trips kept for use offline is stored encrypted on your phone and cleared when you sign out.
Who helps run Voya
These companies process data for us, only to provide the parts of Voya listed. They aren't allowed to use it for their own purposes under their terms with us.
- Supabase: database, sign-in, file storage and server functions, hosted in London (AWS eu-west-2).
- Google: Google sign-in if you use it; Google Places for looking up places and photos (we send the place name and city, or your position when you ask what's near you); and Google's Gemini AI for reading booking emails, pasted lists, translations, suggestions and "Ask" questions you send.
- Resend: receives the booking emails you forward to your Voya address.
- Expo and Apple: deliver push notifications.
- Sentry: crash and error reports and in-app feedback, stored in the EU (Germany).
- Vercel: hosts this website and the invite and shared-trip pages.
Some of these companies are based in the US. Where data leaves the UK, it's covered by the UK's approved safeguards (such as the UK International Data Transfer Addendum or the UK–US data bridge).
Our legal basis
We use your data to provide the service you've asked for (contract), and crash reports to keep Voya working and safe (legitimate interests). Notifications and location are only ever used if you allow them, and you can turn them off at any time in the iPhone Settings app.
How long we keep it
As long as you have an account. Deleting a trip deletes everything in it. Crash reports are deleted automatically by Sentry within 90 days.
Deleting your account
In Voya, open You (your profile) and choose Delete account. That deletes your profile, your private plans, your saved places, your tickets and your photos straight away. Plans and spending you shared with a group stay on that trip for the others (your name becomes "Former traveller"), and trips you organised pass to the next person on them, or are deleted if no one else has joined.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it, by emailing dev@sullios.com. We'll reply within a month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
Voya isn't meant for children under 13, and we don't knowingly collect their data.
Changes
If this policy changes, we'll update the date at the top, and tell you in the app if the change is significant.