Privacy Policy

This Privacy Policy explains how Fix AI, Inc., doing business as Vaya ("Vaya", "we", "us", or "our"), collects, uses, discloses, and retains personal information when you use the Vaya mobile application, flyvaya.com, and related services (collectively, the "Service"). Fix AI, Inc. is the controller of the personal information described in this policy unless stated otherwise.

1. Information We Collect

Account and profile information

We collect information used to create and manage your account, such as your email address, phone number when provided, account identifier, sign-in provider, username, profile picture, birth month and year, and selected home airport. We may derive your age from the birth information you provide.

Content, trips, and interactions

We collect posts, images, captions, visibility choices, saved posts and places, likes, trip names and dates, trip members and roles, invitations, itinerary items, visited status, and other actions you take in the Service. If you publish a post or profile information publicly, that information is public. Trip information is shared with the people who join that trip.

Location information

If you grant location permission, the app may use approximate device location to suggest a nearby airport. Vaya stores the home airport you select. We do not need precise background location to provide the Service.

Device, usage, and diagnostics

We and our service providers collect technical and usage information such as IP address, device and app identifiers, device model, operating-system and app versions, language, time zone, notification token and status, referral or attribution information, feature usage, searches, screens viewed, interactions, approximate location inferred from IP address, session information, crash data, server logs, and error traces. Vaya does not use this information for targeted advertising.

Purchase and support information

For prior Vaya Pro subscriptions, we may receive subscription status, product, transaction, expiration, and refund information from app marketplace and subscription providers. We do not receive your full payment-card number. We also collect messages and attachments you send when requesting support, account recovery, a refund, or another privacy request.

Information from third-party sources

We may receive information from third-party sign-in services, app marketplace and subscription providers, and analytics, attribution, and reliability providers. Vaya also displays travel content and creator attribution from third-party social platforms and travel websites. That may include a creator's public name or handle, source link, and content that Vaya is permitted to display.

2. How We Use Information

We use personal information to:

• Create, authenticate, maintain, recover, and delete accounts
• Provide profiles, posts, recommendations, saves, trips, collaboration, sharing, and travel deals
• Identify and summarize places and organize, enrich, and moderate content using automated systems
• Personalize the Service, including recommendations based on your activity and selected home airport
• Promote Vaya using content that you choose to make public
• Send requested push notifications and Service communications
• Operate, analyze, debug, secure, and improve the Service
• Prevent fraud, abuse, security incidents, and violations of our Terms
• Respond to support, account recovery, legal, and privacy requests
• Comply with law and establish, exercise, or defend legal claims

Where European or United Kingdom data-protection law applies, we process information as needed to perform our contract with you, based on our legitimate interests in operating, securing, and improving the Service, with your consent where required for optional permissions or communications, and to comply with legal obligations. You may withdraw consent at any time, without affecting processing already completed.

3. Public and Collaborative Information

Your username, profile picture, and public posts may be visible to other users and through public share links. People you invite to a trip can see the trip and its members and can contribute according to their role. Content shared publicly can be copied or reshared by others, and Vaya cannot control copies made outside the Service. Your email address, phone number, birth information, and private account settings are not displayed publicly by Vaya.

4. How We Disclose Information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or use it to show targeted advertisements. We disclose information in the following limited circumstances:

• Vendors: We disclose personal information to vendors when needed to provide, operate, secure, analyze, and improve the Service. They may process that information only for the services they provide to us and as permitted by law.
• Other users: We disclose public profile and post information and information you choose to share with trip collaborators.
• Legal and safety: We may disclose information if reasonably necessary to comply with law or legal process, protect rights and safety, investigate abuse, or enforce our Terms.
• Business transfers: Information may be disclosed as part of a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law.

We do not send your Vaya account information to airlines, hotels, or travel providers merely because we display a deal. When you follow a third-party link, the destination site receives information normally sent by your browser or device and any information you choose to provide there. Its own privacy policy applies.

5. Data Retention and Account Deletion

We retain account information while your account is active and as reasonably needed for the purposes described in this policy. Retention periods vary based on the type of information, why we use it, legal and security requirements, and the retention settings of our service providers.

When you request account deletion in the app, we immediately disable and hide the account, profile, posts, and affected trips. We retain the deleted account and its content for up to 90 days so you can contact team@flyvaya.com to request support-assisted recovery. Recovery is not automatic or guaranteed. Creating a new account with the same email address does not restore the deleted account.

After 90 days, we permanently delete the account, profile, posts, private uploaded files, and other account-linked records from our active systems and storage backups. The account can no longer be recovered.

If you participated in a shared trip, the trip may remain for its other members after your membership and account link are removed. Information another person copied or reshared outside Vaya is outside our control.

We may retain information for longer where required by law or reasonably necessary to protect the Service, prevent fraud or abuse, resolve disputes, or enforce agreements. We may retain information that has been aggregated or deidentified so it can no longer reasonably identify you.

6. Your Choices and Privacy Rights

Depending on where you live, you may have the right to:

• Access or receive a copy of personal information we hold about you
• Correct inaccurate personal information
• Delete personal information
• Object to or restrict certain processing
• Withdraw consent where processing relies on consent
• Receive portable data where applicable
• Appeal our response or complain to your local data-protection authority

You can edit certain profile information in the app, control notifications and location permission in device settings, and request account deletion in the app. For other requests, email team@flyvaya.com. We may need to verify your identity and may deny or limit a request where permitted by law. Authorized agents may submit requests where local law permits, subject to verification of their authority.

California and other United States residents may exercise applicable access, correction, deletion, and appeal rights without discriminatory treatment. Because Vaya does not sell personal information or share it for cross-context behavioral advertising, we do not offer a sale or targeted-advertising opt-out.

7. International Data Transfers

Vaya is based in the United States, and we and our service providers process information in the United States and other countries. These countries may have different data-protection laws from where you live. Where required, we rely on recognized safeguards for international transfers, such as contractual protections, or another lawful transfer mechanism.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. A higher minimum age may apply where local law requires it. If you believe a child has provided personal information in violation of this section, contact team@flyvaya.com so we can investigate and delete it.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls and encryption in transit and at rest where supported. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Third-Party Services and Links

The Service links to social platforms, maps, travel websites, and other third-party services. We do not control those services or their privacy practices. Review their policies before providing information or completing a transaction.

11. Changes to This Policy

We may update this policy as the Service or law changes. We will post the revised policy and update the date above. If a change is material, we will provide reasonable additional notice through the Service, by email, or by another appropriate method.

12. Contact Us

To ask a privacy question or exercise a privacy right, contact team@flyvaya.com.