Privacy Policy

This Privacy Policy explains how Elijah ("we," "us," "Publisher") collects, uses, stores, and discloses information in connection with the TravelVerse mobile application (the "App"). It is designed to meet transparency expectations under applicable data-protection principles and the Solana Mobile dApp Store Publisher Policy (User Data guidelines).

By using the App, you acknowledge this Policy. Where consent is required by law, we will request it before the relevant processing.

1Who We Are

2Scope

This Policy covers information processed when you:

• install or use the App on a Solana Mobile device or other Android device;
• enter trip details and generate itineraries;
• enable optional features such as background music playback;
• contact us by email.

It does not cover third-party websites, wallets, or apps that we do not control, even if linked from the App or the dApp Store listing.

3Information We Collect

3.1 Information you provide

When you use planning features, you may enter: origin and destination cities; number of travelers and trip length; start date; optional budget and interest tags; stay / transport preferences.

These inputs are used to generate an itinerary. We do not require you to create an account, provide your legal name, or submit government ID to use core planning features.

If you email us for support or privacy requests, we process your email address and message content to respond.

3.2 Information processed automatically on your device

Depending on platform and OS permissions, the App may access: local app storage for temporary UI state; network connectivity status; audio playback state when you enable background music.

We do not intentionally collect: precise continuous GPS tracking as a product feature; contacts, photos, microphone, or camera by default; payment card data or financial account credentials; biometric identifiers; health / HIPAA-type data; advertising IDs for cross-app tracking.

If a future version requests additional permissions, we will disclose the purpose in the App and update this Policy.

3.3 Information sent to third-party planning services (when remote planning is used)

Certain App builds may call a third-party language model (LLM) API to generate itinerary text. When that happens, the trip parameters you entered and technical request metadata (e.g., timestamps, model parameters) may be transmitted to the LLM provider over the internet.

We do not intentionally send your device contacts, seed phrases, wallet private keys, or payment card numbers.

3.4 Information we do not sell

We do not sell personal data. We do not offer Regulated Data for sale.

4Purposes and Legal Bases

Where Kenyan law or another mandatory law requires consent for a specific processing activity, we will seek it and you may withdraw consent (without affecting prior lawful processing).

5Sharing and Disclosure

We may share information only as follows:

1. LLM / infrastructure providers — to generate itineraries when remote planning is enabled. Those providers process data under their own terms and privacy policies.
2. Service providers — e.g., email providers we use to receive support mail, solely to process communications.
3. Legal requirements — if required by applicable law, regulation, legal process, or governmental request.
4. Safety — to protect rights, safety, and security of users, the public, or us, where permitted by law.
5. Business transfers — if the App is transferred as part of a reorganization, merger, or sale, subject to appropriate safeguards.

We obligate third parties we engage to handle User Data in a manner consistent with this Policy and applicable Publisher Policy requirements, where reasonably practicable.

Solana Mobile: If you download the App from the Solana Mobile dApp Store, Solana Mobile and device platform providers may independently process install/usage data under their own privacy policies. We do not control that processing.

6International Transfers

Remote planning API calls may be processed on servers outside Kenya (and outside your country of residence), depending on the LLM provider's infrastructure. By using remote planning features, you understand that such transfers may occur. We take reasonable steps to use reputable providers and encrypted transport (HTTPS/TLS) in transit.

7Retention

• On-device: Trip forms and generated plans typically remain on your device until you clear app data or uninstall.
• Support emails: Retained as long as needed to handle your request and for legitimate record-keeping (generally up to 24 months, unless a longer period is required by law).
• LLM providers: May retain prompts/logs under their own retention policies; we do not control their servers.

We do not operate a mandatory cloud user-profile database for TravelVerse at this time.

8Security

We use reasonable technical and organizational measures appropriate to the nature of the App, including TLS for remote API calls, limiting categories of data sent to third parties to what is needed for itinerary generation, and the ability to fall back to local planning without remote calls when services fail.

9Regulated / Sensitive Data

Please do not submit Regulated Data (as defined in the Solana Mobile Publisher Policy) into the App, including government ID numbers, health information, biometrics, precise geolocation for tracking, or payment card data. The App is not designed to process such data, and we ask that you minimize personal data in prompts.

If you believe you submitted sensitive data by mistake, contact us promptly so we can advise on deletion of any copies we control.

10Children

The App is not directed to children under 18 (or the age of majority under applicable law). We do not knowingly collect personal data from children without verifiable parental consent where required. If you believe a child has provided personal data, contact elijahwekesa2001@proton.me and we will take reasonable steps to delete information we control.

11Your Rights and Choices

Depending on applicable law (including Kenya Data Protection Act, 2019 principles where they apply, and other laws that mandatorily protect you), you may have rights to access, correct, delete, object to or restrict processing, withdraw consent, and lodge a complaint with a supervisory authority (in Kenya, the Office of the Data Protection Commissioner, where applicable).

How to exercise rights

Email elijahwekesa2001@proton.me with subject "Privacy Request" and describe your request. We may need to verify your identity to a reasonable degree.

Account / data deletion

The App does not require a cloud account. To delete local data: uninstall the App and/or clear app storage in system settings. To request deletion of information we hold (e.g., support emails), use the contact above.

Opt-out of remote planning

If remote planning is unavailable or fails, the App may use on-device rules. You can also limit network access via OS settings; planning will then rely on local generation only.

12No Deceptive Consent

We do not use fraudulent, deceptive, or coercive measures to obtain consent. Declining optional data practices will not force unrelated harmful settings changes on your device. Core OS permissions are requested only when needed for a feature.

13Cookies and Tracking

The mobile App is primarily a packaged WebView experience. We do not currently use third-party advertising cookies or cross-app tracking SDKs. Platform WebView components may use technical storage as controlled by the OS.

14Changes to This Policy

We may update this Policy from time to time. The "Last updated" date will change when we do. Material changes will be indicated by updating the in-app or store-linked policy text. Continued use after an update means you acknowledge the revised Policy, except where mandatory law requires further consent.

15Contact

16Summary (plain language)