Travyy

Datenschutz / Privacy Policy

Stand / Updated: 12. Oktober 2026 · English

Datenschutz in Travyy

Verantwortlich ist Dani Malki, Travyy, Saarbrücker Allee 9, 65201 Wiesbaden, Deutschland, info@travyy.de. Die folgenden Angaben konkretisieren die bestehende Datenschutzerklärung für die App.

Wir verarbeiten Kontodaten, Profilangaben, Beiträge, Nachrichten, gewählte Orte, technische Nutzungs- und Fehlerdaten sowie Abo-Informationen, soweit sie für die beschriebenen Funktionen erforderlich sind. Nationalität und die Gesichtsprüfung für den blauen Haken sind freiwillig. Standortzugriff lässt sich verweigern; Orte können manuell gewählt werden. Veröffentlichte Treffpunkte und Geschäftsadressen sind für die jeweiligen Empfänger sichtbar.

Profilbesuche und Sichtbarkeit: Wenn du ein fremdes Profil öffnest, speichern wir deinen Besuch für sieben Tage. Das besuchte Konto erhält einen Hinweis ohne deinen Namen; mit aktivem PRO-Zugang kann es dein öffentliches Profil in seiner Besuchsliste sehen. Blockierungen werden berücksichtigt. Die Besuchsdatensätze werden nach Ablauf durch einen stündlichen Bereinigungslauf gelöscht. Du kannst Alter, Online-Status und Karten-Sichtbarkeit getrennt einstellen. Personenstandorte auf der Karte werden auf ein ungefähres 500-Meter-Raster begrenzt; private GPS-Koordinaten und ausgeblendete Geburtsdaten werden nicht an andere Nutzer ausgegeben.

Bildprüfung: Hochgeladene Profil- und Community-Bilder werden zur Sicherheitsprüfung an Google Cloud Vision übermittelt (weltweite Verarbeitung). Dazu informiert dich die App vor deiner Zustimmung. Bei der gesonderten, freiwilligen Gesichtsprüfung werden fünf neue Aufnahmen und gegebenenfalls das vorhandene Profilfoto mit Google Cloud Vision und Vertex AI (EU) geprüft. Bei unklaren Fällen dürfen autorisierte Moderatoren die Aufnahmen ansehen.

Fristen der Gesichtsprüfung: Erfolgreiche rohe Prüfaufnahmen werden sofort zur Löschung vorgemerkt, abgelehnte nach 24 Stunden und Aufnahmen bei ausstehender manueller Prüfung nach 7 Tagen. Prüfprotokolle werden nach 30 Tagen, technische Betrugsprüfwerte nach 90 Tagen fällig. Der Bereinigungslauf erfolgt alle sechs Stunden; Fehler werden erneut verarbeitet. Ein freigegebenes Profilportrait bleibt bis zum Austausch oder zur Löschung sichtbar. Nach Löschung aus dem aktiven Cloudspeicher können Wiederherstellungskopien noch sieben Tage bestehen; die App kann sie nicht anzeigen.

Kontolöschung: Du kannst sie in den Kontoeinstellungen und bereits während der Einrichtung anstoßen. Der Anmeldezugang wird entfernt; zugeordnete Inhalte werden üblicherweise innerhalb von 24 Stunden bereinigt. Erforderliche Sicherheits- und Abrechnungsnachweise können zweckgebunden und zugriffsbeschränkt erhalten bleiben. Die Löschanleitung erklärt auch die Anfrage ohne App. Store-Abos sind separat bei Apple oder Google zu kündigen.

Für Auskunft, Berichtigung, Löschung, Einschränkung, Datenübertragbarkeit, Widerspruch oder Widerruf einer Einwilligung erreichst du uns unter info@travyy.de. Ein Widerruf wirkt für die Zukunft. Du kannst dich an die zuständige Datenschutzaufsichtsbehörde wenden. Die vollständige Erklärung folgt auf Englisch.

Last Updated: 12 October 2026

Travyy („Travyy“, „we“, „our“, or „us“) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, disclose, and protect your information when you use the Travyy mobile application, website, and related services (collectively, the „Services“).

This notice explains our processing. Where consent is required, we request it separately before the relevant processing; reading or continuing to use the service does not replace that consent.

1. Who We Are

Travyy is a social travel platform that helps travelers connect, create activities, join events, communicate through chats, and discover experiences around the world.

Travyy
Saarbrücker Allee 9
65201 Wiesbaden
Germany

Owner: Dani Malki

Email: info@travyy.de

Privacy Policy: https://travyy-share.web.app/legal/privacy/

Safety Guidelines: https://travyy-share.web.app/legal/safety/

Community Guidelines: https://travyy-share.web.app/legal/community/

2. Information We Collect

We collect information you provide directly and information collected automatically when using our Services.

Information You Provide

This may include:

Providing certain information is necessary to create and maintain your account.

Information Collected Automatically

We may automatically collect:

Location Information

Travyy uses location information to:

Profile and discovery visibility follow your settings. A meeting location or business address that you publish is visible to its intended audience; do not publish your private home address unintentionally.

Opening another user's profile records your visit for seven days. The account receives an anonymous notice and, with an active PRO entitlement, can see your public profile in its visitor list. Blocks apply in both directions. Expired visitor records are deleted by an hourly cleanup job. Age, online-status and map-visibility settings are separate. Personal locations shared on the map are limited to an approximate 500-metre grid; private GPS coordinates and hidden birth dates are not returned to other users.

You can disable location access at any time through your device settings and choose a location manually. Location access is requested for relevant foreground features, not continuous background tracking.

3. Profile Verification

The blue verification badge is optional. Before taking or uploading verification images, Travyy displays a separate explanation and requests explicit consent. You may decline and continue without the badge. With consent, the front camera takes four gesture images and you take a fifth neutral portrait. An existing profile photo is also compared where available.

These images are sent to Google Cloud Vision (global processing) and Google Vertex AI (EU endpoint) to check face consistency, liveness/replay indicators and fraud risks. Authorized moderators may inspect unclear cases. This is a community safety check, not a government identity check or a guarantee that another user is safe. Travyy does not sell face data or use it for advertising.

After approval, raw verification images become eligible for deletion immediately. Rejected-case raw images become due after 24 hours; manual-review images after 7 days. Verification records are due after 30 days and technical fraud-check hashes after 90 days. The cleanup task runs every six hours; failed operations are retried. These are retention schedules, not a promise that every copy disappears at the exact deadline.

A profile portrait that you have chosen to publish remains your profile photo until replaced or deleted. Deletion from active cloud storage can leave recovery copies under the storage provider’s seven-day soft-delete window. Those copies are not served in the app. These storage schedules describe Travyy’s copies, not an assertion of zero retention by every processor.

You can withdraw verification consent and request removal of verification data at info@travyy.de; account deletion also initiates removal. Withdrawal does not affect processing already lawfully carried out. A removed verification record may also remove the badge. Necessary safety evidence remains subject to the restricted exceptions below.

4. Content Moderation

Uploaded profile and community images are sent to Google Cloud Vision for automated safety classification, with global processing. This includes images uploaded for activities and chats where the image-safety pipeline applies. The app explains this processing before consent. The service returns classification signals; Travyy uses them to reject prohibited images or queue review. Text rules, user reports and authorized human review supplement image checks; this is not a promise that every video, audio recording or document is automatically understood.

Reported or flagged profiles, images, activities and messages may be inspected by authorized moderators. A user block immediately hides the blocked account’s content from the blocker’s feed and creates a private moderation notice. Reports and related evidence are access-restricted and used for safety decisions, fraud prevention, appeals and legal obligations. Blocking alone does not automatically penalize the other account. We do not use private messages to train AI models.

5. How We Use Your Information

We use personal information to:

6. Legal Basis for Processing

Where required by applicable law, we process personal information based on:

For users in the European Union and European Economic Area, processing is conducted in accordance with the General Data Protection Regulation (GDPR).

7. Sharing of Information

We may share information:

With Other Users

Information visible on your profile may be shared with other users according to your privacy settings.

With Service Providers

We may use trusted third-party providers for:

These providers may only process information as necessary to provide services on our behalf.

Legal Requirements

We may disclose information if required by:

8. Third-Party Services

Travyy may use third-party services including:

These services have their own privacy policies and practices.

Google Firebase provides authentication, database and file hosting, push delivery, abuse protection and crash/usage diagnostics. Google Cloud Vision processes uploaded images for safety and, separately, face verification; Vertex AI (EU) is used for the optional face check. Apple or Google process store purchases; Travyy receives transaction/entitlement information rather than your full payment-card details. Map tiles come from OpenStreetMap and place searches from Photon/komoot; requests can include your IP address, map area or search text.

Cloud Vision uses global processing, so data can be processed outside the EEA. More information is available in Google Cloud’s privacy notice and data processing terms. These links do not replace Travyy’s responsibility for the processing described here.

9. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

However, no system can guarantee absolute security.

10. Data Retention

Account and published-content data is kept while needed to provide the service, or until you delete it. You can initiate account deletion in the app under Profile → Settings → Account Information → Delete Account; deletion is also available during setup and before accepting community terms. Instructions without the app are available at Delete account and data.

Sign-in access is removed when the deletion request succeeds. Profile data is anonymized and account-linked content, uploaded media, messages and membership references are then cleaned up, ordinarily within 24 hours. Failed cleanup operations are retried. Shared conversations and content belonging to other people remain; technical anonymous references may remain. Cloud storage recovery copies have a further seven-day soft-delete window and are not accessible through the app.

Reports, necessary moderation evidence, restricted audit records and purchase/billing records may be retained for legal obligations, safety investigations, fraud prevention or disputes. They are not kept as a public profile or for general community use. Their retention depends on the applicable obligation or unresolved case; ask info@travyy.de for the exception that applies to your request. Verification-specific schedules are set out in section 3.

Account deletion does not cancel a store subscription. Manage or cancel it in your Apple Account or Google Play; subscription management does not prevent immediate initiation of account deletion.

11. Your Privacy Rights

Depending on your location, you may have the right to:

Access

Request access to your personal information.

Correction

Request correction of inaccurate information.

Deletion

Request deletion of your personal information.

Restriction

Request restriction of processing.

Data Portability

Request a copy of your data in a machine-readable format. You may also complain to the competent data protection supervisory authority, including the authority in your place of residence or in Hesse, Germany.

Withdraw Consent

Withdraw consent where processing is based on consent.

Object

Object to certain processing activities.

Requests may be submitted to:

info@travyy.de

12. International Transfers

Your information may be processed in countries outside your country of residence.

Where required, Travyy implements appropriate safeguards to ensure lawful international transfers.

13. Children’s Privacy

Travyy is intended only for users who are at least 18 years old.

We do not knowingly collect personal information from individuals under 18 years of age.

If we become aware that such information has been collected, we will delete it promptly.

14. Cookies and Similar Technologies

Travyy may use cookies and similar technologies on its website to:

Users can manage cookie settings through their browser.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

Updated versions will be posted on this website and linked from the application.

Where a change requires new consent, Travyy requests it explicitly before the affected processing.

16. Contact Information

If you have questions regarding this Privacy Policy or your personal information, please contact:

Travyy

Saarbrücker Allee 965201 WiesbadenGermany

Owner:Dani Malki

Email:info@travyy.de

Website:https://www.travyy.de

Privacy:https://travyy-share.web.app/legal/privacy/

Safety:https://travyy-share.web.app/legal/safety/

Community Guidelines:https://travyy-share.web.app/legal/community/

Travyy · Dani Malki · Saarbrücker Allee 9, 65201 Wiesbaden, Deutschland
info@travyy.de