Privacy Policy

Last updated: 2026-05-17

Araventura is a travel-companion app that helps you and your friends plan trips, split expenses, and chat. This policy explains what personal data we collect, how we use it, and how you can control it.

1. Data controller

Controller per Article 4 (7) GDPR:
Siebweb by Eduardo Arturo Sieber Artiles
Heubnerweg 9, 14059 Berlin, Germany
VAT ID: DE317966842
Privacy contact: privacy@araventura.com
General contact: hi@siebweb.com

See the full Imprint for complete legal disclosure under § 5 TMG.

2. What we collect

• Account info — email, display name, password hash (one-way), preferred locale and currency.
• Trip content — trips you create, members you invite, expenses you log, chat messages.
• Payment methods — the labels and values (PayPal, IBAN, etc.) you choose to share with trip members.
• Technical data — IP, browser, basic page-view analytics. No third-party trackers by default.

3. Why we collect it (legal basis)

• Performance of contract (Art. 6(1)(b) GDPR) — to operate the service: store your trips, deliver chat messages, calculate balances, send invitation and password emails, and let your invited members see what they need to see.
• Legitimate interests (Art. 6(1)(f) GDPR) — rate limiting, abuse prevention, basic technical logs.
• Consent (Art. 6(1)(a) GDPR) — web push notifications (only if you enable them), optional analytics (none today).

4. Who can see what

Trip data (members, expenses, balances, chat, payment methods) is visible only to accepted members of that trip. We never sell or share your data with advertisers.

5. Sub-processors and third parties

We use the following providers to run the service. Each one only sees the data they need to do their job.

• Vercel — app hosting for app.araventura.com (EU region).
• Hostinger — hosting for the marketing site araventura.com.
• Neon — managed Postgres database (EU region).
• Hostinger SMTP — transactional emails (verification, password reset, trip invitations).
• Google Maps — map tiles and geocoding on the itinerary view. Loaded only when you open an itinerary; uses your IP and approximate location.
• Web Push (VAPID) — push notifications via your browser vendor (Apple, Google, Mozilla). Only used when you opt in.

6. Your rights (GDPR Articles 15–22)

• Access & portability — export every trip, expense, and message tied to your account as a JSON file from the in-app Privacy & data screen.
• Rectification — edit your profile, payment methods, and trip content at any time.
• Erasure — request permanent deletion of your account from the same screen. We keep a 7-day grace period in case you change your mind, then delete you for good. Expenses you paid for in shared trips are anonymized (not removed) so other members' balances survive.
• Restriction & objection — write to privacy@araventura.com.
• Complaint — you can lodge a complaint with your local data-protection authority.

7. Data location & retention

Data is stored in EU regions on Neon (database) and Vercel (app). We do not transfer your data outside the EU/EEA except where required by these providers for service delivery. Account data is kept for as long as your account exists; backups roll over within 30 days; analytics signals (when enabled) are aggregated and not retained at the individual level.

8. Changes

If we make material changes, we'll update the "Last updated" date above and notify accepted users via in-app or email.