Last updated: 16 July 2026 · Beta · Translation — the Portuguese version prevails.
⚠️ Working draft for the beta, to be reviewed by a lawyer before public launch. Not legal advice.
[FULL NAME], independent developer registered in Portugal, tax number (NIF) [—] — privacy@sunveo.app, [address or PO box].
Sunveo is built privacy-by-design: your traveller profile (preferences, group composition, weights learned from your trip feedback) is stored in your browser’s or phone’s local storage. The server receives this data only inside computation requests (search, recommendations) and does not keep it.
| Data | Purpose | Legal basis (art. 6 GDPR) |
|---|---|---|
| Email + password (hashed) | Account and authentication | Contract performance |
| Saved trips and structured feedback | “My trips” history, better recommendations | Contract performance |
| Dream destination (the destination only) | Deal alerts (DreamWatcher) | Consent — revocable in the app |
| Profile backup (optional): blob with profile, weights and quiz answers | Restore your profile on another device or after browser data clearing | Consent — disabling deletes the copy immediately |
| Technical logs (IP, errors) | Security and operations | Legitimate interest |
The web app uses browser storage (localStorage) solely to run the Service: session, local profile, preferences. No advertising cookies, no third-party trackers. You can clear this data in your browser settings (you will lose the local profile if the optional backup is not enabled).
No one, for commercial purposes. Strictly necessary technical processors: server and database hosting (EU), the AI model provider for the assistant (it receives the conversation content, never your full profile; ephemeral sessions). When you click an offer, the partner (Booking.com…) receives only the click with an affiliate identifier — never your profile; the partner’s privacy policy then applies.
Account and associated data: until account deletion (available in the app) and at most 30 days after. Optional backup: until you disable it or delete the account. Technical logs: 12 months at most.
Access, rectification, erasure, portability, restriction, objection and withdrawal of consent: write to privacy@sunveo.app. You may also lodge a complaint with the Portuguese supervisory authority, the CNPD, or with the authority of your EU country of residence.
The Service is intended for adults (18+). We do not knowingly collect data from minors.
Substantial changes will be announced in the app. In case of discrepancy between language versions, the Portuguese version prevails.