Caravoya ("we", "us") is an app for planning group trips, retreats and gatherings, in early beta, operated by Caravoya LLC. This policy explains what information the app handles and how. It is a beta draft and may change before a wider launch.
Information you provide
- Account: your email address and password (or sign-in through Apple or Google, if you choose), and your first and last name.
- Profile: an optional profile photo, and optional Venmo username or Zelle contact you choose to save.
- Trips: trip names, destinations, dates, cover photos, invitations (including any email address and message you enter for an invitee), ideas, polls, votes, comments, reactions and itinerary entries, including reservation details and attachments you add.
- Expenses: amounts, descriptions, payers, splits and notes; payment records you mark as sent, received, disputed or canceled.
- Receipts (optional): receipt photos you upload, and the details read from them.
- Album links (optional): a link to an external photo album that a trip organizer saves.
Retreat guest details and gathering food answers (optional)
Retreat organizers can ask confirmed guests optional questions. Each answer has its own purpose:
- Food allergies: Optional. Your allergy information is used only to help your host and relevant food-service providers plan and prepare food safely. It is not used for marketing or sold. An allergy answer is saved only after you tick "Save my allergy information". A separate, optional box lets the organizer share allergy details with the chef, caterer or other food-service provider for that event, only as needed for food safety. It is off unless you turn it on. Those providers never get access to Caravoya. The organizer passes the details on themselves, and Caravoya cannot control or recall copies once shared.
- Dietary preferences: used for meal planning.
- Accessibility requests: used to arrange accommodations. Not shared with food-service providers by this permission.
- Emergency contact: used only if something goes wrong during the event. Not shared by this permission.
- Room and arrival notes: used for room and travel planning.
Only you and the retreat's organizers can see your answers. Other guests and the public share page cannot. You can change or delete your health, food, accessibility and emergency answers at any time ("Delete my intake answers"). Deleting also turns off food-service sharing. We keep a minimal record of when each allergy permission was given or withdrawn (the permission version and date, not your answers). Gathering hosts can ask optional food preference and allergy questions, visible only to you and the host, for the host's own food planning. Gatherings don't have a food-service sharing permission yet. Agreeing to these Terms is not consent to collect health information; those questions have their own choices.
How it's used
To run the app: sign you in, show trips to their members, calculate shared balances, show in-app reminders and alerts, and keep a history of expense and payment changes. We do not use your information for targeted advertising.
We don't sell your information
Caravoya does not sell your personal information to third parties. We do use the service providers listed below to run the app, and information you choose to share is shown to the people in your trips.
Who can see what
- Trip content is visible only to members of that trip. Members can see each other's names and profile photos.
- Personal expenses and private reservation details are visible only to you — not to the organizer or other travelers.
- Your Venmo/Zelle details are shown to people you share a trip with only if you turn on sharing.
- Shared receipt images are visible to members of that trip; personal receipt images only to you.
Receipt scanning (AI)
If you scan a receipt, the image is sent to an AI model, accessed through Lovable's AI service, to read items and totals. You review and can edit the results before anything is saved. All splitting math is done by the app, not the AI. Don't scan receipts showing information you don't want processed this way.
Payments and external links
Caravoya does not hold, send, receive or verify money. Venmo and Zelle links open those services, which have their own terms and privacy policies. Shared album links open external services such as Apple or Google Photos; photos are not hosted in Caravoya, and who can view an album is controlled by that service's settings — anyone with an enabled public link may be able to view it.
Service providers
The app is built and hosted on Lovable, including its Lovable Cloud database, file storage, sign-in and server logs. Invitation and trip-update emails are sent through Lovable's email service, which uses Resend. Receipt images you choose to scan go through Lovable's AI service to an AI model to read the receipt. If you choose Apple or Google sign-in, those companies process that sign-in. Place search sends the text you type to the Photon place-search service, and photo suggestions are looked up on Wikimedia. Web fonts load from Google Fonts. These providers process data to run the app. We haven't confirmed each provider's storage regions or retention periods, and this policy doesn't make promises about how they use data beyond running these features.
Your agreement record
When you create an account or continue after these documents change, we record your account, the date, the versions you agreed to, and that you confirmed you are 18 or older. We don't collect your date of birth or verify your age.
Cookies and storage
The app stores your sign-in session in your browser so you stay signed in. We have not added advertising or analytics trackers to the app.
Security
Access to trip data is restricted to trip members by rules enforced on the server, and uploaded files are kept in private storage. No system is perfectly secure, and this is a beta. Only enter health, food, accessibility or emergency details in the optional private questions designed for them, and never enter government ID numbers, full card numbers or bank login details.
Keeping and deleting data
Retreat guests can delete their health, food, accessibility and emergency answers at any time; leaving or being declined from a retreat removes all of that guest's intake answers. Automatic deletion after a retreat ends is planned but not yet switched on. Deleted data may remain in routine backups for a limited time; we haven't confirmed exact backup and log retention periods. Your information is kept while your account is active. Deleted expenses are hidden but kept in the trip's change history. The app does not yet have a self-service account deletion option; to request deletion of your account or data, email us and we will handle the request manually.
Children
Accounts are for adults 18 and older. You confirm your age when you sign up; we don't verify it. Please don't use Caravoya if you are under 18.
Changes
We may update this policy. We'll change the effective date above and, for significant changes, try to let users know in the app.
Contact
Questions or requests: hello@getcaravoya.com