VoyageOS

Privacy Policy

Last updated: August 23, 2026

VoyageOS is a travel-planning app operated by Miles After Work ("we," "us," "our"). This policy explains what information we collect, how we use it, and the choices you have. VoyageOS is currently in beta, available only to invited testers.

Information we collect

Account information. Your email address and name, from Google Sign-In or from the email/password you provide directly.

Trip content you create. Destinations, dates, traveler names, itinerary items, packing lists, tasks, notes, and any documents, screenshots, or booking confirmations you upload — including confirmation numbers and flight/hotel details you choose to store.

Content you forward or import. If you forward a booking email to your personal VoyageOS inbox address, or connect Gmail import, we process that email's content to detect and extract travel bookings. See Gmail access below for the specific rules that apply to that feature.

Feedback you submit. Bug reports and feature requests, which may include an email address and a screenshot you attach.

Automatically collected data. IP address, browser/device information, and error diagnostics, collected when the app encounters a problem (via Sentry) so we can fix it.

Product usage. Which screens you open and which actions you complete — for example starting and finishing sign-up — recorded via PostHog so we can see where the app is confusing or broken. You are identified only by your account's internal ID; we do not send your name, email address, or any trip content. We do not record your screen and we do not use automatic capture of page contents.

Data stored on your device. Your signed-in session and app preferences are cached in your browser's local storage so the app works offline and loads quickly.

How we use this information

To operate the app: save and display your trips, sync across your devices, and let you share a trip via a link.
To parse travel content: text and documents you submit (typed, pasted, or forwarded) are sent to Anthropic's Claude API to extract structured details — dates, confirmation numbers, traveler names — so we can build your itinerary automatically. See AI processing below.
To respond to support requests and bug reports.
To monitor and fix errors, and to prevent abuse of the service.
To enforce beta access — VoyageOS currently restricts sign-up to an invited-tester allowlist.

We do not sell your personal information, and we do not use your trip content to serve you advertising.

AI processing (Anthropic)

When you paste text, upload a document, ask the trip assistant a question, or import a booking, the relevant content is sent to Anthropic's Claude API to extract or generate the response you asked for. This is server-side — your Anthropic usage is never exposed to your browser, and Anthropic's standard API terms mean your content is not used to train their models. We keep the extracted results (e.g., the flight you imported), not a separate transcript of the raw AI exchange, beyond what's needed for troubleshooting.

Gmail access (optional feature)

Limited Use disclosure. VoyageOS's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

If you choose to connect Gmail, VoyageOS requests read-only access (gmail.readonly) — we cannot send, delete, or modify anything in your mailbox. That access is used solely to scan for travel-related confirmation emails (flights, hotels, rentals) and extract itinerary details into your account. Specifically:

No human at Miles After Work reads your email content in the normal course of operating the feature.
Email content is not used for advertising, and is not sold or shared with any third party except Anthropic, and only to the extent needed to identify and extract travel details from a message you're importing.
You can disconnect Gmail access at any time from Settings. Disconnecting stops all future scanning and revokes VoyageOS's access via your Google Account.
This feature is entirely optional — VoyageOS works fully without it, via manual entry or by forwarding individual emails instead.

Who we share data with

We use the following service providers to operate VoyageOS. Each receives only the data needed to perform its function, under its own privacy terms:

Provider	Purpose
Supabase	Database, authentication, and file storage
Anthropic	AI-based parsing of trip text/documents and the trip assistant chat
Google	Sign-in, and optional Gmail read-only import
Vercel	Application hosting
Sentry	Error monitoring, so we can find and fix bugs
PostHog	Product analytics — which screens and actions are used, tied only to an internal account ID
Postmark	Sending and receiving app-related email, including forwarded bookings
Foursquare	Place search and recommendations
Unsplash	Destination cover photos
Mapbox & Stadia Maps	Map display

Data retention and deletion

We keep your account and trip data while your account is active. Shared trip links expire automatically 30 days after creation. You can delete your account and its data yourself at any time from Preferences → Account → Delete account; deletion is immediate and irreversible. If you would rather we did it for you, contact us at the address below.

Your rights

You can access and correct your trip data at any time within the app, and export an individual trip — or all of your trips — to CSV from Preferences.

You can permanently delete your account from Preferences → Account → Delete account. This removes your trips, bookings, uploaded images and documents, forwarded emails, any Gmail connection, your shared trip links, and your sign-in itself. It is immediate and cannot be undone, and any active subscription is cancelled first. Anonymized records of AI usage cost are retained for accounting; they contain no personal information and are no longer linked to you.

If you are in a jurisdiction that grants additional statutory rights over your personal data, contact us and we will honor applicable requests.

Security

Data in transit is encrypted (HTTPS). Our database enforces row-level access controls so your trip data is only readable by your own account. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.

Children's privacy

VoyageOS is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

International data transfer

Our service providers operate primarily in the United States. By using VoyageOS, you understand your information will be processed there.

Changes to this policy

We may update this policy as the app evolves. We'll revise the "Last updated" date above, and for material changes we'll make a reasonable effort to notify you in the app or by email.

Contact us

Questions about this policy or your data: admin@voyageos.app