Datenschutz in Travyy

Verantwortlich ist Dani Malki, Travyy, Saarbrücker Allee 9, 65201 Wiesbaden, Deutschland, info@travyy.de. Die folgenden Angaben konkretisieren die bestehende Datenschutzerklärung für die App.

Wir verarbeiten Kontodaten, Profilangaben, Beiträge, Nachrichten, gewählte Orte, technische Nutzungs- und Fehlerdaten sowie Abo-Informationen, soweit sie für die beschriebenen Funktionen erforderlich sind. Nationalität und die Gesichtsprüfung für den blauen Haken sind freiwillig. Standortzugriff lässt sich verweigern; Orte können manuell gewählt werden. Veröffentlichte Treffpunkte und Geschäftsadressen sind für die jeweiligen Empfänger sichtbar.

Bildprüfung: Hochgeladene Profil- und Community-Bilder werden zur Sicherheitsprüfung an Google Cloud Vision übermittelt (weltweite Verarbeitung). Dazu informiert dich die App vor deiner Zustimmung. Bei der gesonderten, freiwilligen Gesichtsprüfung werden fünf neue Aufnahmen und gegebenenfalls das vorhandene Profilfoto mit Google Cloud Vision und Vertex AI (EU) geprüft. Bei unklaren Fällen dürfen autorisierte Moderatoren die Aufnahmen ansehen.

Fristen der Gesichtsprüfung: Erfolgreiche rohe Prüfaufnahmen werden sofort zur Löschung vorgemerkt, abgelehnte nach 24 Stunden und Aufnahmen bei ausstehender manueller Prüfung nach 7 Tagen. Prüfprotokolle werden nach 30 Tagen, technische Betrugsprüfwerte nach 90 Tagen fällig. Der Bereinigungslauf erfolgt alle sechs Stunden; Fehler werden erneut verarbeitet. Ein freigegebenes Profilportrait bleibt bis zum Austausch oder zur Löschung sichtbar. Nach Löschung aus dem aktiven Cloudspeicher können Wiederherstellungskopien noch sieben Tage bestehen; die App kann sie nicht anzeigen.

Kontolöschung: Du kannst sie in den Kontoeinstellungen und bereits während der Einrichtung anstoßen. Der Anmeldezugang wird entfernt; zugeordnete Inhalte werden üblicherweise innerhalb von 24 Stunden bereinigt. Erforderliche Sicherheits- und Abrechnungsnachweise können zweckgebunden und zugriffsbeschränkt erhalten bleiben. Die Löschanleitung erklärt auch die Anfrage ohne App. Store-Abos sind separat bei Apple oder Google zu kündigen.

Für Auskunft, Berichtigung, Löschung, Einschränkung, Datenübertragbarkeit, Widerspruch oder Widerruf einer Einwilligung erreichst du uns unter info@travyy.de. Ein Widerruf wirkt für die Zukunft. Du kannst dich an die zuständige Datenschutzaufsichtsbehörde wenden. Die vollständige Erklärung folgt auf Englisch.

Last Updated: 4 October 2026

Travyy („Travyy“, „we“, „our“, or „us“) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, disclose, and protect your information when you use the Travyy mobile application, website, and related services (collectively, the „Services“).

This notice explains our processing. Where consent is required, we request it separately before the relevant processing; reading or continuing to use the service does not replace that consent.

1. Who We Are

Travyy is a social travel platform that helps travelers connect, create activities, join events, communicate through chats, and discover experiences around the world.

Travyy
Saarbrücker Allee 9
65201 Wiesbaden
Germany

Owner: Dani Malki

Email: info@travyy.de

Privacy Policy: https://travyy-share.web.app/legal/privacy/

Safety Guidelines: https://travyy-share.web.app/legal/safety/

Community Guidelines: https://travyy-share.web.app/legal/community/

2. Information We Collect

We collect information you provide directly and information collected automatically when using our Services.

Information You Provide

This may include:

• Name

• Email address

• Date of birth

• Profile information

• Gender (optional)

• Country or area of residence; nationality (optional)

• Languages spoken

• Interests

• Profile photos

• Messages and chat content

• Activities and events you create

• Future travel plans

• Support requests

• Verification photos

Providing certain information is necessary to create and maintain your account.

Information Collected Automatically

We may automatically collect:

• Device type

• Device identifier

• Operating system

• App version

• Language settings

• IP address

• Time zone

• Crash reports

• Usage statistics

• Login information

Location Information

Travyy uses location information to:

• Display nearby travelers

• Show nearby activities

• Enable map features

• Improve recommendations

• Calculate approximate distances

Profile and discovery visibility follow your settings. A meeting location or business address that you publish is visible to its intended audience; do not publish your private home address unintentionally.

You can disable location access at any time through your device settings and choose a location manually. Location access is requested for relevant foreground features, not continuous background tracking.

3. Profile Verification

The blue verification badge is optional. Before taking or uploading verification images, Travyy displays a separate explanation and requests explicit consent. You may decline and continue without the badge. With consent, the front camera takes four gesture images and you take a fifth neutral portrait. An existing profile photo is also compared where available.

These images are sent to Google Cloud Vision (global processing) and Google Vertex AI (EU endpoint) to check face consistency, liveness/replay indicators and fraud risks. Authorized moderators may inspect unclear cases. This is a community safety check, not a government identity check or a guarantee that another user is safe. Travyy does not sell face data or use it for advertising.

After approval, raw verification images become eligible for deletion immediately. Rejected-case raw images become due after 24 hours; manual-review images after 7 days. Verification records are due after 30 days and technical fraud-check hashes after 90 days. The cleanup task runs every six hours; failed operations are retried. These are retention schedules, not a promise that every copy disappears at the exact deadline.

A profile portrait that you have chosen to publish remains your profile photo until replaced or deleted. Deletion from active cloud storage can leave recovery copies under the storage provider’s seven-day soft-delete window. Those copies are not served in the app. These storage schedules describe Travyy’s copies, not an assertion of zero retention by every processor.

You can withdraw verification consent and request removal of verification data at info@travyy.de; account deletion also initiates removal. Withdrawal does not affect processing already lawfully carried out. A removed verification record may also remove the badge. Necessary safety evidence remains subject to the restricted exceptions below.

4. Content Moderation

Uploaded profile and community images are sent to Google Cloud Vision for automated safety classification, with global processing. This includes images uploaded for activities and chats where the image-safety pipeline applies. The app explains this processing before consent. The service returns classification signals; Travyy uses them to reject prohibited images or queue review. Text rules, user reports and authorized human review supplement image checks; this is not a promise that every video, audio recording or document is automatically understood.

Reported or flagged profiles, images, activities and messages may be inspected by authorized moderators. A user block immediately hides the blocked account’s content from the blocker’s feed and creates a private moderation notice. Reports and related evidence are access-restricted and used for safety decisions, fraud prevention, appeals and legal obligations. Blocking alone does not automatically penalize the other account. We do not use private messages to train AI models.

5. How We Use Your Information

We use personal information to:

• Create and manage your account

• Provide the Services

• Connect travelers

• Display nearby activities

• Enable messaging features

• Improve the platform

• Personalize recommendations

• Process subscriptions

• Prevent fraud

• Ensure safety

• Respond to support requests

• Comply with legal obligations

6. Legal Basis for Processing

Where required by applicable law, we process personal information based on:

• Contractual necessity

• User consent

• Legitimate business interests

• Legal obligations

For users in the European Union and European Economic Area, processing is conducted in accordance with the General Data Protection Regulation (GDPR).

7. Sharing of Information

We may share information:

With Other Users

Information visible on your profile may be shared with other users according to your privacy settings.

With Service Providers

We may use trusted third-party providers for:

• Cloud hosting

• Analytics

• Authentication

• Messaging

• Payment processing

• Customer support

These providers may only process information as necessary to provide services on our behalf.

Legal Requirements

We may disclose information if required by:

• Law

• Court order

• Government authority

• Regulatory requirements

8. Third-Party Services

Travyy may use third-party services including:

• Firebase (Google)

• Apple App Store

• Google Play

• Payment processors

• Analytics providers

• Cloud hosting providers

These services have their own privacy policies and practices.

Google Firebase provides authentication, database and file hosting, push delivery, abuse protection and crash/usage diagnostics. Google Cloud Vision processes uploaded images for safety and, separately, face verification; Vertex AI (EU) is used for the optional face check. Apple or Google process store purchases; Travyy receives transaction/entitlement information rather than your full payment-card details. Map tiles come from OpenStreetMap and place searches from Photon/komoot; requests can include your IP address, map area or search text.

Cloud Vision uses global processing, so data can be processed outside the EEA. More information is available in Google Cloud’s privacy notice and data processing terms. These links do not replace Travyy’s responsibility for the processing described here.

9. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption

• Secure servers

• Access controls

• Monitoring systems

However, no system can guarantee absolute security.

10. Data Retention

Account and published-content data is kept while needed to provide the service, or until you delete it. You can initiate account deletion in the app under Profile → Settings → Account Information → Delete Account; deletion is also available during setup and before accepting community terms. Instructions without the app are available at Delete account and data.

Sign-in access is removed when the deletion request succeeds. Profile data is anonymized and account-linked content, uploaded media, messages and membership references are then cleaned up, ordinarily within 24 hours. Failed cleanup operations are retried. Shared conversations and content belonging to other people remain; technical anonymous references may remain. Cloud storage recovery copies have a further seven-day soft-delete window and are not accessible through the app.

Reports, necessary moderation evidence, restricted audit records and purchase/billing records may be retained for legal obligations, safety investigations, fraud prevention or disputes. They are not kept as a public profile or for general community use. Their retention depends on the applicable obligation or unresolved case; ask info@travyy.de for the exception that applies to your request. Verification-specific schedules are set out in section 3.

Account deletion does not cancel a store subscription. Manage or cancel it in your Apple Account or Google Play; subscription management does not prevent immediate initiation of account deletion.

11. Your Privacy Rights

Depending on your location, you may have the right to:

Access

Request access to your personal information.

Correction

Request correction of inaccurate information.

Deletion

Request deletion of your personal information.

Restriction

Request restriction of processing.

Data Portability

Request a copy of your data in a machine-readable format. You may also complain to the competent data protection supervisory authority, including the authority in your place of residence or in Hesse, Germany.

Withdraw Consent

Withdraw consent where processing is based on consent.

Object

Object to certain processing activities.

Requests may be submitted to:

info@travyy.de

12. International Transfers

Your information may be processed in countries outside your country of residence.

Where required, Travyy implements appropriate safeguards to ensure lawful international transfers.

13. Children’s Privacy

Travyy is intended only for users who are at least 18 years old.

We do not knowingly collect personal information from individuals under 18 years of age.

If we become aware that such information has been collected, we will delete it promptly.

14. Cookies and Similar Technologies

Travyy may use cookies and similar technologies on its website to:

• Improve functionality

• Analyze traffic

• Remember preferences

• Enhance user experience

Users can manage cookie settings through their browser.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

Updated versions will be posted on this website and linked from the application.

Where a change requires new consent, Travyy requests it explicitly before the affected processing.

16. Contact Information

If you have questions regarding this Privacy Policy or your personal information, please contact:

Travyy

Saarbrücker Allee 965201 WiesbadenGermany

Owner:Dani Malki

Email:info@travyy.de

Website:https://www.travyy.de

Privacy:https://travyy-share.web.app/legal/privacy/

Safety:https://travyy-share.web.app/legal/safety/

Community Guidelines:https://travyy-share.web.app/legal/community/