Privacy Policy

Gamaya is an AI trip planner made by Gunamaya Technologies Pvt. Ltd. (“Gunamaya”, “we”, “us”), India. This policy explains how we handle personal data in the Gamaya app for Android and iOS and on the Gamaya pages of gunamaya.com. Gunamaya decides how this data is used and is responsible for it: the data fiduciary under India’s Digital Personal Data Protection Act, 2023, and the controller under the GDPR where it applies. We also follow the Information Technology Act, 2000 and its rules on sensitive personal data.

We do not sell your personal data, and Gamaya shows no advertising.

• Account details: your name, email address, and mobile number, verified by a one-time code when you sign up; your gender if you give it; and a profile photo if you add one. Sign-in with Google or Apple shares your name and email with us; we never receive your password.
• Your agreement: the version of these terms and policies you accepted and when you accepted them.
• Verification record: a one-way coded form (a hash) of your mobile number, so welcome credits are given only once per number. It cannot be turned back into the number.
• Location: with your permission, your device location, to find places near you, set a trip’s starting point, and show your current country. The last known location is kept on your phone; your current country and city are saved to your account.
• Trips and preferences: the trips you plan, their itineraries, places you save, the food, stay, and transport choices you give Genie, and preferences you ask Genie to remember, such as dietary needs.
• Genie conversations: your chats with Genie are stored on your phone. To answer, the text of your request and the trip details it needs are sent to our servers and to Google Gemini.
• Plan, purchases, and usage: your plan, its renewal date, the credits you use, and the cost of the AI and map requests behind them. For purchases we receive the store’s transaction or purchase id, the product, and its dates. Card and payment details stay with Apple or Google.
• Messages to us: what you send through Contact Us, with your name, email, mobile, country, and device type, so we can reply.
• Device and technical data: a random id for this installation (used to resume an itinerary build on the right phone), your device platform, and technical logs and error reports needed to keep the service working.
• Voice and photos: voice search is turned into text by your phone’s speech service, under Apple’s or Google’s terms; Gamaya does not keep the audio. The camera and photo library are used only when you choose a profile photo.

• To provide Gamaya: build itineraries, find places, routes, stays, food, and transport, answer Genie, and show suggestions for where you are.
• To keep your trips, saved places, preferences, and plan in sync on every phone you sign in to.
• To sell and manage Gamaya Pro and top-ups: confirm purchases with the App Store or Google Play, apply renewals, cancellations, and refunds, and meter credits.
• To protect the service: verify accounts, enforce fair use and daily limits, stop free credits being claimed more than once, detect abuse and fraud, and secure accounts.
• To reply to your messages and provide support, and to tell you about changes to Gamaya or these policies.
• To keep Gamaya reliable and improve it, using usage totals and error reports.

We rely on your consent (for example, for location, which you can withdraw at any time), on what is needed to provide the service you asked for, on our legal obligations, and on our legitimate interest in keeping Gamaya secure and working. We do not use your data for advertising, and we do not use it to train AI models.

Genie and itinerary planning use Google Gemini through Gamaya’s servers, on Google’s paid service, under which Google does not use the content to improve its products. Places, photos, routes, and weather come from Google Maps Platform, and some place photos and descriptions from Wikipedia and Wikimedia Commons; requests include the place names or coordinates the search needs, but not your account details. When you navigate, Gamaya opens Google Maps or Apple Maps, which handle your location under their own privacy policies.

We share personal data only with the service providers that run Gamaya for us, under contracts that protect it:

• Google Cloud and Firebase: sign-in, phone verification, database, file storage, and servers;
• Google Maps Platform and Google Gemini: places, routes, and AI, as described above;
• Apple and Google: purchases, subscriptions, and refunds through the App Store and Google Play;
• Google Workspace: our email, for verification codes and messages you send us.

We may also disclose data when the law requires it, to protect the rights, safety, or property of our users or of Gunamaya, or as part of a merger or sale of the business, in which case this policy continues to protect it.

Your account data is stored in Google Cloud in Mumbai, India (asia-south1). Some providers, such as Google’s AI and map services, may process requests in other countries. Where data leaves your country, we rely on the safeguards the law requires.

• Account details, trips, saved places, preferences, and your profile photo: while your account is open. They are deleted when your account is deleted.
• The record of your agreement: while your account is open and for as long as we may need it to show what you agreed to.
• The coded form of your mobile number: kept after your account is deleted, only to stop welcome credits being claimed again with the same number.
• Genie chats: on your phone until you delete them or the app.
• Purchase and usage records: as long as tax and accounting law requires, which in India can be up to eight years.
• Messages to us: up to two years after we reply.
• Technical logs: a few weeks, unless needed to investigate a problem.

When these features launch, they will handle data as follows, and we will ask for any new permission first:

• Sharing trips: the people you invite will see the shared trip, your name, and your profile photo. You can stop sharing at any time.
• Offline trips: itineraries and maps you save are kept on your phone.
• Live trip tracking: your location while a trip is active, and in the background only if you allow it. It is used to show your progress and will not be shared with anyone unless you choose to share it.

If a feature needs data this policy does not describe, we will update the policy before it launches.

You can see and change your name and photo in your profile, delete trips and saved places, clear what Genie remembers, delete your whole account under Profile and then Delete account, and turn off location, camera, photo, or microphone access in your phone’s settings.

You can also ask us for a copy of your data, to correct it, to delete your account and its data, or to stop a use you consented to. Under India’s Digital Personal Data Protection Act you may also nominate someone to act for you, and in the EU, the UK, and some other places you have similar rights, including the right to object and to complain to your data protection authority.

Send a request through Contact Us in the app or to privacy@gunamaya.com, from the email on your account. We answer within 30 days. Deleting your account does not cancel a store subscription; cancel it in your App Store or Google Play settings.

Data is encrypted in transit, and on our servers it is also encrypted at rest. Our servers hold the keys for Google services, so the app never contains them, and access rules let each account read only its own data. Your plan and credits can be changed only by our servers. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

Gamaya is meant for adults. Anyone under 18 may use it only with the verifiable consent and supervision of a parent or guardian. We do not knowingly collect data from children without that consent, and we do not track children or target them with any content. If you believe a child has given us data without consent, contact us and we will delete it.

We will update this policy when Gamaya changes how it handles data. When a change matters to you, we will tell you in the app or by email before it takes effect. The date at the top shows the latest version.

Privacy questions, requests, and complaints go to our Grievance Officer at privacy@gunamaya.com, Gunamaya Technologies Pvt. Ltd., India. We acknowledge complaints within 48 hours and resolve them within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India or your local data protection authority.