Privacy policy

Controller

Arminstrongue Huambo Unipessoal Lda, company no. 519703871, registered at Rua João Morais Barbosa nr 11 4B, 1600-416, Lisboa (contact: [email protected]).

Data we process

Email and name; next flight time and (optional) number; city and plan purchased; payment data handled by Stripe (we never store your card).

If you sign in with Google, Apple or Facebook: your account name and email.

Your location (if you turn it on) and the nationality entered in "Can I leave?" stay on your device; we don't store them.

Merchants: business name, contact details, social links and billing data.

Independent sales partners: name, email, phone, country, deal pipeline and commissions.

Guide bookings: traveller name, email, phone and note, shared with the guide once they accept.

Guides: public profile; professional and tax details (activity registration, insurance, tax ID, tax country, address and date of birth); bank details are handled by Stripe.

Ratings: stars, NPS and comments, without your name; comments about guides may appear on the guide's profile.

Wallet: if you sign in with your email, we store your memories (photos and notes), saved places and chosen interests so you have them on any device. You can delete them in the wallet.

Traveller profile (optional, 16+ only): name, @username, photo, bio, cities you follow, who you follow and who follows you. Accounts are private by default; your email is never shown to other travellers. You can block and report profiles, and delete your profile in the wallet at any time. We review reports and may remove profiles that break the community rules.

Posts, videos and stories (optional): the photos, videos (converted and stored on our servers in the EU), captions, city and topic you share, plus likes and comments. On a private profile only approved followers see them; on a public profile, any signed-in traveller can. Stories are deleted automatically after 24 hours. Only your followers and people you follow can comment. You can delete posts and comments at any time; deleting your profile deletes all of this.

Private messages (optional): only between travellers where at least one follows the other. We store the text, the time and whether it was read, so the conversation reaches your devices. Our team does not read chats, except when a participant reports one for abuse or safety. You can unsend your messages, delete a chat on your side, block and report; deleting your profile deletes your chats.

Invites (optional): when you invite a friend by email, we send them a single email on your behalf; by SMS or WhatsApp, the message goes from your own phone. We don't store your friends' email or phone number — only an irreversible code, so we don't send repeated invites. Friends who join with an invite follow the person who invited them.

Purposes and legal bases

Providing the service and computing your return time (contract).

Invoicing and tax obligations (legal obligation).

Guides: yearly income reporting to the Portuguese tax authority under Directive (EU) 2021/514 (DAC7) (legal obligation).

Security and fraud prevention (legitimate interest).

We do not send marketing without your consent.

Retention

Access data: up to 24 months after your last access. Invoicing records and guides' DAC7 records: 10 years, as required by law.

Processors

Stripe (payments), Hetzner (EU servers), Cloudflare (network and security), our transactional email provider, AeroDataBox (flight status, flight number only) and, if used, your sign-in provider (Google, Apple, Facebook).

Some may transfer data outside the EEA under standard contractual clauses or adequacy decisions.

Your rights

You may request access, rectification, erasure, restriction, portability or object to processing at [email protected].

You may also complain to the Portuguese data protection authority (cnpd.pt).