Privacy policy
Last updated 31 October 2026.
VeraWay is an iPhone app that plans a traveller's days in a city. This policy says what VeraWay keeps about you, why, which outside services receive any of it, and how to delete it. VeraWay is run by the developer of VeraWay, who decides how this data is used. Questions go to support@veraway.app.
The short version: VeraWay keeps what it needs to plan your Trips and nothing for advertising. It never sells your data, it shows no ads that track you, and you can delete your Account from inside the app at any time.
Your Account
You can look around VeraWay without an Account, but you sign in before your first Trip is built. You sign in with Apple, with Google, or with a six-digit code sent to your email address. Your Account holds:
- Who you are: the email address your sign-in method gives VeraWay, and an identifier from Apple or Google. If you use Apple's "Hide My Email", VeraWay sees only the private relay address. Sign-in methods that share a verified email address reach the same Account.
- Your Trips: the city and dates, each Day's plan, and what you tell VeraWay you already have booked, such as a flight, a train, a table or a show, with its time and place. Also where you're staying, if you enter it.
- Your Taste Profile: what VeraWay has learned about how you travel, from the conversation that starts your first Trip, from the short optional chat after a Trip, and from how you change your plans. You can read it, edit it, or start it over on the Account screen.
- Your conversations with VeraWay about each Trip, kept with that Trip.
- Your Trip Credits: how many Trips you can create, and a record of each purchase (Apple's transaction ID, the product, the date and what it earned VeraWay after Apple's share and tax). Apple takes the payment. VeraWay never sees your card or bank details.
- Your marketing consent: whether you agreed to emails, when, and where you said so.
Some things you tell VeraWay may say something about your health, such as a food you can't eat or a walk you can't manage. VeraWay asks for no such thing. If you tell it, VeraWay uses it only to keep unsuitable places out of your plans, because you chose to share it, and you can remove it from your Taste Profile.
On your iPhone
The app keeps a read-only copy of your Trips on your phone, so a plan doesn't go blank when you lose signal. Signing out or deleting your Account removes it.
To keep the free Trip to one per person, VeraWay uses two Apple services, DeviceCheck and App Attest. They let VeraWay set one mark on your iPhone through Apple when it has been used for a free Trip, and check that requests come from the real app. The mark is held by Apple, belongs to the device rather than to you, and tells VeraWay nothing else about you.
VeraWay doesn't use your location, contacts or photos, and it has no advertising identifier. It never asks to track you.
Emails
VeraWay sends two kinds of email.
- Emails you need: sign-in codes, and the note that your Account was deleted. These don't depend on consent.
- Emails you agree to: when you sign up, an unticked box asks whether to email you. On the Account screen the same choice is the switch "Email me about my trips and VeraWay news". With it on, VeraWay may send up to two reminders per Trip about where to stay, while you haven't entered a place to stay, and occasional news about VeraWay. Every one of these emails has an unsubscribe link. Unsubscribing turns the switch off, and turning the switch off stops them.
Only the email addresses of people who said yes are sent to the email service for these emails.
Links marked Ad
Some buttons in the app and in VeraWay's emails end in the word "Ad", such as "Tickets · Ad". They are Affiliate Links: tapping one opens a Partner, a company that sells you a ticket, tour, stay or trip extra and pays VeraWay a commission when you buy. How we choose says which Partners these are and how they're chosen.
What a tap sends:
- The link carries only VeraWay's own Partner ID and a label for where the link was, made of its placement and stream, such as
stop_tickets(the Tickets button on a Stop) oremail_stay(the stay link in an email). Thousands of travellers share the same label. The link carries nothing that identifies you, your Account, your Trip or your device. - VeraWay counts taps per label on its own server, with no Account or device attached, so it can compare the counts with what each Partner reports. A link in an email reaches the Partner through a VeraWay address so the tap can be counted, and that step stores no IP address and no Account.
- Once the Partner's page opens, the Partner's own privacy policy applies. The Partner, or the affiliate network it uses, may set its own cookies to credit VeraWay with a sale. Tickets and tours open in a browser inside the app, and everything else opens in your own browser. VeraWay can't see what you do on the Partner's site. Partners report sales to VeraWay per link label, never per person.
Outside services
VeraWay runs on its own server and uses these services to do its work. Each receives only what is listed here.
| Service | What it receives | Why |
|---|---|---|
| Hostinger | Everything in your Account, stored on VeraWay's server; visits to this website | Hosts VeraWay's server and this website |
| Cloudflare (R2) | A nightly copy of VeraWay's database, in a private store; photos of places, which are public | Backups, so a failure loses nothing; serving photos |
| Anthropic (Claude) | Your conversations, your Taste Profile, and the details of the Trip being planned. Not your name or email address | Understanding you, and planning and reshaping your Days. Under Anthropic's commercial terms it does not train its models on this |
| Google (Maps Platform) | Searches for places in your Trip's city, and checks on the places chosen. No Account details | Checking that places exist and are open, and the "What people say" sheet |
| Google (Sign-In), only if you sign in with Google | That you signed in to VeraWay | Signing you in |
| Apple | Sign in with Apple; your App Store purchases; a device token for notifications; the free-Trip mark (DeviceCheck, App Attest); the map areas the app shows | Signing you in, taking payment, telling you a Trip is ready, guarding the free Trip, drawing maps |
| Resend | Your email address and the emails VeraWay sends you; for marketing emails, only if you said yes | Sending email |
| Sentry | Reports of errors in the app and the server: the app version, device model, iOS version and what failed. Never your conversations or plans | Finding and fixing bugs |
| Geoapify | The name or address you type for a booking or a place to stay | Finding where it is |
| Open-Meteo | A city's location and the Trip's dates. Nothing about you | Weather |
| Partners | Only what an Affiliate Link carries, when you tap one (see above) | Selling you what you chose |
Some of these services are in the United States or elsewhere outside your country. Where the law requires it, VeraWay relies on the safeguards those services offer for such transfers, such as the European Commission's standard contractual clauses.
Why VeraWay may use your data
Where data protection law asks for a legal reason:
- To provide what you asked for: your Account, your Trips, your Taste Profile and your purchases.
- Your consent: marketing emails, and anything about your health you choose to tell VeraWay. You can withdraw it at any time.
- Legitimate interests: keeping VeraWay secure, keeping the free Trip to one per person, counting link taps without identifying anyone, and fixing errors.
Apple sells Trips and subscriptions to you and keeps the records of the sale that tax law requires.
How long it's kept
Everything in your Account is kept until you delete the Account or a Trip. Backups are replaced as new ones are made, and nothing stays in them for more than 30 days.
Two things outlive a deleted Account, and neither says who you were:
- anonymous cost records: what each request cost VeraWay to run, with the link to your Account removed;
- the free-Trip mark on your iPhone, held by Apple, so the same device doesn't get a second free Trip.
Deleting your Account
In the app, open the Account screen and tap Delete account. VeraWay tells you first what you'll lose, such as unused paid Trips. Deleting is immediate:
- VeraWay revokes its access to your Apple sign-in, if you used it;
- everything in your Account is deleted at once: Trips, Taste Profile, conversations, credits and consent;
- you get one email saying the Account was deleted;
- your address is removed from the email service;
- the app signs out and wipes its copy from your phone.
Deleting your Account doesn't cancel an App Store subscription. Cancel it in your iPhone's Settings, under your name, then Subscriptions.
You can also ask for deletion by email, at support@veraway.app.
Your rights
Depending on where you live, you can ask VeraWay for a copy of your data, to correct it, to delete it, to restrict or object to how it's used, or to receive it in a form you can take elsewhere. Write to support@veraway.app and VeraWay will answer within a month. You can also complain to your data protection authority.
VeraWay doesn't sell or share personal information as California law defines those words, and doesn't use it for targeted advertising.
Children
VeraWay is not meant for children under 13, and doesn't knowingly keep data about them. If you think a child has an Account, write to us and it will be deleted.
Changes
If this policy changes in a way that matters, the app tells you before the change takes effect. The date at the top says when it last changed.