Back to Privacy Overview

Tavvi Privacy Policy

Last updated: 20/01/2026

Tavvi ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our website, mobile applications, and related services (together, the "Services").

If you do not agree with this Privacy Policy, please do not use the Services.

1. Who we are

Tavvi is the data controller for personal data processed through the Services, unless stated otherwise.

2. What data we collect

2.1 Data you provide

  • Account information: email address, phone number, authentication credentials or tokens.
  • Profile information: display name, profile photo, biography, preferences, travel interests, accessibility needs, and language settings (all optional unless stated).
  • Social information: information you choose to share when using social features, such as posts, meetup requests, messages, and visibility preferences.
  • User content: itineraries, saved places, notes, reviews, feedback, and communications with Tavvi.
  • Payment and billing data (if applicable): limited billing information and transaction metadata. We do not store full payment card details where third-party processors are used.

2.2 Data collected automatically

  • Device and technical data: device type, operating system, app version, browser type, IP address, and crash diagnostics.
  • Usage data: interactions with the Services, features used, screens viewed, timestamps, and performance metrics.
  • Approximate location: inferred from IP address to support localised content.
  • Precise location (optional): GPS-level location if you explicitly grant permission, used for navigation, nearby recommendations, and social discovery features.

You may disable precise location at any time in your device settings.

2.3 Communications data

  • SMS verification data: phone number, delivery status, timestamps, and verification events.
  • Email and in-app communications: content and metadata relating to messages you send or receive from Tavvi.

2.4 Data from third parties

Depending on features you use, we may receive:

  • Mapping, routing, and place data from third-party providers.
  • Affiliate and booking metadata where you choose to engage with partner services.
  • Authentication data from third-party sign-in providers.

3. How we use your data

We use personal data to:

  • provide, operate, and maintain the Services,
  • authenticate users and secure accounts,
  • enable social features and traveller connections,
  • personalise recommendations and itineraries,
  • communicate service-related messages and security alerts,
  • analyse usage and improve product performance,
  • comply with legal and regulatory obligations.

We do not sell your personal data.

4. Lawful bases for processing

We process personal data under the following lawful bases:

  • Contract: to deliver the Services you request.
  • Legitimate interests: to improve, secure, and operate Tavvi responsibly.
  • Consent: where required (for example, precise location or optional marketing).
  • Legal obligation: to meet statutory or regulatory requirements.

5. Social features and meeting nearby travellers

Tavvi may offer social features that allow users to discover, interact with, or arrange meet-ups with nearby travellers.

5.1 Visibility and sharing

  • You control what profile information is visible to others.
  • Location sharing for social discovery is approximate by default and never shows precise real-time GPS coordinates to other users.
  • You may limit visibility by distance, region, or disable social discovery entirely.

5.2 Messaging and interactions

  • Messages exchanged between users are processed to deliver the communication and to enforce safety rules.
  • Tavvi does not monitor private messages for marketing purposes but may review content where required to investigate abuse, safety concerns, or legal issues.

5.3 Safety, moderation, and reporting

  • Users may block or report other users.
  • Tavvi may review reports and take action including content removal, feature restriction, or account suspension.
  • We may retain relevant data where necessary to investigate or prevent harm, fraud, or misuse.

Use of social features is optional. Disabling them will not affect core travel planning functionality.

6. Affiliate partners and bookings

Tavvi may include links to third-party travel providers (for example, accommodation, transport, activities, or experiences).

  • When you click an affiliate link or make a booking, Tavvi may receive attribution or commission data, such as confirmation that a booking occurred, transaction value ranges, and partner identifiers.
  • Tavvi does not receive full payment details for bookings completed on third-party platforms.
  • Third-party providers are independent controllers of your data and handle your personal information according to their own privacy policies.

We encourage you to review the privacy policies of any third-party service before completing a booking.

7. Sharing your data

7.1 Service providers

We use trusted service providers who process data on our behalf, including:

  • cloud infrastructure and hosting (for example, Amazon Web Services),
  • SMS and messaging delivery providers,
  • analytics, monitoring, and customer support tools.

These providers are bound by contractual data protection obligations.

7.2 Legal and safety disclosures

We may disclose data where reasonably necessary to:

  • comply with legal obligations or lawful requests,
  • protect the rights, safety, and security of users or Tavvi,
  • investigate fraud, abuse, or security incidents.

7.3 Business transfers

If Tavvi undergoes a merger, acquisition, or asset sale, personal data may be transferred as part of that transaction, subject to appropriate safeguards.

8. International data transfers

Where personal data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or approved contractual mechanisms, together with technical and organisational protections.

9. Data retention

We retain personal data only for as long as necessary:

  • Account data: while your account is active and for a limited period after deletion.
  • User content: until deleted by you or account closure, subject to backups and legal requirements.
  • Security and logs: retained for limited periods to maintain system integrity.
  • Support records: retained for operational and dispute-resolution purposes.

Backups may persist temporarily but are not used for active processing.

10. Your rights

You have the right to:

  • access your data,
  • correct inaccurate data,
  • request deletion,
  • restrict or object to processing,
  • request data portability (where applicable),
  • withdraw consent at any time.

Requests can be made to privacy@tavvi.co.uk. We may verify your identity before responding.

11. SMS verification and essential messages

If you provide a phone number, Tavvi may send SMS messages for:

  • account verification,
  • security alerts,
  • essential service notifications.
  • Opt-out: Reply STOP
  • Help: Reply HELP

Message frequency varies by account activity. Message and data rates may apply.

Opting out may limit access to SMS-based security features.

12. Cookies and similar technologies

Our website may use cookies or similar technologies to support functionality, security, and analytics. Where required, consent will be requested. You can manage cookies through browser settings.

13. Security

We apply reasonable technical and organisational measures to protect personal data, including encryption in transit where appropriate, access controls, and monitoring.

No system is completely secure. Users are responsible for safeguarding their account credentials.

14. Children

Tavvi is not intended for children under the age of 13. If we become aware that personal data has been collected from a child without appropriate consent, we will take steps to delete it.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Services or website. The "Last updated" date will always reflect the current version.

16. Complaints and contact

For privacy enquiries, contact privacy@tavvi.co.uk.

You also have the right to lodge a complaint with:

Information Commissioner's Office (ICO)
https://ico.org.uk