Privacy Policy
VOYA ("we", "us") is the intelligent travel marketplace operated by Start Tech Web Design. This Privacy Policy explains what personal data we collect through the VOYA website, iOS and Android applications, how we use it, who we share it with, and the rights you have. Effective date: 5 September 2026.
Data we collect
Account data (name, email address, phone number, password hash, language preference); trip and booking data (destinations, dates, travellers, itineraries, checklists, orders and reservations you create); payment metadata (amount, currency, payment method type and provider reference — full card details are processed by licensed payment providers and never stored by VOYA); AI concierge messages you choose to send, and related assistant settings; support conversations and reviews you submit; device and usage data (device type, operating system, app version, IP address, crash and performance diagnostics).
How we use data
To create and secure your account; to plan, book and manage trips and orders you request; to operate the AI trip assistant when you use it; to process payments and refunds through licensed providers; to provide customer support and safety features (including SOS assistance when you trigger it); to send service communications you have a right to receive; to improve reliability, prevent fraud and comply with the law. We do not sell your personal data.
AI concierge
Messages you send to the VOYA assistant are processed to generate replies and, when you ask, to perform trip actions. Assistant conversations are linked to your account so you can revisit them, and you can disable history or delete conversations in the app. We do not use your conversations to train third-party foundation models.
Sharing
We share data only with: service providers who help us run VOYA (hosting, payments, communications, analytics and AI infrastructure) under contracts that limit their use of it; travel partners, only to the extent needed to fulfil a booking you request; authorities, where the law requires it. We require partners to protect your data and use it solely for the services they provide to VOYA.
International transfers
VOYA is operated from the United Arab Emirates. Where data is transferred to providers outside your country, we use lawful transfer mechanisms and require an equivalent standard of protection.
Retention
We keep personal data only as long as needed for the purposes above: account data for the life of your account; booking and payment records for the period required by tax and commercial law; support and safety records for the period needed to handle and evidence the matter; diagnostics for a short rolling window. When data is no longer needed it is deleted or anonymised.
Your rights
Depending on your location (including under the EU/UK GDPR and the UAE Personal Data Protection Law) you have the right to access, correct, delete and receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. See our Data Rights (GDPR) page for how to exercise these rights, and our Account Deletion page for removing your account. You may also complain to your data protection authority.
Security
We protect data with encryption in transit, access controls, audit logging and least-privilege operational access. No system is perfectly secure; if a breach affects your rights we will notify you and the competent authority as the law requires.
Children
VOYA is not directed at children under 13, and we do not knowingly collect their data. Trips may include child travellers added by an adult account holder; that information is used only to fulfil the trip.
Contact
Privacy questions and data-rights requests: support@voyatravelapp.com. We will respond within the period required by applicable law. Material changes to this policy will be announced on this page with a new effective date.