Privacy Policy

This is a courtesy translation of our German-language privacy policy, provided for international users. In case of any discrepancy, the German version is legally binding – see Datenschutzerklärung (Deutsch).

This policy applies to the website veyamo.de and the Veyamo app for iOS. It explains what data we process, for what purpose, and on what legal basis. Last updated: July 2026.

1. Controller

Maurice Sommer
Meineckestraße 58
40474 Düsseldorf, Germany
Email: support@veyamo.de

2. Principles & legal bases

Protecting your personal data matters to us. We process data exclusively within the framework of applicable law (GDPR, German Federal Data Protection Act (BDSG), German Telecommunications-Digital Services Data Protection Act (TDDDG)). Where we process data, we rely on:

• Art. 6(1)(b) GDPR – performance of the usage agreement (providing the app's features).
• Art. 6(1)(f) GDPR – legitimate interest (secure, stable operation).
• Art. 6(1)(a) GDPR – your consent (e.g. location, camera, microphone permissions).

You can withdraw any consent given at any time with future effect – in the app via iOS system settings, on the website via the "Cookie settings" link in the footer. Withdrawal is just as easy as giving consent.

3. Website: hosting & server log files

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. When you access the site, the server automatically processes technical access data transmitted by your browser:

• IP address
• date and time of access
• page accessed, and referrer URL where applicable
• browser type and operating system

This data serves the secure and stable operation of the website (Art. 6(1)(f) GDPR) and is not combined with other data. A data processing agreement is in place with IONOS.

4. Website: browser storage & partner links

This informational website does not set tracking or advertising cookies and does not embed analytics services. We use only your browser's local storage (localStorage) to remember technically necessary settings:

• your chosen language,
• your cookie/consent decision, so the notice does not reappear, and
• on the "Set up" page: the inputs you make in the setup wizard (e.g. name, trip, emergency contact and – if provided – medical pass details), so nothing is lost when you close the browser window. This data, too, stays exclusively in your browser and is never transmitted to us or to a server; the generated QR code/link is additionally encrypted with a PIN (AES-256). You can delete it at any time via "Start over" in the wizard.

This data stays in your browser and is not transmitted to us (Art. 6(1)(f) GDPR / § 25(2) TDDDG – technically required).

On the "Set up" page, we optionally embed an activities widget from our partner Klook. This script is only loaded once you actively consent in the cookie notice; without your consent, only a placeholder notice is shown. Once loaded, Klook may set its own cookies and process technical data (e.g. IP address, browser information); the Klook privacy policy then applies in addition. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG); you can withdraw it at any time via the "Cookie settings" link in the footer. If you click a travel partner link (e.g. to Trip.com), you leave our website; from there, the respective provider's privacy policy applies.

5. App: data on your device

The Veyamo app is deliberately data-minimal. Most content you enter stays local on your iPhone and is not transmitted to any server of ours. We do not operate our own user database. Stored locally, among other things:

• your trips, itineraries, packing and reminder lists,
• stored documents and photos (e.g. booking confirmations),
• emergency contacts and the optional medical pass (e.g. medications, allergies),
• profile and settings information.

6. App: iCloud sync

If you have enabled iCloud in your iOS settings, Veyamo can sync your trip data between your own devices via Apple's iCloud (key-value store). This data then resides in your personal iCloud account with Apple; we have no access to it. Apple's privacy policy applies in addition. You can disable syncing at any time in iOS settings.

7. App: permissions (location, camera, microphone)

The app requests individual device permissions only when you use a feature that requires them. You can withdraw any permission in iOS settings.

8. App: third-party services used

For individual features, the app calls external services. Only what the respective request requires is transmitted (e.g. a place, an airport code, or your question). We do not build permanent user profiles with these providers. The app contains no advertising or analytics trackers.

Legal basis. Services without which a feature you call up cannot be provided (flight information, weather, exchange rates, map display, the technical intermediary) are based on the fulfillment of our contract with you (Art. 6(1)(b) GDPR). For features you specifically trigger and for which you have previously given permission – location, camera, microphone, and the related AI requests to Google Gemini – it is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in your device's system settings.

Data processing on our behalf. Providers who process personal data solely on our instructions – namely Google (Gemini API) and Cloudflare (Workers) – are processors in the sense of Art. 28 GDPR. With both, the respective data processing agreements exist (Google Cloud Data Processing Addendum or Cloudflare Data Processing Addendum), which also include the EU Standard Contractual Clauses for transfers to third countries; see point 11. Providers who act independently (e.g., Apple for payment processing) are separately listed there. The privacy policies of the respective provider also apply.

9. In-app purchases

Purchases (one-time unlock per trip and subscriptions) are processed exclusively through your Apple App Store account. Apple processes the payment data; we do not receive any account or payment details, only the information whether an unlock is valid (Art. 6(1)(b) GDPR).

10. Partner/affiliate links

Veyamo shows matching travel offers from partners (including Trip.com for hotels and flights, Klook for activities, Yesim for eSIM). Tapping such an offer opens the partner's site; from there, their privacy policy applies. A booking made via a partner link can be attributed to us, for which we may receive a commission. This does not result in any additional cost to you; we do not transmit any personal data stored by you in the app to the partner.

11. Transfers to third countries

Some providers named in section 8 (in particular Cloudflare, Google, Apple) may process data in the USA. Where this occurs, it is based on appropriate safeguards under Art. 44 et seq. GDPR (in particular EU Standard Contractual Clauses or, where certified, the EU-US Data Privacy Framework). Details can be found in the respective provider's privacy policy.

12. Retention period

App content remains stored for as long as you keep it; you can delete it in the app at any time, and uninstalling the app removes locally stored data (you manage iCloud data in your Apple account). We delete email inquiries once they are no longer required. Website server log files are deleted or anonymised after a short time.

13. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), as well as the right to withdraw any consent given at any time. To exercise these rights, contact support@veyamo.de.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Postfach 20 04 44, 40102 Düsseldorf, Germany.

Last updated: July 2026