Privacy Policy

Voyage Health Inc. ("Voyage," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website, and related services (the "Service"). Our Service provides an AI-powered pet care companion that helps you manage your pet's health, diary entries, and care routines.

Voyage Health Inc. is the data controller responsible for your personal information. You can reach us at any time at connect@thevoyage.ai.

Our Service relies on multiple third-party artificial intelligence providers to deliver its core features. This policy describes exactly what data is collected, how it is used, which third-party services receive your data, and the choices available to you.

A note on pet health data: Information you provide about your pet (including veterinary records) is information about an animal. It is not human health information, and it is not "protected health information" under HIPAA. We treat it as your personal information and protect it under this policy, but HIPAA does not apply to pet medical records.

Personal Information

• Account information (email address, username)
• Authentication data (through Supabase Auth)
• Device information and identifiers
• Push notification tokens (for app notifications)
• Subscription and purchase history

Pet-Related Information

• Pet profiles (name, breed, age, weight, medical information)
• Photos and videos of your pets
• Diary entries and health observations
• Chat conversations with our AI assistant
• Medical records and veterinary documents
• Health assessments and triage results
• Nutrition analysis data

Voice and Audio Data

• Voice recordings during AI voice calls
• Transcriptions of voice conversations

Usage Information

• App usage patterns and interactions
• Feature usage analytics
• Error logs and performance data
• Feedback and support communications

Information You Provide Directly

• Account registration: You provide your email address and create login credentials when signing up.
• Pet profiles: You enter your pet's name, breed, age, weight, and medical history when creating a pet profile.
• Photo and video uploads: You choose to upload photos and videos of your pets from your device's camera or photo library for diary entries, health assessments, and nutrition analysis.
• Chat messages: You type text messages and optionally attach images or documents when chatting with the AI assistant.
• Medical records: You upload veterinary documents, vaccination records, and other medical files.
• Voice recordings: When you initiate an AI voice call, your microphone captures your voice for real-time conversation.
• Diary notes: You optionally provide text notes and observations about your pet during diary creation.

Information Collected Automatically

• Device information: We automatically collect your device type, operating system version, and app version when you use the app.
• Push notification tokens: Your device's push notification identifier is collected when you enable notifications.
• Usage analytics: We collect data about which features you use, how often, and general interaction patterns.
• Error and performance logs: Technical logs are collected automatically to diagnose issues and maintain service quality.

Information Generated Through AI Processing

• Health assessments: AI models analyze your pet's photos and information to generate health reports and triage assessments.
• Diary content: AI generates diary text based on photos and notes you provide.
• Nutrition analysis: AI analyzes food photos to generate nutritional assessments.
• Chat responses: AI generates responses based on your messages and pet context.
• Search embeddings: Numerical representations of your content are generated by AI to enable semantic search within the app.

Information From Third-Party Services

• Authentication data: We receive authentication tokens and session data from Supabase Auth when you log in.
• Subscription status: We receive your subscription tier and purchase history from RevenueCat (Apple In-App Purchases).

• Pet Photos and Videos: Sent to AI providers (Google Gemini, OpenAI, xAI/Grok) for health analysis, diary illustration, nutrition assessment, and triage evaluation. Also processed by Google Vertex AI to create search embeddings.
• Chat Messages: Sent to AI providers (Google Gemini, OpenAI, xAI/Grok) to generate contextual AI responses, provide pet care advice, and maintain conversation history.
• Voice Audio: Streamed to LiveKit Cloud for real-time voice conversation and processed by OpenAI for speech-to-text transcription and text-to-speech voice synthesis.
• Health Data and Medical Records: Sent to AI providers (Google Gemini, OpenAI, xAI/Grok) to generate health assessments, track health trends, and provide veterinary care recommendations.
• Pet Profile Information: Used to personalize AI responses and sent to LiveKit Cloud during voice calls to provide context for the AI assistant.
• Diary Entries and Notes: Processed by Google Gemini to generate diary content and by Google Vertex AI to create search embeddings for finding related entries.
• Nutrition Data: Food photos and information sent to Google Gemini and xAI/Grok to generate nutritional quality assessments and feeding recommendations.
• Communication: Push notification tokens used to send you app notifications, updates, and reminders via Expo notification service.
• Analytics: Usage data collected to understand app usage patterns and improve our services.
• Safety: Account and device data used to ensure app security and prevent misuse.
• Legal Compliance: Data retained and disclosed as needed to meet legal obligations and protect our rights.

If you are in the European Economic Area (EEA) or the United Kingdom, we process your personal information only when we have a lawful basis to do so under the GDPR and UK GDPR:

• Performance of a contract: to create your account and provide the features you request — pet profiles, chat, triage, diary, nutrition, and voice calls.
• Consent: which we request before processing that depends on it — AI features, voice recordings, pet photos and videos, and any sensitive data. You may withdraw consent at any time.
• Legitimate interests: to secure the Service, prevent misuse, debug problems, and improve features — weighed against your rights and freedoms.
• Legal obligation: to comply with applicable law, including tax and accounting requirements.

Where we rely on consent, you can withdraw it at any time (see "Your Privacy Rights and Choices"). Withdrawal does not affect the lawfulness of processing carried out before you withdrew.

Our Service uses multiple artificial intelligence providers to power its features. When you use AI-powered features, your data is sent to the following third-party services for processing. Each AI service provider listed below is accessed through enterprise API agreements. Under these agreements, your data is processed solely to provide responses to your requests and is not used to train or improve general-purpose AI models.

All third-party AI providers operate under terms of service and data protection policies that provide protections for your data consistent with this Privacy Policy. All data is transmitted over encrypted (TLS/HTTPS) connections.

AI Model Providers

• Google Gemini (Google LLC) — Receives: pet photos, health data, diary text, chat messages, medical records, nutrition data. Used for: health analysis, diary generation, nutrition analysis, triage assessments, chat responses, and text/image embeddings.
• OpenAI / GPT (OpenAI, L.L.C.) — Receives: pet photos, chat messages, voice audio, medical documents. Used for: chat responses, health analysis, audio transcription (speech-to-text), and document analysis.
• xAI / Grok (xAI Corp.) — Receives: pet photos, health data, chat messages, medical records. Used for: health analysis, triage assessments, nutrition analysis, chat responses, memory generation, and voice AI language processing.

AI Infrastructure and Gateways

• Portkey.ai (Portkey) — AI gateway that routes requests to Google Gemini, OpenAI, and xAI. All data sent to those providers passes through Portkey.
• Google Vertex AI (Google LLC) — Provides text and image embedding services. Receives diary text, health content, and pet photos for semantic search indexing.

Voice Call Services

• LiveKit Cloud (LiveKit Inc.) — Hosts the voice agent. Receives voice audio, pet profile context, and session information.
• OpenAI (OpenAI, L.L.C.) — Provides speech-to-text and text-to-speech. Receives your voice audio recordings for transcription, and AI-generated text responses to convert to audio.

• Pet photos and images: Google Gemini, OpenAI, xAI/Grok, Google Vertex AI
• Chat messages and text: Google Gemini, OpenAI, xAI/Grok
• Health data and observations: Google Gemini, OpenAI, xAI/Grok
• Diary entries and text: Google Gemini, Google Vertex AI
• Medical records and documents: Google Gemini, OpenAI, xAI/Grok
• Nutrition data: Google Gemini, xAI/Grok
• Voice audio recordings: LiveKit Cloud, OpenAI (speech-to-text)
• AI-generated text (for audio output): OpenAI (text-to-speech)
• Pet profile context: LiveKit Cloud (for voice call personalization)

All data sent to AI model providers passes through our AI gateway infrastructure (Portkey.ai) before reaching the model providers.

Voyage uses AI to analyze your pet's information and generate health assessments, triage guidance, diary content, nutrition analysis, and personalized recommendations. We want to be clear about what this does and does not mean:

• AI outputs are informational only and are not veterinary diagnoses. They are designed to support — never replace — your own judgment and the advice of a licensed veterinarian.
• We do not use solely-automated processing to make decisions that produce legal or similarly significant effects about you.
• If you are in the EEA or UK, you have the right to obtain human review of, to express your view on, and to contest any decision you believe was based solely on automated processing. Contact us at connect@thevoyage.ai.

We require that all third-party service providers who receive your personal data provide the same or equivalent level of data protection as described in this Privacy Policy. Specifically:

• Enterprise API Access: We access AI services through enterprise or API-level agreements, not consumer-facing products. These agreements include data handling obligations that restrict how providers may use your data.
• No Model Training: Under our enterprise API agreements, your data is not used by AI providers to train, improve, or fine-tune their general-purpose AI models.
• Encryption in Transit: All data sent to third-party providers is encrypted using industry-standard TLS/HTTPS protocols during transmission.
• Purpose Limitation: Third-party providers process your data only for the purpose of generating responses and results for your specific requests. They do not use your data for their own independent purposes.
• Data Minimization: We send only the data necessary for each specific feature. For example, voice call features only receive voice audio and pet context — not your full chat history or medical records.

Data Storage and Infrastructure

• Supabase (Supabase Inc.) — Primary database and file storage. Stores all user data, pet profiles, pet photos, medical images, and authentication data.
• Zilliz Cloud (Zilliz Inc.) — Vector database for semantic search. Stores numerical embeddings derived from diary entries, chat content, and health data.
• Temporal Cloud (Temporal Technologies Inc.) — Workflow orchestration. Processes task metadata, user IDs, and session IDs to coordinate background tasks.

Analytics, Notifications, and Other Services

• Axiom (Axiom Inc.) — Logging and observability platform. Receives logs containing user IDs, feature usage events, and timestamps.
• Expo (Expo Inc.) — Push notification service. Receives device push notification tokens to deliver app notifications.
• Browserless (Browserless Inc.) — Server-side browser rendering. Receives diary HTML content to generate shareable images.
• RevenueCat (RevenueCat Inc.) — Subscription management. Receives user IDs and subscription status for in-app purchase management.
• Tavily (Tavily Inc.) — Web search API. Receives search queries derived from chat context to provide real-time information.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. See "Do Not Sell or Share Your Personal Information" below.

Other Sharing Circumstances

• Legal Requirements: When required by law, regulation, or court order
• Safety: To protect the rights, property, or safety of our users or others
• Business Transfers: In connection with mergers, acquisitions, or asset sales

Before your data is sent to any third-party AI service, the app will clearly inform you and request your permission. When you first use an AI-powered feature (such as AI chat, health analysis, diary generation, voice calls, triage assessment, or nutrition analysis), the app will disclose that your data will be processed by third-party AI service providers and ask for your explicit consent before proceeding.

By granting consent and using Voyage's AI-powered features, you agree to have your data processed by the third-party AI service providers listed in this Privacy Policy. This processing is necessary to provide the core AI functionality of our app.

What Happens When You Use AI Features

• AI Chat: Your messages, attached images, and pet context are sent to Google Gemini, OpenAI, or xAI/Grok (depending on the model selected) via Portkey.ai.
• Health Analysis: Your pet's photos and health observations are sent to Google Gemini, OpenAI, and/or xAI/Grok via Portkey.ai to generate a health assessment.
• Diary Generation: Your pet's photos and notes are sent to Google Gemini via Portkey.ai to generate diary content.
• Voice Calls: Your voice audio is streamed to LiveKit Cloud and transcribed by OpenAI. AI responses are converted back to speech by OpenAI.
• Triage Assessment: Your pet's symptoms and photos are sent to Google Gemini and/or xAI/Grok via Portkey.ai to assess severity.
• Nutrition Analysis: Food photos are sent to Google Gemini and/or xAI/Grok via Portkey.ai for nutritional evaluation.

How to Limit or Withdraw Consent

• Choosing not to use specific AI features (e.g., voice calls, health analysis, AI chat)
• Not uploading photos or medical records to the app
• Using only non-AI features such as manual diary entries and pet profile management
• Deleting your account, which removes all your data from our systems

You may withdraw your consent at any time by discontinuing use of AI features. Withdrawing consent does not affect the lawfulness of processing performed before the withdrawal.

If you wish to have your data deleted from our systems and our third-party providers, you may delete your account through the app settings or contact us at connect@thevoyage.ai. Please note that some AI providers may retain previously processed data according to their own data retention policies, as described in the "Data Protection by Third Parties" section above.

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption in transit and at rest
• Secure authentication systems
• Regular security assessments
• Access controls and monitoring

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. Data sent to third-party AI providers is transmitted over encrypted connections, but is processed on their infrastructure according to their respective security practices.

• Account data: Until you delete your account
• Pet profiles and diary entries: Until you delete them or your account
• Chat conversations: Stored for service improvement, can be deleted upon request
• Voice call recordings: Processed in real-time and not stored after the call ends
• Vector embeddings: Deleted when the source content is deleted or your account is removed
• Usage analytics: Aggregated, de-identified data may be retained indefinitely

We keep personal information only for as long as needed for the purposes described in this policy, or as required to comply with our legal obligations, resolve disputes, and enforce our agreements. Third-party AI providers may retain data according to their own retention policies. We encourage you to review the privacy policies of the AI providers listed above.

Rights available to you

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access / Know: Confirm whether we process your personal information and request a copy of it.
• Correct: Update or correct inaccurate or incomplete information.
• Delete: Request deletion of your personal information.
• Portability: Receive your data in a structured, commonly used, machine-readable format.
• Object / Restrict: Object to or ask us to restrict certain processing.
• Withdraw consent: Withdraw any consent you previously gave, at any time.
• Opt out of AI processing: Stop using AI features to prevent data from being sent to AI providers.
• Non-discrimination: We will not discriminate against you for exercising any of these rights.

How to exercise your rights

You can exercise most rights directly in the app's settings, or by emailing us at connect@thevoyage.ai. We may need to verify your identity before acting on a request, and an authorized agent may submit a request on your behalf with proof of authorization. We will respond within the timeframe required by applicable law. If we decline your request, you may appeal by replying to our decision or emailing us with "Privacy appeal" in the subject line.

Sensitive Personal Information (California)

The Sensitive Personal Information we may process is limited to your account login credentials, your voice recordings during AI voice calls, and the contents of your communications with the AI assistant. We use this information only to provide and secure the Service — not to infer characteristics about you. California residents may request that we limit the use of their Sensitive Personal Information. (As noted above, information about your pet's health is information about an animal and is not treated as sensitive health information about a person.)

Do Not Sell or Share Your Personal Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (as amended by the California Privacy Rights Act). Because we do not sell or share, there is nothing to opt out of — but we still honor opt-out preference signals as described below.

Global Privacy Control and universal opt-out signals

We recognize and honor the Global Privacy Control (GPC) and other universal opt-out preference signals where required by law. Because we do not sell or share your personal information or engage in targeted advertising, these signals do not change how we handle your data, but we treat a received signal as a valid opt-out request.

US State Privacy Rights

Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other US states with comprehensive privacy laws have rights that may include: to confirm whether we process your personal data and to access it; to correct inaccuracies; to delete it; to obtain a portable copy; and to opt out of (a) targeted advertising, (b) the sale of personal data, and (c) profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in targeted advertising or the sale of personal data, and we do not use profiling to make such decisions. Where required, we obtain your consent before processing sensitive data. If we deny a request, you may appeal as described under "How to exercise your rights."

Account Deletion

You can delete your account and all associated data through the app settings or by contacting us. Upon deletion:

• All personal information will be permanently deleted from our systems
• Pet profiles, photos, and diary entries will be removed
• Chat conversations and health assessments will be deleted
• Vector embeddings will be removed from our vector database
• Some aggregated, anonymized data may be retained for analytics
• Data previously sent to third-party AI providers is subject to their retention policies

For step-by-step instructions and timelines, see our Data Deletion page.

If you are in the EEA or the UK, the GDPR and UK GDPR give you the rights described above, and you also have the right to lodge a complaint with your local data protection supervisory authority (in the UK, the Information Commissioner's Office). We would appreciate the chance to address your concerns first — please contact us at connect@thevoyage.ai.

Voyage is a general-audience service and is not directed to children. You must be at least 16 years old (or the minimum age of digital consent in your country, whichever is higher) to use the Service. We do not knowingly collect personal information from children under this age. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at connect@thevoyage.ai, and we will delete such information promptly.

Your information may be transferred to and processed in countries other than your country of residence. Our third-party AI and infrastructure providers operate servers primarily in the United States. Where we transfer personal information out of the EEA or UK, we rely on appropriate safeguards, including, as applicable:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• The UK International Data Transfer Addendum (IDTA)
• The EU–US Data Privacy Framework, where a provider is certified
• Adequacy decisions, where one applies

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy in the app
• Sending a push notification
• Updating the "Last updated" date

Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, our data practices, or the third-party services we use, please contact us:

• Email: connect@thevoyage.ai
• Through the app's support feature

Voyage is operated by Voyage Health Inc., the data controller for the purposes of this Privacy Policy.

This Privacy Policy is designed to comply with applicable privacy laws, including:

• EU General Data Protection Regulation (GDPR) and UK GDPR
• California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA)
• Comprehensive US state privacy laws, including those of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana
• Children's Online Privacy Protection Act (COPPA)
• EU AI Act (Regulation (EU) 2024/1689) transparency obligations
• Apple App Store and Google Play data and privacy guidelines
• Other applicable local privacy laws