Privacy Policy

1. Who we are

The Service is operated by SOLVAGO sp. z o.o. (“Solvago”, “we”, “us”, or “our”), a limited liability company registered in Poland. For the purposes of the EU General Data Protection Regulation (GDPR / RODO) and other applicable data protection laws, SOLVAGO sp. z o.o. is the controller of personal data processed in connection with Solvago, except where a third party such as Apple or Google acts as an independent controller for its own services (for example when it processes your in-app purchase).

We have not appointed a data protection officer, as we are not required to at our scale; privacy requests go to hello@solvago.app.

2. Information we collect

We collect the following categories of information, depending on how you use the Service.

Account and authentication data

Your email address, display name, a Solvago user ID, and authentication identifiers. If you sign in with Sign in with Apple or Sign in with Google, we receive an identifier and (where you allow it) your email and name from that provider. If you use email and password, we store a secure hash of your password — never the password itself. We also store your account settings, your consent choices (such as consent to AI processing of forwarded emails) and the date and version of the Terms and Privacy Policy accepted when your account was created.

Trip content

The trips, itineraries and day-by-day timelines you build; bookings extracted from your emails (flights, stays, car rentals and other reservations); notes; photos, PDF attachments and other media you add to items and memories; trip cover images; and budget entries, including amounts, currencies, categories and how costs are split between travelers.

Booking emails you forward or connect

When you forward a confirmation to your personal Solvago forwarding address (at the in.solvago.app domain), or add a verified sender, we receive and process the email — sender, subject, body and information about any attachments — to extract booking details. See section 3.

Discover (flight discovery) inputs and price watches

When you use Discover, we process the origin airport, direction or destinations, budget, dates and similar preferences you provide, in order to search for flight offers. When you save a price watch, we store the route and parameters of that search and re-check them on a schedule so we can notify you about price changes.

Discover without an account (guest mode)

In Discover you can search for flights before you create an account. Before the first search runs, the app passes a Cloudflare Turnstile check that tells people from bots (see section 8). It then receives an anonymous ticket valid for 24 hours, kept only in the app’s memory. The ticket contains none of your data, and nothing is stored on your device. The sentence you type, departure airport, destination, budget and dates are processed as for a search with an account, to show you offers. Airlines and fare providers receive only the route, dates and number of passengers. To protect this feature from abuse, we count searches per ticket and per IP address. We do not store the IP address itself, only a one-way hash of it. Analytics events from guest mode are linked to the ticket’s random number, without your IP address and without a person profile. If you then create an account, the app may pass on your last search sentence so it can show you the result again after you sign in.

Place and destination search inputs

When you type a destination or a place name in the app, the text you type (and, for the venue search, a coarse map area derived from your trip, not from your device) is sent to a geocoding provider to suggest matching places (see section 8). The app never requests or reads your device location.

Purchases and subscription status

If you buy Solvago Plus, we receive from the app store, via our subscription-management provider RevenueCat, the status of your subscription: the product purchased (monthly or yearly), the store it was bought from, purchase, renewal and expiry dates, whether a trial or a grace period applies, the transaction identifier assigned by the store, and the country and currency of the purchase. This is linked to your Solvago user ID. We never receive your card number, bank details or billing address — payment is handled entirely by Apple or Google.

Collaboration data

When you invite co-travelers to a trip or a shared budget, we process the email addresses you invite and the shared trip, itinerary and budget data, so invited people can view or edit according to the role you assign.

Device, usage and diagnostic data

Device type, operating system, app version, language and region, feature interactions, and technical logs such as server logs, error logs and security logs. Requests to our servers include metadata such as IP address and user agent. Where you enable notifications, we store a push notification token (an Expo push token).

Crash and error reports

If the app crashes or hits an unexpected error, a crash report is sent to our crash-reporting provider, Sentry. It contains the technical context needed to fix the bug — stack trace, app version, device model and OS version, and a short trail of technical events that preceded the crash — and is configured not to include your IP address, request bodies, cookies or any trip, booking, email or photo content.

Product analytics

To understand how Solvago is used and to improve it, we record a small set of product-analytics events on our servers — for example that an account was created, the app was opened, a trip was created, a Discover search was run, a booking email was processed or a subscription started. These events are recorded by our servers, not by tracking code inside the app: Solvago contains no analytics SDK, no autocapture and no session replay. Each event is tied to a pseudonymous user identifier — never your email address — and records only that an action happened, together with non-identifying details such as a count or a feature name. We do not include the content of your emails, trips, messages or photos. This analytics is processed by PostHog and hosted in the European Union (see section 8).

In the same way we record opening a trip, its budget and its memories, the source a trip was created from, and viewing Discover results. These events are pseudonymous too and contain no trip, budget, memory or search content.

Before you sign in, the app sends our server anonymous events about the welcome screen and the sign-in screens, so that we can measure at which step of registration people stop. These events contain no email address or user identifier, and the app stores no identifier on your device; they are tied only to a random number kept in the app’s memory, and our server forwards them to analytics without your IP address. Our server also keeps anonymous counts of sign-in and registration steps: the step, the sign-in method (such as Apple, Google or email), the outcome, the error code and the platform, without an IP address or user identifier. On the first launch after installing, we note that it is the first launch (and whether you use a phone or a tablet). On Android the app then reads the install source from Google Play, meaning the campaign name of the link you downloaded it from (for example our website or a social media profile), and attaches it to these events and to the account you create, so that we know which channels bring people in. We neither store nor send an ad click identifier; we only note that there was one. On iPhone, after you create an account, the app gets a one-time Apple token (AdServices) from the system and passes it to our server, which asks Apple whether the install came from an Apple Ads ad; we keep only the campaign, ad group and keyword identifiers with the account. We do not ask for tracking permission (ATT), because this mechanism does not track you across apps and does not use the advertising identifier.

Newsletter on the website

If you sign up for our newsletter on the long-weekend calculator at solvago.app, we process your email address, the dates you chose in the calculator, the record of your consent and the campaign parameters of the link you arrived from. The website also sends our server an anonymous page-view event for each page you open and anonymous usage events of the calculator and the form. Section 16 describes all of this in detail.

Communications

Support requests, feedback and other messages you send us.

3. How we use AI to read your booking emails

Extracting bookings from your emails is the core of Solvago and relies on artificial intelligence, so we describe it in detail here. This section also serves as our AI transparency notice.

When AI is used

You receive a personal forwarding address on the in.solvago.app domain. When you forward a confirmation email to that address — or when a sender you have verified sends one — the message is received through Cloudflare Email Routing and passed to our servers. We then send the email content to an AI model to extract structured booking details, such as airline, flight numbers, times, hotel name, dates, confirmation numbers and prices, which are saved to your trip. AI is used in the same way to interpret the free-text request you type in Discover (for example “somewhere warm in March under 2000 zł”) and to generate optional planning suggestions for a trip day.

Before the first email is processed, the app asks for your explicit consent to this AI processing and records when you gave it. You can withdraw it at any time under Settings → Privacy & data; after withdrawal no forwarded email reaches the model.

Which AI service and models we use

AI processing runs on Amazon Bedrock, Amazon Web Services’ managed AI platform. The models are Anthropic’s Claude — currently Claude Haiku 4.5 for most emails, with Claude Sonnet 4.6 used for messages that are harder to read reliably. We access these models only through Amazon Bedrock; we do not send your data to Anthropic directly, and Anthropic does not receive it through Bedrock.

Where processing happens (EU data residency)

We run Amazon Bedrock in an EU region (currently eu-central-1, Frankfurt) using EU-resident model endpoints, so that AI inference on your data stays within the European Union.

What we send to the model

For booking extraction, we send the content of the email you forwarded — its sender, subject and body text — so the model can find the booking details. For Discover, we send the search text you type. We do not add your name, account identifiers or unrelated data to these requests beyond what the email or query already contains, and we do not send your photos to the model.

No training, no sharing, no long-term storage by the AI service

Amazon Bedrock does not use your prompts or the model’s responses to train any AI models, and does not share them with the model provider or other third parties. Bedrock does not retain your prompts or the outputs after your request has been processed. Separately, we do not use the content of your emails, trips or photos to train AI models (see also section 7).

Human oversight and accuracy

AI extraction is a convenience feature, not an automated decision that produces legal or similarly significant effects on you. Extracted bookings are presented for you to review, confirm and edit before you rely on them, and AI output can be incomplete or wrong — always verify important details against the original confirmation and the provider. You remain in control of what ends up in your trip.

Retention of the original email

The original forwarded email is retained only as long as needed to run extraction and let you verify the result (currently up to 30 days), then deleted from our servers. You are responsible for only forwarding emails you are entitled to process.

4. Device permissions

Solvago requests only the device permissions it needs, and only when a feature uses them:

• Photo library & camera — so you can attach photos to trip items and memories. Solvago accesses only the photos you select.
• Notifications — so we can send the push notifications described below. You grant this in your phone’s system settings and can withdraw it there at any time.

Kinds of push notifications. If you allow Solvago to send notifications, we may send three kinds:

• about your trips and account — invitations and co-travellers joining, bookings from forwarded emails ready in your Inbox, trip reminders a week and a day before you leave and, on the Plus plan, price changes on watched flights;
• getting-started tips — in the first days after you sign up, short hints on how to start using the Service (for example how to add a booking to an empty trip or search for flights). Together with account-related emails we send at most 2 such messages in 7 days; with notifications on, you usually get a push instead of the email;
• “Ideas and deals” — Solvago’s own marketing content about travel, such as trip or long-weekend ideas, at most twice a month.

You can turn each kind off in the app under Settings › Notifications, and all of them at once in your phone’s settings. To send them we use your device’s push token (Expo token), the platform (iOS or Android) and app version, your account language and your notification settings. Notifications are delivered by Expo through Apple’s and Google’s services (section 8). We record pseudonymously that a notification was sent and opened (section 2), without any content of your trips.

Solvago does not request location, contacts or calendar access, and does not use the advertising identifier (IDFA / Android Advertising ID). Maps in the app are drawn from places in your trip, not from where your device is. You can review and change these permissions at any time in your device settings.

5. How we use information

We use information to:

• create, authenticate, secure and manage your account;
• provide the Service — build your trip timelines, extract bookings from the emails you forward, track budgets, run Discover flight searches and price watches, suggest places and destinations, and generate and share trip memories;
• manage your plan — apply Free or Plus limits, activate Solvago Plus after a store purchase, restore purchases, and return your account to the Free plan when a subscription ends;
• enable collaboration with the co-travelers you invite;
• if you signed up for our newsletter on the website, send you marketing emails about the Solvago app (launch, news, offers), as well as the long-weekend dates you chose and a reminder six weeks before each of them (section 16);
• send service messages (such as email verification, invitations and subscription-related notices), support responses and the notifications you enable;
• send account-related emails to people who have a Solvago app account: tips that help you get started with the Service (for example a few days after sign-up if no trip has been created yet, or during your first week), and news about major new app versions (“What’s new”). These emails are only about Solvago, contain no third-party advertising and are sent at a limited frequency, and you can unsubscribe from each of these categories (section 6);
• debug errors and crashes, monitor performance, maintain security and prevent abuse;
• improve the product using aggregated or de-identified information;
• comply with legal obligations (including accounting and tax records of subscriptions), respond to lawful requests, enforce our Terms and resolve disputes.

6. Legal bases for processing

Where the GDPR or a similar law applies, we rely on the following legal bases:

• Performance of a contract (Art. 6(1)(b)) — to create and manage your account and provide the core features, including booking extraction, trip timelines, budgets, Discover and price watches, memories, collaboration, and to deliver and manage the Solvago Plus subscription you purchased, as well as to give account holders the information they need to use the Service (section 5).
• Consent (Art. 6(1)(a)) — for AI processing of the emails you forward (Apple’s and Google’s store rules require explicit consent before personal data is shared with a third-party AI service), for optional device permissions such as photo library and notifications, for cookies and advertising pixels on the website (section 15), and for the marketing emails and long-weekend reminders you can sign up for on the website (section 16) and any other optional marketing messages you choose to receive. You can withdraw consent at any time — in the app under Settings → Privacy & data, in your device settings, via “Cookie settings” on the website, via the unsubscribe link in every marketing email, or by contacting hello@solvago.app — without affecting processing that took place before withdrawal.
• Legitimate interests (Art. 6(1)(f)) — to keep the Service secure, prevent fraud and abuse, debug errors and crashes, verify subscription status with the stores, improve product quality in a privacy-conscious way, measure anonymously how the website calculator and forms are used and at which step of registration in the app people stop, offer flight search to people without an account and protect it from abuse (the Turnstile check and search limits), and keep a suppression record so we never email an address that has unsubscribed (section 16). On this basis we also send account holders tips that help them use the Service they signed up for, and news about its development (section 5).
• Legal obligations (Art. 6(1)(c)) — to meet accounting, tax, consumer-protection and other legal requirements.

We send account-related emails (tips and news, section 5) only to people who have created an account in the Solvago app, and we do not ask for separate consent to them. Every such email contains a link that, in one click and without signing in, stops further emails of that category (tips or news). You can also contact hello@solvago.app. You can object to this processing at any time (Art. 21 GDPR). Unsubscribing or objecting does not affect your account, service messages (email verification, password reset, invitations, Inbox notices and subscription notices) or the notification settings in the app.

We send push notifications (section 4) about your trips and account because they are part of the Service (performance of a contract). Getting-started tips and “Ideas and deals” rely on our legitimate interest in showing you how to use Solvago and what you can do with it. You get any of them only if you allow Solvago to send notifications on your phone. You can turn each kind off under Settings › Notifications, and you can object to processing for marketing purposes at any time (Art. 21 GDPR).

7. No sale, no tracking in the app, no AI training on your content

We do not sell your personal data. The Solvago mobile app contains no third-party advertising SDKs, no cross-app tracking SDKs and no advertising pixels, and never reads the advertising identifier of your device. Our product analytics runs on our servers with no tracking code inside the app, is tied to a pseudonymous identifier rather than your email or fully anonymous, and is never used for advertising or shared with advertisers (see section 2). We do not use the content of your booking emails, trips, budgets or photos to train AI models. We may use aggregated or de-identified information to improve reliability and quality.

Our website solvago.app may use advertising and analytics pixels, but only if you agree to them in the cookie banner; section 15 describes exactly which ones, what they do and how to refuse or withdraw. Separately from the pixels, the website sends our own server an anonymous page-view event for each page and anonymous usage events of the long-weekend calculator and the launch-list form; they store nothing on your device and carry no identifier (section 16). If any of this changes materially, we will update this Policy and obtain any consent required by law.

8. Service providers and sharing

We share information with service providers (processors) only as needed to operate, secure, support and improve the Service, to comply with law, or to provide features you request. The main providers are:

• Cloudflare, Inc. — hosting, database, media storage, inbound email routing, queues, content delivery and our self-hosted map tiles, and Cloudflare Turnstile, the check that tells people from bots on the website’s launch-list form (section 16) and before a search without an account in the app (section 2). Turnstile processes technical data about the device and connection, such as the IP address, for that check only.
• Amazon Web Services (Amazon Bedrock) — the EU-hosted AI platform on which booking extraction, Discover text understanding and planning suggestions run. The models are Anthropic’s Claude; your data is not used to train models and is not shared with the model provider (see section 3).
• RevenueCat, Inc. (USA) — subscription management for Solvago Plus. RevenueCat receives from Apple and Google the purchase and entitlement status described in section 2, together with a pseudonymous Solvago user ID, and passes it to our servers. It never receives your name, email address or payment details. Privacy policy: revenuecat.com/privacy.
• Functional Software, Inc. (Sentry) — crash and error reporting for the mobile app, configured without personal content (see section 2). Privacy policy: sentry.io/privacy.
• Duffel Technology Ltd (UK) — flight offers and price data used by Discover. Requests contain the route, dates and passenger count only.
• FlightAware, LLC (USA) — flight schedule data (which airlines fly which routes) used to build Discover’s route knowledge. Requests contain airport codes and dates only; no personal data.
• Atlas (Atriptech) — schedule and fare data for low-cost airlines used by Discover. Requests contain the route and dates only; no personal data.
• MapTiler AG (Switzerland) — destination search when you create a trip (the “Destination” field). Our server forwards the text you typed and your app language to MapTiler to suggest matching regions and places; no account identifier or device location is sent. Privacy policy: maptiler.com/privacy-policy.
• Photon / OpenStreetMap — venue search when you add a place to a trip (the “Place” field). Our server forwards the text you typed and a coarse map area derived from your trip to a public Photon geocoder based on OpenStreetMap data (currently the instance operated by komoot GmbH, Germany); no account identifier or device location is sent. Map tiles shown in the app are served from our own infrastructure on Cloudflare and are derived from OpenStreetMap data — viewing a map does not send requests to a third-party map provider.
• Pexels — stock photo search used when you choose a trip cover image; receives only your search text.
• Expo (650 Industries, Inc.) — delivery of push notifications (via Apple and Google notification services).
• Resend, Inc. — delivery of transactional emails we send you (verification links, invitations, service notices), of account-related tips and news (section 5) and of the launch-list emails you sign up for on the website (section 16); receives your email address and the message content.
• PostHog, Inc. — privacy-conscious product analytics, hosted in the European Union. It receives only events sent by our servers: app usage events tied to a pseudonymous user ID (never your email), anonymous welcome and sign-in screen events and sign-in step counts with no identifier, launch-list events tied to a pseudonymous list-entry ID (never your email), and anonymous website usage events with no identifier — and no message, trip or photo content (see sections 2 and 16).
• Apple Inc. — Sign in with Apple, App Store distribution, and processing of your Solvago Plus purchase on iOS as an independent controller under Apple’s privacy policy.
• Google LLC / Google Ireland Ltd — Sign in with Google, Google Play distribution, and processing of your Solvago Plus purchase on Android as an independent controller under Google’s privacy policy.

These providers are bound by contracts (including data-processing agreements) that require them to protect your information and use it only to provide their service to us, except Apple and Google, which act as independent controllers for sign-in and purchases. We may also disclose information where required to comply with law, enforce our Terms, protect rights, investigate abuse, or in connection with a business transfer such as a merger, acquisition or sale of assets.

9. Public or shared content

When you share a trip memory via a link, anyone with that link can view the shared content — the route, places, stays and photos you included — until you revoke the link. When you invite co-travelers to a trip or budget, the people you invite can view or edit it according to the role you assign. Recipients may copy, save, screenshot or re-share content outside Solvago, so only share what you are comfortable making visible. You can revoke a memory link or remove a collaborator at any time.

10. Retention and deletion

We keep personal data only as long as reasonably necessary for the purposes in this Policy, unless a longer period is required or permitted by law. As a general rule:

• account data, trips, bookings, budgets, photos and memories are retained while your account is active and until deletion is completed;
• your choices about account-related emails (section 6) and your notification settings are kept as part of your account settings for as long as the account exists;
• your push token is kept for as long as the account exists; we delete it earlier when the notification service reports it is no longer valid (for example after you uninstall the app);
• original forwarded booking emails are retained only as long as needed for extraction and troubleshooting (currently up to 30 days), then deleted;
• subscription status and purchase events are retained while your account exists so we can honour your plan and restore purchases; records of transactions that we need for accounting and tax purposes are kept for the period required by Polish law (currently 5 years from the end of the tax year concerned), even after account deletion;
• crash reports are retained by our crash-reporting provider for up to 90 days;
• diagnostic, error and security logs are normally retained for up to 90 days, unless needed longer for security, debugging, legal or dispute purposes;
• support communications are normally retained for up to 24 months;
• backups may persist for up to 90 days before being overwritten;
• website cookies are retained for the periods stated in section 15;
• launch-list data from the website is retained as described in section 16;
• in guest mode the ticket expires after 24 hours, search counters with the hashed IP address are deleted after 3 days, and search results (without personal data) are used as a cache for 30 minutes. A search sentence passed on when you create an account is shown once, within 7 days at most, and kept with the account until it is deleted.

You can delete your account in the app under Settings → Privacy → Delete account, or by contacting hello@solvago.app. When you request deletion, your account enters a short grace period (currently 30 days) during which you can cancel; after that, your personal data is permanently deleted or de-identified, except where we must retain limited information for legal compliance, security, fraud prevention or dispute resolution. For content shared with co-travelers, you will be able to choose whether to transfer or delete it. Deleting your account does not cancel a store subscription — cancel it in your Apple or Google subscription settings.

11. Your choices and rights

Under the GDPR and similar laws you may request access to your personal data, and its correction, deletion, export (portability), restriction of processing, objection to processing (including processing based on legitimate interests), and withdrawal of consent where processing is based on consent. To exercise these rights, contact hello@solvago.app; you can also export your data directly from the app under Settings → Privacy & data. We may need to verify your identity, and we respond within the period required by law (in the EEA, generally within one month). Section 6 explains how to unsubscribe from account-related emails or object to them.

You also have the right to lodge a complaint with a data protection authority, in particular in the EU member state where you live, work or where the alleged infringement occurred. In Poland, the competent authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

12. International transfers

AI processing of your booking emails and Discover queries takes place on Amazon Bedrock within the EU (see section 3), and product analytics is hosted in the EU. Some other providers process limited information outside the European Economic Area — in particular in the United States (RevenueCat, Sentry, FlightAware, Expo, Resend, Pexels, Apple and Google), the United Kingdom (Duffel) and Switzerland (MapTiler). Where required, we rely on appropriate safeguards such as European Commission adequacy decisions (including for the United Kingdom and Switzerland), the EU–U.S. Data Privacy Framework where the provider is certified, or the European Commission’s Standard Contractual Clauses together with data-processing agreements and supplementary measures. You can ask us for details of the safeguard used for a specific provider at hello@solvago.app.

13. Security

Data is encrypted in transit and at rest. We use access controls, authentication and operational safeguards, and limit access to personnel who need it to operate the Service. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your account credentials safe.

14. Children

Solvago is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact hello@solvago.app and we will delete it.

15. Cookies and advertising pixels on the website

This section applies to the solvago.app website only. The Solvago mobile app contains none of the cookies or pixels described here (see section 7).

Strictly necessary storage (no consent needed)

The website stores in your browser only what it needs to work: your language preference (sv-lang, stored locally for as long as you keep it) and your cookie choice (sv-consent, stored for up to 12 months so we do not ask again). These are set on the basis of our legitimate interest in running the site and are exempt from consent under Art. 399(4) of the Polish Electronic Communications Law. No other cookie is set until you make a choice. The long-weekend calculator and the launch-list form set no cookies and store nothing in your browser.

Advertising and analytics pixels (only with your consent)

To measure whether our advertising campaigns bring visitors to the site and to show Solvago ads to people who have visited it (remarketing), we may load third-party tags on solvago.app — but only after you click “Accept” in the cookie banner. Until then, no pixel script is loaded, no pixel cookie is set and no data is sent to these vendors. If you click “Decline”, the site works exactly the same without them. You can change your mind at any time via the “Cookie settings” link in the footer of every page, which reopens the banner and lets you withdraw consent; withdrawal stops further collection and deletes the pixel cookies we control. The vendors we may use are:

• Meta Pixel — Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. Used to measure Facebook and Instagram campaigns and build remarketing audiences. Cookies _fbp and _fbc, retained for up to 90 days. Privacy policy: facebook.com/privacy/policy; opt out in Meta ad settings.
• TikTok Pixel — TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, Ireland. Used to measure TikTok campaigns and build remarketing audiences. Cookie _ttp, retained for up to 13 months. Privacy policy: tiktok.com/legal/privacy-policy; opt out in your TikTok account under Settings → Ads.
• Google Ads and Google Analytics 4 tags — Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Used to measure Google Ads campaigns, count visits and build remarketing audiences. Cookies _ga and _ga_* (retained for up to 2 years), _gcl_au (90 days); analytics data is retained on Google’s side for 14 months. Privacy policy: policies.google.com/privacy; how Google uses data from partner sites: policies.google.com/technologies/partner-sites; opt out at adssettings.google.com or with the Google Analytics opt-out add-on.

What these pixels collect

With your consent, the pixels collect pseudonymous identifiers stored in cookies, the pages you view on solvago.app and the buttons you click (for example a click on an App Store or Google Play button), the referring page and campaign parameters in the URL, your approximate location derived from your IP address, and technical information about your device and browser. If you ever give us your email address on the website (for example to join a waiting list), it may be shared with these vendors only in hashed form, so campaign results can be matched, and only if you consented to the pixels. The pixels do not receive anything from your Solvago account, trips or emails.

Legal basis and roles

The legal basis for setting these cookies and for the related processing is your consent — Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law (Prawo komunikacji elektronicznej), which requires prior, informed consent for storing information on your device. You can refuse without any consequence for your use of the site or the app. For the collection of data through the pixel and its transmission to the vendor, we and the vendor act as joint controllers; the vendor then processes the data for its own purposes as an independent controller under its own privacy policy, which is why we link to each of them above. These vendors may transfer data to the United States under the EU–U.S. Data Privacy Framework and Standard Contractual Clauses.

Browser controls

You can also block or delete cookies in your browser settings, use your browser’s private mode, or install an ad-blocking extension. Blocking cookies does not affect the website’s content, only the measurement described above.

16. Newsletter and long-weekend reminders on the website

On the long-weekend calculator (solvago.app/dlugie-weekendy) you can leave your email address to receive marketing emails from us about the Solvago app — its launch, news and offers — as well as the dates you chose and reminders about them. Joining the list does not create a Solvago account; it is a separate, optional list.

What we process

• your email address and the language of the page you signed up on;
• the long-weekend dates you chose in the calculator — start and end date, number of days off, number of leave days and the holiday name — only if you chose any;
• the exact wording of the consent you ticked, the time you gave it and the IP address it was given from;
• the time and IP address of your click on the confirmation link in our email (double opt-in);
• the campaign parameters (UTM) in the link you arrived from — for example the name of a social-media campaign — and which form you used;
• an anonymous page-view event on every page of solvago.app: the address of the page, the domain of the website you came from (only the domain, never the full link) and the campaign parameters of the link, so that we can count visits;
• an anonymous event when you click an App Store or Google Play button: which store, the page and the campaign parameters of the link. The button link itself passes the store only the name of the source you came from (the campaign name and the page), so that App Store Connect and Google Play Console can count installs per source; no identifier of you is added;
• anonymous usage events of the calculator and the form: that the calculator was used (with the number of leave days and the period chosen), that a calendar file was downloaded and that the form was shown. These events (page views included) carry no cookie, no identifier stored on your device and no email address; they are tied only to a random number created for a single page view and forgotten when you leave the page, and our server forwards them to our analytics without your IP address.

Calendar files (.ics) offered by the calculator are generated in your browser; downloading one sends us nothing except the anonymous event that a download happened.

Purposes

After you confirm your address, we use this data to send you marketing emails about the Solvago app (including its launch, news, features and offers) and, if you chose any dates, those dates (with a calendar file) and a reminder about six weeks (42 days) before each of them. We email rarely, and you can stop every message with one click. The consent record and the confirmation let us show that you agreed. The campaign parameters and the anonymous events tell us, in aggregate, which campaigns and features work.

Legal basis

Sending these emails is based on your consent — Art. 6(1)(a) GDPR, given by ticking the unchecked box and confirming the link in our email; this is also the consent to receive commercial information by email that Polish law (Prawo komunikacji elektronicznej) requires. You can withdraw it at any time via the unsubscribe link in every email or by writing to hello@solvago.app, without affecting the lawfulness of processing before withdrawal. The anonymous usage events, and the suppression record kept after you unsubscribe, are based on our legitimate interests (Art. 6(1)(f)) in understanding how the website is used and in never emailing you again against your wishes.

How long we keep it

• if you do not confirm your address, we delete the signup after 30 days;
• after confirmation, we keep your address, dates and consent record until you unsubscribe or ask us to delete them;
• when you unsubscribe, we delete your dates and the rest of the entry and keep only a suppression record — a one-way hash of your email address and the date you unsubscribed — so that we never email that address again unless you sign up anew;
• if an email to your address bounces permanently or is marked as spam, we stop sending to it;
• anonymous usage events are kept in our analytics as statistics.

Who receives it

• Resend, Inc. (USA) — sends the emails; receives your email address and the content of each message.
• Cloudflare, Inc. — hosts the website and the database in which the list is stored, and runs Cloudflare Turnstile, the check that tells people from bots on the form. Turnstile is loaded only once you start filling in the form and processes technical data about your browser and connection, such as your IP address, for that check only.
• PostHog, Inc. (hosted in the EU) — receives the anonymous usage events described above and, from our server, events about signups, confirmations, reminders and unsubscribes tied to a pseudonymous list-entry ID together with the campaign source and the number of dates — never your email address.

We do not sell the list or give it to advertisers. Section 15 describes the only case in which an address given on the website could reach an advertising vendor — in hashed form, and only if you accepted the advertising pixels.

Your rights

Every email has an unsubscribe link that works in one click, without logging in. You can also ask us at hello@solvago.app for access to, correction or deletion of your launch-list data; all the rights in section 11 apply, including the right to lodge a complaint with the supervisory authority.

17. Changes to this Policy

We may update this Privacy Policy from time to time. If changes are material, we will take reasonable steps to notify you — for example by updating the date above or posting a notice in the app. If we add a new pixel vendor on the website, we will ask for your consent again. Your continued use of the Service after the updated Policy takes effect means you acknowledge it.

18. Contact

For privacy questions or requests, email us at hello@solvago.app.

See also our Terms of Service and Data Deletion page.