Privacy Policy

1. Who we are

Oliday (“Oliday”, “we”, “us”) operates oliday.app and the Oliday apps — a holiday planning and booking service, and Vibes, our social travel feature where travellers host and join group trips. This policy explains what we collect, why, and the choices you have.

2. Information we collect

• Account details — when you sign in with Google or email we receive your name, email address and profile photo.
• Phone number — when you verify it with an OTP, or share it for a callback about a trip.
• Work email — optional, verified with a code you enter, used only for your Vibes trust badge.
• Government ID (Aadhaar) — optional, a photo you upload for the Vibes ID badge. See section 5.
• Profile information — your Vibes bio, profile photo, LinkedIn and Instagram links.
• Trip information — destinations, dates, party details, budgets, preferences, quotes you request or upload, trips you host or join, and join requests.
• Messages — what you write to Oli (our planning assistant) and in Vibes trip chats.
• Usage data — device and log information that helps us run and improve the service.

3. How we use it

• To plan, price and book your trips — including sharing trip requirements with our destination partners so they can quote.
• To verify who you are and show trust badges on Vibes (phone, work email, ID).
• To connect travellers on Vibes — hosts see your profile when you request to join a trip.
• To send transactional messages: OTPs, verification codes, and emails such as “your quote is ready”.
• To follow up personally — our team may call or WhatsApp you about a trip you asked about.
• To keep the service safe: preventing fraud, abuse and spam.
• To improve Oliday, including AI-assisted features (e.g. itinerary suggestions, plan refinement) processed via Google's Gemini models.

4. What other travellers see on Vibes

Your Vibes profile — name, photo, bio, LinkedIn/Instagram links and your verification badges — is visible to hosts and members of trips you interact with. Other travellers never see your phone number, email addresses, or your ID document; only the badge that a verification succeeded.

5. Government ID (Aadhaar) handling

If you choose to submit an Aadhaar photo, it is stored privately, is accessible only to our verification team, and is used solely to grant your ID badge. It is never shown to other travellers or shared with partners. You can ask us to delete it at any time.

6. When we share information

• Destination partners — trip requirements (destination, dates, party size, preferences) needed to prepare your quote. Not your ID or verification data.
• Service providers — infrastructure and tooling we rely on: Google Firebase (authentication, database, storage), Google Gemini (AI features), Google Maps, Resend (transactional email), Meta Platforms / WhatsApp (so we can message you on WhatsApp about your trip), and Telegram (internal team alerts). They process data only to provide their service to us.
• Legal — if required by law or to protect Oliday, our users or the public.

We do not sell your personal information.

7. Messaging you on WhatsApp

When you share your phone number with us — in an enquiry, a booking request, or an OTP — you consent to Oliday contacting you on WhatsApp, by phone, or by email about your trip. WhatsApp messages are delivered through the WhatsApp Business Platform operated by Meta; their handling of the message is governed by WhatsApp's own terms and privacy policy. We use WhatsApp only for trip-related and service messages you have asked for, not to share your number with third parties. You can opt out at any time by replying STOP to any WhatsApp message from us, or by emailing us.

8. Retention and deletion

We keep your information while your account is active or as needed to provide the service and meet legal obligations. You can request access, correction, or deletion of your data — including your account — by writing to us; we will action it within a reasonable time.

9. Security

Data is stored with reputable cloud providers, protected by access controls, and sensitive artefacts (like ID photos) are restricted to the team members who need them. No system is perfectly secure, but we work to keep your information safe.

10. Children

Oliday is intended for users aged 18 and above. We do not knowingly collect information from children.

11. Changes

We may update this policy as the product evolves. Material changes will be reflected by the date above, and we may notify you in the product or by email.