Privacy Policy — Travoolate
Effective date: 1 October 2025 Data controller: Fog Global Technologies ("Fog Global", "we", "us") Contact: support@travoolate.com · https://travoolate.com/privacy
This policy explains what Travoolate collects, why, how long we keep it, who receives it, and the rights you have. It applies to the Travoolate mobile apps (Android package / iOS bundle com.travoolate.app) and to api.travoolate.com, the backend that powers them.
1. What we collect
| Data | Why we collect it | Required? |
|---|---|---|
| Email address | Passwordless sign-in, booking confirmations, receipts, support | Yes, to book |
| Passenger details (name, date of birth, passport details where a supplier requires them) | Airlines and travel suppliers require these to issue tickets and fulfill bookings | Yes, per booking |
| Booking and purchase history (orders, PNRs, e-tickets, boarding passes, Trips) | Operating your bookings, receipts, Rewards points | Yes |
| Partner Wallet transactions (double-entry ledger entries: credits, debits, balances) | Operating your wallet, statements, dispute handling | Yes, if you use the wallet |
| Payment instrument references | Card/wallet details are handled by our payment partners (partner wallet, FogPay card, FogPay transfer). We do not store full card numbers or credentials. | Per transaction |
| Device push token | Fare alerts, booking-status and payment notifications | No — disable notifications anytime |
| Optional microphone audio (TravelAssist push-to-talk) | Transcribing your voice booking request in the moment. Audio is processed transiently and is not stored after the request is handled. | No — chat and search work without it |
| Crash logs and diagnostics | Stability, security, fixing bugs | No |
Location: Travoolate does not collect precise or approximate location and does not request location permission.
Children: Travoolate is not directed at children under 13 (or the equivalent minimum age in your region) and we do not knowingly collect their data.
2. What we never do
- We never sell your personal data.
- We never share your data with advertisers or data brokers.
- We never store full payment card numbers — payments are processed by our payment partners under their security standards (PCI-DSS).
- We never retain microphone audio.
3. Who receives your data
- Travel suppliers (airlines, and — as hotels, tours, transfers and rides roll out — the relevant providers): only the details needed to fulfill your booking.
- Payment partners: only what is needed to process the payment method you chose.
- Infrastructure providers (cloud hosting, push-notification relays such as Google FCM / Apple APNs): under contract, only to run the service.
- Authorities: only where the law requires it.
4. Security
- All traffic between the app and api.travoolate.com is encrypted in transit (TLS).
- Wallet accounting uses a double-entry ledger so every balance change is traceable and auditable.
- Access to production data is restricted to authorized personnel.
5. Retention
- Account and booking records: kept while your account is active, and afterward only as long as tax, accounting, and aviation regulations require (typically up to 7 years for financial records).
- Wallet ledger entries: retained as financial records per applicable law.
- Push tokens: deleted when you uninstall, disable notifications, or delete your account.
- Voice audio: not stored — discarded after transient processing.
- Crash logs: up to 12 months.
6. Your rights
Depending on your region (including GDPR/UK GDPR, NDPR, CCPA/CPRA and similar laws), you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and personal data
- Portability of your data
- Object to / restrict certain processing
- Withdraw consent (e.g., microphone, notifications) at any time in device settings
To exercise any right, email support@travoolate.com with the subject "Privacy request". We respond within 30 days. Deleting your account removes your profile, bookings view, wallet access, and push tokens; financial records are retained only where the law requires it, then deleted.
7. International transfers
Travoolate operates globally. Your data may be processed in countries other than your own, including where our infrastructure and suppliers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers. All money settles in USD; display currency is a presentation preference only and does not change where data is processed.
8. Cookies and tracking
The mobile app does not use advertising trackers. We do not track you across other companies' apps or websites.
9. Changes
If we change this policy materially, we will notify you in the app and update the effective date. The current version is always at https://travoolate.com/privacy.
10. Contact
Fog Global Technologies — Privacy Email: support@travoolate.com Website: https://travoolate.com