Voyxiety is operated by Valure Partners (trading as Voyxiety), a company registered in Finland.
Registered address: Espoo, Finland
Privacy contact: privacy@voyxiety.com
Valure Partners is the data controller under the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act (1050/2018).
We collect the minimum data necessary to operate the service. The table below sets out every category of data we process, the legal basis, and the retention period.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Anonymous device identifier | Authenticate your session without requiring an account | Legitimate interests (Art. 6(1)(f)) | 24 h after journey ends |
| First name or nickname | Display your name to other travelers you connect with | Contract performance (Art. 6(1)(b)) | 24 h after journey ends |
| Flight number | Match you with travelers on your flight and at your airport | Contract performance (Art. 6(1)(b)) | 24 h after journey ends |
| Emotional state (mood selection) | Show emotionally compatible travelers nearby; anonymised for aggregate analytics | Contract performance (Art. 6(1)(b)) | 24 h after journey ends |
| In-app chat messages | Enable private messaging between connected travelers | Contract performance (Art. 6(1)(b)) | 24 h after journey ends |
| Journey questionnaire responses | Understand how the service performed on your journey; improve the product | Legitimate interests (Art. 6(1)(f)) | 24 h after journey ends, then aggregated and anonymised |
| Offer interaction events (taps, dismissals) | Measure which contextual offers are relevant; improve offer timing | Legitimate interests (Art. 6(1)(f)) | 24 h after journey ends, then aggregated and anonymised |
| Push notification token | Send journey-relevant push notifications (e.g. connection requests, questionnaire prompt) | Consent (Art. 6(1)(a)) | 24 h after journey ends |
| Age band and gender (optional) | Understand traveler demographics in aggregate, anonymised form | Consent (Art. 6(1)(a)) | Retained indefinitely as anonymised, aggregated data only — never linked to your session or identity |
| Aggregated airport analytics | Understand anonymised trends to improve the service | Legitimate interests (Art. 6(1)(f)) | Retained indefinitely — no individual is identifiable |
We do not collect your precise GPS location, your email address, your phone number, or any government-issued identifier.
Age band and gender are the only demographic data we ask for, both are entirely optional, and both can be skipped with a single tap — skipping never blocks any part of the app. We do not ask for your date of birth, your photo, or any free-text description of yourself. This information is never used to filter, rank, or match you against other travelers, and is never visible to other users.
Voyxiety uses anonymous authentication provided by Supabase. When you open the app, a random session identifier is generated on your device. This identifier is not linked to your name, email address, phone number, or any other identifying information held by Valure Partners or by Supabase.
This means that even we cannot identify who you are from your session identifier alone.
With other app users. Your first name or nickname, emotional state, airport zone, and flight number are visible to other Voyxiety users at the same airport. If you initiate or accept a connection, your in-app messages are visible to the connected user only.
With infrastructure providers. We use Supabase (database and authentication), Expo (mobile app delivery), and Apple (iOS push notifications and App Store distribution). These providers process data strictly to deliver the service and are subject to appropriate data processing agreements.
With affiliate partners. If you tap an offer within the app (for example, travel insurance or an eSIM), you are redirected to the affiliate partner's website or app in your device browser. At the point of redirect, the affiliate partner may set their own cookies and collect data under their own privacy policy. We pass no personal data to affiliate partners.
With airport and airline partners. We share anonymised, aggregated emotional and journey data with airport and airline operators for passenger experience analytics. This data contains no names, no device identifiers, and no information that could identify any individual traveler.
We do not sell personal data. We do not sell, rent, or trade any personal data to any third party for their own marketing or commercial purposes.
Personal data is retained for a maximum of 24 hours after your journey ends. After this period, an automated job permanently deletes all personal data associated with your session, including your name, flight number, emotional state, chat messages, and device identifier.
What remains is anonymised, aggregated analytics data only — for example, the number of connections made on a given route, or the distribution of emotional states at a given airport. This aggregate data cannot be used to identify you.
One exception: if you chose to answer the optional age band or gender question, that specific answer is kept indefinitely rather than purged after 24 hours — but only as anonymised, aggregated data that is never linked back to your session, your name, or any other detail that could identify you individually.
You can also trigger immediate deletion yourself at any time — see Section 7.
Our primary infrastructure is hosted within the European Union. Some service components may involve transfers to countries outside the European Economic Area. Where such transfers occur, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission, in accordance with GDPR Chapter V.
Under GDPR, you have the following rights in relation to your personal data:
To exercise any of these rights, contact us at privacy@voyxiety.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi) or with the supervisory authority in your country of residence.
Voyxiety is intended for users aged 18 and older. The service is not directed at minors and is not available to anyone under 18 on the App Store. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has used the service, please contact us at privacy@voyxiety.com and we will delete the relevant data immediately.
The Voyxiety iOS app does not use cookies.
The Voyxiety website (voyxiety.com) uses Cloudflare for performance and security. Cloudflare may process network-level data such as IP addresses for the purpose of DDoS mitigation and analytics. This processing is subject to Cloudflare's privacy policy.
We do not use third-party advertising trackers or analytics SDKs on the website or in the app.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (TLS), row-level security on our database, and anonymous-by-design authentication that means your session cannot be linked to your identity by third parties.
No method of transmission over the internet is completely secure. If you have concerns about the security of your data, contact us at privacy@voyxiety.com.
We may update this privacy policy from time to time. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of the service after any change constitutes acceptance of the updated policy.