Your information, within your Journey

How it is used

Information is used for guest-list review, Journey approval, communication and fulfilment. EIVA team members and relevant service partners may receive only the information needed for those purposes. It is not sold.

Invitations and retention

A Party invitation is a private bearer link. Do not forward it beyond its intended recipient. Pending links expire or can be revoked. Accepted details remain part of the proposed change and become part of the Journey roster only if that change is approved. EIVA keeps information only as long as needed to manage the Journey and meet applicable obligations.

AI assistance

EIVA's chat and voice concierge is an AI system. What you say or type is processed by OpenAI on EIVA's behalf to understand and answer your request. Relevant Journey context may be included. Conversation information supports the continuation and coordination of your request. Provider retention depends on the service and account configuration; disabling response storage alone does not guarantee zero retention. Please check dates, prices, availability and personal details before confirming an arrangement. You can stop voice and continue by typing.

App account, devices and payments

The app uses Supabase for accounts, stored data and related infrastructure. Account data can include email, name, optional birthdate, nationality, profile image, saved preferences and travel-party details. We use these to provide your account and requested travel services. Supply other travellers’ details only when you are authorized to do so.

Your selected profile photo is used as your account image. Foreground location is used when you request the related travel context. Microphone and speech permissions support voice interaction and local wake-word detection. You can deny these device permissions and use other app functions.

Stripe processes travel payments and saved payment methods. Apple processes App Store subscription billing; EIVA receives transaction information needed to verify membership access. EIVA does not receive your full card details through the native payment sheet.

For opted-in notifications we store the device notification registration and deliver Journey updates. Technical diagnostics can include app and OS versions, device model, session identifiers, request timing and errors, to operate and troubleshoot the app. These diagnostics are separate from advertising tracking.

Website usage statistics

We measure daily website visits, page categories, broad referral sources and activity by signed-in members to understand how EIVA is used. We create a daily changing pseudonymous visitor identifier from connection information; we do not store raw IP addresses, browser user-agent strings or full page URLs in the analytics dataset, and we do not use analytics cookies or local storage. Signed-in activity may be linked to your account. Shared networks and changing devices can affect visitor estimates.

We skip collection when your browser sends Do Not Track or Global Privacy Control. Analytics records older than 190 days are removed on the next recorded visit. These statistics are available only to authorized EIVA staff and are not used for advertising profiles. Contact us at the privacy address below to ask about or object to this processing.

Your AI choices and retention

The mobile app asks for permission before sending messages, audio, transcripts and relevant personal context to OpenAI. This choice is separate from microphone permission. Withdraw it in My EIVA → Account & Data to stop AI processing on that device. Other devices have their own permission. Manage or remove long-term memories in Memory. Withdrawing permission does not itself erase previously stored records.

Account information supports your account while it is active. Account deletion is handled through a request and review process. Where erasure is required, we carry it out without undue delay. Records that must remain for legal obligations or claims are limited to those purposes. Provider-side audio, transcript, backup and diagnostic retention depends on the applicable service and account configuration; contact us for the retention information relevant to your data.

The main purposes are providing the account and requested arrangements, complying with legal obligations, maintaining service security and reliability, and processing AI content with your permission. Depending on technical providers and your destination, processing can occur outside the European Economic Area. Contact us for information about applicable recipients and transfer safeguards.

Questions or requests

To request account deletion in the app, open Account & Data and choose Request account deletion. This submits a request; it does not erase the account immediately. If you use the website or cannot sign in, you can request deletion by email. To ask what EIVA holds, request access, correction, portability or restriction, object to processing where applicable, or raise a privacy concern, email data@ei-va.com. Some information may need to be retained for an applicable legal obligation or claim. We explain what is retained and why in our response.

We respond to privacy requests without undue delay and normally within one month of receipt. If a permitted extension is necessary, we explain the reason within that first month. We may request proportionate information where needed to verify your identity. Our response explains the action taken or the reasons we cannot fulfil a request. Account deletion and support.

You may also complain to the data protection authority where you live or work, or where an alleged infringement occurred. In Spain, contact the Agencia Española de Protección de Datos (AEPD). Withdrawing consent does not affect the lawfulness of processing before withdrawal.