Voyager

Terms of Service

Last updated · 2026-04-25

1. Who we are

Voyager (the "app", "we", "our") is built by Peiyuan Cai and is available as a web app at cpymsu.github.io/WCC/Voyager.html and as an iOS app on the App Store. By using either, you agree to these Terms.

2. Account

You can use Voyager anonymously, sign in with Apple or Google, or create an email-and-password account. You're responsible for keeping your sign-in credentials safe. An anonymous session lives only on the device that created it; signing in lets your trips and history follow you across devices.

3. Acceptable use

• Don't upload content you don't have the right to share.
• Don't use Voyager to harass other travelers in a shared trip.
• Don't try to break the AI butler's safety guidelines or use it for non-travel purposes that would degrade the experience for others.
• Don't reverse-engineer or attempt to extract the underlying API keys.

We may suspend or terminate accounts that violate these rules without notice.

4. Subscriptions

Voyager Pro is a paid subscription unlocking unlimited AI butler conversations and other premium features. Subscriptions are sold only on the iOS app, billed by Apple, and managed in the user's iOS Settings → Apple ID → Subscriptions panel.

• Pricing. Monthly: $4.99 USD. Yearly: $39.99 USD. Local-currency equivalents shown in the App Store at purchase.
• Free trial. New subscribers get a 3-day free trial of either plan, redeemable once per Apple ID. If not cancelled before the trial ends, the subscription auto-renews at the listed price.
• Auto-renewal. Subscriptions renew automatically until cancelled. You can cancel at any time in iOS Settings; cancellation takes effect at the end of the current billing period.
• Refunds. All payments are processed by Apple under the App Store refund policy. Voyager cannot directly issue refunds — please contact Apple Support.
• Web users. The web app does not offer paid subscriptions. Web users get a monthly free allowance of butler conversations; once exceeded, butler features pause until the start of the next month.

5. Your content

Trip data you create — itineraries, photos uploaded to memories, chat history with the butler, polls and votes — belongs to you. By using Voyager you grant us a non-exclusive license to store and process that content solely so the app can function (sync across your devices, share with trip members you've invited, generate AI suggestions you've asked for). We don't sell it, mine it for ads, or use it to train external models.

6. Third-party services

Voyager relies on a small set of third-party services to operate. By using the app you also accept their respective terms:

• Firebase (Google) — authentication, Firestore data sync, Cloud Storage for photos, Cloud Functions for AI proxying and push notifications.
• DeepSeek — the underlying LLM for the AI butler. Butler messages are proxied through our Cloud Function; we do not pass user identifying information to DeepSeek beyond the message content needed to answer the prompt.
• Unsplash — fallback hero photos for trips without uploaded covers. Returned under the Unsplash License.
• RevenueCat (iOS only) — subscription state and receipt validation. Used only after a user starts a paid subscription.
• Apple In-App Purchase (iOS only) — payment processing for subscriptions.

7. Disclaimers

Voyager is provided "as is". AI suggestions are generated by language models and may be inaccurate, outdated, or unsuitable for your trip — always double-check flight times, hours of operation, prices, and visa requirements with the official source before relying on them. We don't book travel for you and aren't liable for losses arising from following AI suggestions.

8. Termination

You may delete your account at any time from the Settings → Account menu. Account deletion permanently removes your user record, your trips, and any photos you've uploaded. We may also terminate accounts that violate these Terms.

9. Changes

We may update these Terms occasionally. Material changes will be announced in the app. Continued use after a change is published constitutes acceptance of the updated Terms.

10. Governing law & contact

These Terms are governed by applicable consumer-protection law in your country of residence and, where that doesn't reach, by the laws of the United States. Questions or notices: cpymsu@duck.com.

Privacy Policy

Last updated · 2026-04-25

1. Summary (TL;DR)

We collect the minimum needed to run the app: your account info, the trip content you create, and a usage counter for the AI butler. We don't sell your data, don't run ads, don't use your trip content to train models. You can delete your account from the Settings menu and we'll wipe your data.

2. What we collect

• Account profile. When you sign in with Apple, Google, or email, we receive your basic profile (display name, email, avatar) from the auth provider and store it on your users/{uid} Firestore record.
• Trip content. Anything you create in the app — trips, days, activities, transactions, polls, packing lists, photos, butler chat history. Stored on Firestore + Firebase Storage under your uid.
• Push tokens. When you grant notification permission on iOS, we store your device's Expo push token to send notifications about trip events you've opted into.
• Subscription state. iOS only — we record whether you're a Pro subscriber + when the entitlement expires (no card numbers, no payment details — those stay with Apple).
• Usage counters. We count how many butler messages you send per month so we can apply the free / Pro limits. No content of those messages is logged.

3. What we don't collect

• We don't track your location in the background.
• We don't see your contacts or calendar.
• We don't run third-party analytics (no Google Analytics, Mixpanel, Amplitude, etc.).
• We don't run ad networks or send your data to advertisers.

4. How we use your information

• To make the app work — sync your trips across devices, deliver notifications, answer butler prompts.
• To enforce subscription limits and prevent abuse of paid features.
• To respond when you contact support.

5. Who we share with

Only the third-party services listed in our Terms section 6 (Firebase, DeepSeek, Unsplash, RevenueCat, Apple). We do not sell or rent your data.

For butler conversations specifically: your message text is sent to DeepSeek's API to generate a response, then DeepSeek's response is returned to you. We don't append identifying metadata. DeepSeek may retain the request per its own policy.

6. Trip members

If you invite other people to a trip, those people see the trip's data (itinerary, polls, transactions, member list including your display name and avatar). This is intentional — it's a group planning app — but it's worth knowing that anything you write inside a shared trip is visible to other members of that trip. Members joined by invite link can be removed by the trip owner at any time.

7. Children

Voyager is not directed at children under 13. We don't knowingly collect data from children under 13. If you believe a child has signed up, contact us and we'll delete the account.

8. Your rights

• Access & export. All your trip data is visible inside the app. For a full data export, email cpymsu@duck.com.
• Correction. You can edit your display name, avatar, and trip content anytime in the app.
• Deletion. Settings → Account → Delete account. Account deletion permanently removes your users/{uid} record, your trips, your photos, and your butler usage counters. This action cannot be undone.
• EU / UK / California residents. GDPR and CCPA give you additional rights to portability and objection — email us and we'll honor them.

9. Data retention

We retain your account and trip data for as long as your account is active. Deleted accounts are wiped within 30 days; backups are purged on a rolling basis within 90 days. Subscription receipts are retained for 7 years to satisfy Apple's audit requirements.

10. Security

Data is transmitted over HTTPS and stored in Firebase's encrypted-at-rest infrastructure. Firestore Security Rules restrict reads and writes per-user — your trip data is not readable by other users unless you've explicitly invited them to that trip. We can't guarantee absolute security, but we work to keep your data as private as the architecture allows.

11. Changes

If this Privacy Policy changes materially, we'll announce the change in the app. The "Last updated" date at the top of this section reflects the most recent revision.

12. Contact

Privacy questions, deletion requests, or anything else: cpymsu@duck.com.