Privacy Policy

LONAVIA — Your AI travel guide · Version 2.0 · Last updated: October 17, 2026

1. Who we are

LONAVIA is a progressive web application (PWA) providing an AI-powered travel guide. This policy describes how we collect, use, store, and protect the personal data of LONAVIA users.

Data controller: The LONAVIA development team.

Site: lonavia.app

2. What data we collect

2.1. Data you provide directly

2.2. Automatically collected data

Location treated as sensitive data: we treat your geolocation as a sensitive data category under GDPR and emerging U.S. privacy laws (Oregon, Colorado, Connecticut, among others). Your GPS consent is specific, informed, and separate from other permissions: before asking the system for your location, LONAVIA shows its own screen explaining what it is used for (guide mode, Stays and Passport) and only uses GPS if you tap Yes. We store the date and version of each answer (yes, no or withdrawal) on your device and, if you are signed in, in our database, so we can demonstrate that consent was given; that record contains no location and is deleted when you delete your account. You can withdraw it at any time with the switch in Settings → Permissions → GPS location, which stops GPS use immediately, without blocking the rest of the app; to also remove the system permission, use your browser or iPhone settings. We never persist exact coordinates in our database.

Country on app open (Days per country): only if you already granted location permission before (we never ask for it for this), when you open the app we read your location once to detect which country you are in and create your stay with the entry marked "unconfirmed". The coordinates are sent to OpenStreetMap / Nominatim only to get the country code and are not stored anywhere: all that remains is the stay (country and entry date), just as if you had added it by hand. With that same country we may suggest closing a stay that is still open in another country (with the previous day as the exit date, editable); we never close it on our own: it only closes if you tap "Close it". If you remove the permission in your browser settings, this stops happening.

2.3. Data we do NOT collect

• We do NOT use the microphone or record audio: LONAVIA does not ask for that permission. The app's voice goes one way only (LONAVIA speaks to you).
• We do NOT access your camera, contacts, calendar, or files.
• We do NOT store financial data (cards, bank accounts). Shared expenses are numeric amounts only, no real payment data. If you choose it when adding an expense, we store only how you paid —cash or card—, never the card number, the bank or any card details. It is optional: if you don't choose, it stays unspecified.
• We do NOT use advertising tracking cookies or social media pixels.
• We do NOT sell your data to third parties.

2.4. Data about other people that you enter

In an Expenses group you can add other people to split costs. There are two cases:

• People without a LONAVIA account: we only store the name or nickname you type and the amounts you assign to them. We do not ask for or store their email, phone number or any other data, and we do not send them anything.
• People who join with your invite link: they join with their own account. Group members see their name and profile photo, and the group's expenses.

Only add someone if you know they agree. This data is used solely to calculate the group's split and is deleted when you remove that person from the group or delete the group. If someone wants their name removed from a group, they can write to us at the address in Contact.

3. How we use the data (GDPR Legal Bases)

Automated decisions

LONAVIA does not make automated decisions that produce legal effects concerning you or similarly significantly affect you (GDPR Art. 22). AI answers, the days-per-country count and stay alerts are guidance only: they do not decide anything for you and do not replace what the immigration authority says. We also do not use your data to build profiles for advertising.

4. Third parties we share data with

LONAVIA uses third-party services to operate. Each has its own privacy policy that we recommend you review.

Important: We only share data strictly necessary with each service. We do not sell or commercialize your data.

5. International data transfers

Some of the listed services (Google, Groq, Vercel, Upstash, Sentry, Cloudflare, Pollinations) process data on servers located outside the European Economic Area (EEA), primarily in the United States.

These transfers are conducted under the following safeguards:

• Standard Contractual Clauses approved by the European Commission.
• EU-US Data Privacy Framework certification where applicable.
• Encryption in transit (HTTPS / TLS 1.3) and at rest.

6. Data retention and deletion

Upon account deletion, all associated personal data is erased from our database within a maximum of 30 days, except for data we are legally required to retain.

7. Your rights

Under GDPR (EU Regulation 2016/679), CCPA (California), and equivalent laws in other jurisdictions, you have the following rights:

• Right of access: request a copy of the personal data we hold about you.
• Right of rectification: correct inaccurate or incomplete data.
• Right of erasure ("right to be forgotten"): request that we delete your data.
• Right to restrict processing: ask us to stop processing your data under certain circumstances.
• Right to data portability: receive your data in a structured format (JSON) to transfer to another service.
• Right to object: object to processing based on legitimate interest.
• Right to withdraw consent: at any time, without affecting the lawfulness of prior processing.
• Right to file a complaint with the relevant data protection authority.

To exercise any of these rights, contact us at the address shown in the Contact section. We will respond within a maximum of 30 days.

Downloading your travel history: in Settings → Account and device → "Your passport is yours" you can download your travel history (countries, cities and dates) as a CSV file. The file is generated on your device and only when you ask for it; it is not sent to LONAVIA or to any third party. From then on, what you do with it (saving it, sharing it) is under your control. It does not include your conversations with the AI.

8. Minors

LONAVIA is NOT directed at children under 13 (or 16 in countries where the digital consent age is higher, per GDPR Art. 8).

We do not intentionally collect personal data from minors. If we discover that we have collected data from a minor without valid parental consent, we will delete it immediately.

9. Security

• HTTPS / TLS 1.3 encryption on all communications.
• OAuth 2.0 authentication with Google, no local passwords.
• Row Level Security (RLS) on the database: each user can only access their own data and that of the Expenses groups they belong to.
• Private API keys protected on the server (never exposed to the client).
• No storage of banking passwords or payment data.
• Periodic security audits (0 vulnerabilities in recent dependency audits).

Although we adopt reasonable measures to protect your data, no internet system is 100% secure. If a security breach affecting your personal data occurs, we will notify you within 72 hours per GDPR.

10. Changes to this policy

We may update this policy to reflect changes in our practices or legal requirements. When we do:

• We will update the "Last updated" date at the top.
• If changes are significant, we will notify you within the app before they take effect.
• Your continued use of LONAVIA after the update implies acceptance of the new version.

11. Contact

12. NAVICOUNT

NAVICOUNT (navicount.lonavia.app) is LONAVIA's shared-expenses app, published separately. It has the same controller, uses the same account and the same database, and everything this policy says about expenses, groups, the people you add to a group, retention and your rights applies to NAVICOUNT as well. If you delete your account from either app, it is deleted in both.

Your passport in NAVICOUNT: it only shows your name and your plan. It neither reads nor creates travel data.

Location in NAVICOUNT: NAVICOUNT does not use GPS until you accept it on its own screen, which only opens when you tap the location card on Home or the switch in Settings → Notifications and permissions → GPS Location. The consent is separate from LONAVIA's: a yes in one app does not count for the other. With your yes:

• Your position is read on your phone and compared, on that same phone, with a borders map the app downloads from our own server. The coordinates are not sent to anyone (neither to us nor to third parties) and are not stored.
• The only thing kept, and only on your phone, is the country code where you are and the days in the last 30 on which you were detected in each country. It is not uploaded to our database.
• It is used for two things: suggesting on Home that country's exchange rate or creating a group, and making your passport's globe stop on the country you're in.
• As in LONAVIA, we store each answer (yes, no or withdrawal) in our database, with the text version, the date and the app where you answered. That record contains no location and is deleted when you delete your account.
• You can withdraw it at any time with the same switch: NAVICOUNT stops using GPS immediately and deletes the stored country from your phone. To also remove the system permission, use your browser or iPhone settings.

Legal basis: your consent (GDPR art. 6.1.a and 9.2.a), which you can withdraw without blocking the rest of the app.