Who is responsible
The controller responsible for this website and for the data processing carried out by the developer of Traivu is Xavier DE Verdonces Román, whose address is Carrer Torres i Bages 50, Banyoles. You can contact us about privacy at support@deverdonces.com.
This policy distinguishes between the data you save in the app, the connections you use and the technical information needed to visit traivu.deverdonces.com. Apple and the external services listed may also process data under their own policies.
What you save in the app
Traivu lets you save trips, destinations, dates, bookings, booking references, plans, expenses, currencies, packing lists, phrases, companions’ names, preferences and travel passport memories on your device. The name you choose for your profile and the contacts you select are used to organise your trips and split expenses. The system contact picker returns the people you choose; Traivu does not request a full copy of your address book.
When you import a booking, its text is read on your device. Review the extracted information before adding it to your trip. The vault stores the documents you add and their descriptive information, such as the holder or expiry date. Its files and index are encrypted locally and excluded from system backups. The key is stored in this device’s keychain. The vault is not included in iCloud trip syncing, widgets or itinerary exports.
The app does not include advertising, behavioural analytics or mandatory registration for a Traivu account. This does not prevent the connections described below from communicating technical information to their providers.
AI assistance and reading
The built-in assistant and intelligent booking extraction use Apple Intelligence’s local model through Foundation Models when the device and its configuration are compatible. Traivu gives the model the text of your question and the trip context needed to answer. This integration does not send questions to an API from OpenAI, Anthropic or another external provider. If the model is unavailable, basic booking reading continues to work using local rules.
The option to prepare a question for ChatGPT or Claude is separate: you can review the text, choose whether it includes the day’s plans, and copy or share it. Tapping Open ("Abrir") copies the question and opens the chosen service; you decide whether to paste and send it. The automatic context does not add booking code fields, notes, amounts or companions’ names. It may include the destination, dates, number of people, and the titles, times and locations of plans. Review that text and your question, because they may contain information you have entered. Once shared, processing is also subject to the application or service you have chosen.
Connections needed for some features
Features that obtain information from the internet make requests to external services. Each connection may reveal your IP address, the time of the request and technical network data to the destination server. The parameters depend on the feature you use:
These requests do not, by themselves, upload all your trips or documents. Traivu does not use GPS to track your movements in the background; the coordinates requested relate to places on your trip. Providers may keep technical logs under their terms. Open-Meteo states a retention period of 90 days for its server logs. Frankfurter states that its API does not keep logs of IP addresses or request URLs.
- Apple MapKit: searches for places, addresses and coordinates to locate plans and display maps.
- Open-Meteo: the destination name for geocoding, and coordinates, dates or time ranges to request weather information.
- Frankfurter: currency codes to obtain exchange rates. Amounts are converted on your device.
- adsbdb and adsb.lol: airline codes and flight identifiers to request available routes and positions.
- Openverse, Wikimedia Commons and photo servers: destination searches and image downloads for covers.
- Unsplash, when the installed version has the cover service configured: the proxy receives the destination and country, queries Unsplash and records the selection of a photo. Images load from its servers. The proxy limits requests using network information and temporarily caches results.
- Apple Maps, Google Maps, Google Calendar or other apps you open or export to: the places, routes or events you choose to send. This data is also subject to the account and settings of the destination service.
iCloud and other integrations you choose to enable
If the installed version offers iCloud and you enable it in Connections ("Conexiones"), Traivu syncs your trips and passport collection to the private CloudKit database linked to your Apple Account. Trips may include their bookings, expenses, names, notes and any other content you have saved. Vault documents are kept separate. Turning off the connection stops new syncing and keeps both local data and copies already in iCloud.
Calendar and Reminders require the corresponding iOS permissions. They are used to read and maintain the items you link to Traivu, avoid duplicates and reflect changes. The chosen calendar or list may belong to a cloud or shared account; people with access to it could see those items. The app may show trip information in widgets, notifications and Live Activities when you use those features. Review their visibility on the Lock Screen.
Device permissions
Traivu requests camera access when scanning documents, device authentication when opening the vault, Calendar or Reminders access when connecting those features, and notification permission for alerts. Permission to save to Photos is requested when you choose to save a card from your collection. Files and photos are selected using the system pickers.
You can review or revoke permissions in iOS Settings. If you deny them, the features that depend on them may become unavailable. Traivu receives the result of Face ID, Touch ID or device passcode authentication; it does not receive your biometric template or passcode.
When you visit this website
This is an informational website. It does not include accounts, registration forms, advertising, visitor analytics, remote fonts or embedded third-party content. Its images and other resources are served from the site itself. We do not set our own cookies or use technologies to track your browsing.
Hosting and delivery through Cloudflare Pages require HTTP requests to be processed. Cloudflare may process IP addresses, requested URLs, dates, technical browser data and security signals to deliver and protect the site. We do not use that data to create advertising profiles. Logs and their retention depend on the service and the hosting security options. The cookie policy explains the scope of this processing.
Website delivery and protection rely on the legitimate interest in maintaining an accessible service and preventing abuse, with processing limited to what is necessary for those purposes. Use of the app and its functional connections responds to the features you request. Options that require consent can be disabled without affecting the lawfulness of processing before consent was withdrawn. iOS permissions are device access controls and do not, by themselves, replace data protection information.
If you contact support
If you write to support@deverdonces.com, we will receive your email address, the content of your message and any files you choose to attach. They are used to respond to your request, resolve issues and, where applicable, handle your rights. The legal basis is handling your relationship with Traivu or the preliminary steps you request; for general enquiries, the legitimate interest in replying; and, for requests to exercise rights, compliance with legal obligations.
We keep the conversation for as long as it is needed to handle the enquiry and document its resolution. Afterwards, only the information needed to meet legal obligations or possible claims will be kept for the applicable periods. Do not send complete passports, bank details or booking references if they are not needed; hide those details in screenshots. Sending a message does not subscribe you to marketing communications.
Retention, security and your choices
Local content stays in the app until you delete it or erase its storage. Synced data stays in your iCloud until its content is deleted and the changes are synced, or its storage is managed through Apple. Deletion may leave identifiers and technical markers to stop other devices from restoring deleted items. Recovery copies, exported files, calendar items and the originals you imported have an independent lifecycle.
The vault uses AES-GCM encryption and device authentication. The rest of the content uses iOS storage protections; it is not presented as having the vault’s separate encryption. If you export a PDF from the vault, that copy leaves without Traivu’s own encryption and is protected by the location where you save it. No system can guarantee absolute security.
You can consult the Delete your data page to distinguish between deleting trips, memories, documents, iCloud copies and files you have shared. The developer cannot delete your iPhone’s storage from this website.
Recipients and international processing
Information is communicated to the providers involved in the features described and, where legally required, to the competent authorities. Requests to external services and hosting may involve processing outside the European Economic Area. Cloudflare’s data processing agreement provides for the European Commission’s standard contractual clauses for transfers to which they apply. Apple and the other services publish their own terms and safeguards.
You can request information at support@deverdonces.com about the providers used for a specific feature and the applicable safeguards. We do not sell the content of your trips or use it for personalised advertising. When you choose an application to share content, that application may use its own providers and terms.
Your rights
You can request access, rectification, erasure, restriction and portability where applicable, object to processing, and withdraw consent by writing to support@deverdonces.com. State the right you want to exercise and the information needed to locate the processing. Additional identity information will only be requested if it is necessary and proportionate.
Requests are generally handled within one month; if their complexity or number requires an extension, you will be informed within that period. You can also lodge a complaint with the Spanish Data Protection Agency at aepd.es, or with the relevant supervisory authority. The assistant offers suggestions for you to review; Traivu does not make automated decisions with legal effects on you.
If the information exists only on your device, we will help you manage it without asking you to send us its full content. Do not enter other people’s data without a lawful basis for doing so. This policy will be updated when processing changes, and any new purposes requiring consent will be communicated before they begin.