Last updated 23 August 2026
Vayako takes the protection of your data seriously. This policy explains what data we collect, why, with whom it is shared and what your rights are, in accordance with the General Data Protection Regulation (GDPR).
The publisher of the Vayako application is Julien Casino, Avinguda del Ensegur, Casa C7, Bloc 2, Arans, AD300 Ordino, Andorra, NRT F370721G.
For any question relating to your data: [email protected].
Account identifier: when you open the app, an account is created automatically (anonymous ‘guest’ account) in order to save your trips and preferences. No email address or name is required.
Travel preferences: first name (if you provide it), styles, pace, budget and notes that you share with the Vayako concierge, in order to personalise your itineraries.
Conversation content: the messages exchanged with the concierge and the itineraries generated.
Approximate location: only if you enable ‘Near you’ or navigation, in order to display places around you. It is not retained for advertising purposes.
Technical data: the minimum information necessary for the service to operate (app language, display preferences).
Providing the service (creating and saving your itineraries, retrieving your trips): performance of the service and legitimate interest.
Personalising your recommendations on the basis of your preferences: your consent, which may be withdrawn at any time.
Displaying nearby places: your consent to geolocation, which may be withdrawn in your phone’s settings.
We do not sell your data. It is processed by technical service providers acting on our behalf:
Supabase (database hosting and authentication), within the European Union.
Anthropic (Claude AI model) in order to generate your itineraries from your preferences and messages.
Mapbox and OpenFreeMap (base maps): displaying a map entails downloading its tiles, which transmits your IP address and the area you are looking at to those services.
unpkg and flagcdn (delivery of the mapping library and of the country flags): the same technical data, IP address only.
When you open a place in Google Maps or Apple Maps, it is your phone that contacts that service, at your request, outside Vayako.
These service providers are required to ensure an equivalent level of protection. Where a transfer outside the EU takes place, it is governed by appropriate safeguards (standard contractual clauses).
Your data is retained for as long as your account exists. You may delete your account and all of your data at any time from Profile → Delete my account: deletion is immediate and permanent.
In accordance with the GDPR, you have the rights of access, rectification, erasure, portability, restriction and objection, as well as the right to withdraw your consent.
Erasure: Profile → Delete my account (immediate hard delete).
Portability: write to [email protected] and your data will be sent to you within 30 days, as provided for by the GDPR. Self-service export from within the application will follow.
To exercise the other rights or to ask a question: [email protected].
You may also lodge a complaint with the data protection authority of your country of residence — in France the CNIL (www.cnil.fr), in Andorra the APDA (www.apda.ad).
Data is transmitted in encrypted form and stored on secure infrastructure. Access is restricted to the processing operations necessary for the service.
Vayako is aimed at an adult audience and is not intended for persons under 16 years of age. We do not knowingly collect data concerning minors.
This policy may change. The date of the last update appears at the top. In the event of a significant change, we will inform you within the application.
This policy is written in French. Versions in other languages are provided for your convenience. In the event of any discrepancy between versions, the French version prevails.