Skip to content
Layag

Privacy Policy

Last updated: October 16, 2026

This describes what Layag actually collects today, across this website and the Layag mobile app. It is not legal advice — have it reviewed by counsel, and fill in the bracketed company details, before relying on it at scale.

This Privacy Policy explains how Layag ("Layag," "we," "us," or "our") collects, uses, shares, and protects information when you use the Layag mobile app (Android and iOS) and the layagapp.com website (together, the "Service"). It's written to reflect what the product actually does today, not a generic template — see each section below for specifics. Layag is a travel planning, monitoring, and creator-marketplace app; it is not a dating or social-matching service. This policy is provided for transparency and is not a substitute for legal advice.

1. Information We Collect

Account information. When you create a Layag account (email and password, Google Sign-In, or Sign in with Apple), we collect your email address, display name, and profile photo (if you set one). Signing in with Google or Apple shares only the name/email/photo those providers make available and that you authorize.

Travel profile. Your passport country, home currency, and travel preferences (budget vs. luxury, pace, offbeat vs. popular, interests) — used to personalize itineraries and visa lookups.

Trips and itineraries. Destinations, dates, traveler count, budget, and the day-by-day itinerary content Layag generates or you edit, including any trip cover photos you upload.

AI chat content. The messages you send while planning a trip with Layag's AI (e.g. "plan a 5-day trip to Lisbon on a mid-range budget") and the itinerary responses generated from them.

Location. With your permission, Layag reads your device's location to support trip planning and nearby-places discovery. You can deny or revoke this at any time in your device settings; core planning features still work with a manually entered destination.

Live location sharing (Travel SOS). Only when you start it, Layag shares your device's location (coordinates, accuracy, and your first name) through a private link you send to people you choose. While a share is running, the location keeps updating, including in the background, until you stop it or the time you picked (at most 24 hours) runs out. Anyone with the link can see your location until then. Ended shares are deleted automatically.

Photos. Profile and trip cover photos you choose to upload from your camera or photo library.

Creator & marketplace data. If you publish travel guides, we collect the guide content (destination, description, photos, pricing) and your creator profile (bio, social links). If you purchase a guide, we record the purchase (see "Payments & Marketplace Purchases" below). If you invite or accept a collaborator on a trip or guide, we record that relationship and its role.

Device & push token. A device push-notification token (Firebase Cloud Messaging), used to deliver trip alerts. Cleared automatically when you sign out or delete your account.

Usage & diagnostic data. App events (e.g. screen views, feature usage) via Firebase Analytics, and crash/error reports via Firebase Crashlytics — collected only from production app builds, never from development/debug builds.

Website waitlist data. If you join the waitlist on this website, we store the email address you give us, whether you signed up as a traveler or creator, and any referral code — plus, if you consent via the cookie banner, basic analytics and campaign-attribution data (see "Analytics and Crash Reporting" below).

Founding creator applications. If you apply to be a founding creator on this website, we store what you enter in the form (name, email, channel and content links, destinations, time spent there, languages and any note) with the date you applied, to review your application and reply to you. Applications are sent to our Cloud Functions server, stored in Firebase and emailed to our team's own inbox; they are not shared with anyone else.

2. How We Use Your Information

  • To create and secure your account, and authenticate you via email, Google, or Apple.
  • To generate AI-powered itineraries, flight/stay estimates, and visa guidance tailored to your trip.
  • To operate core features: trip planning, alerts, the Creator Marketplace, and collaborator invites.
  • To detect changes relevant to an active trip (e.g. a visa-status change) and notify you.
  • To personalize discovery and nearby-places suggestions using your location and interests.
  • To maintain, secure, debug, and improve the Service, including via crash reports and aggregated usage analytics.
  • To communicate with you about your account, trips, purchases, or (if you've opted in) product updates.
  • To detect and prevent fraud, abuse, and violations of our Terms of Service.
  • To comply with legal obligations.

4. Third-Party Services

We don't sell your personal information. We share data with the following service providers, only as needed to operate the Service:

  • Google Firebase / Google Cloud — authentication, the app's database (Firestore), file storage (photos), serverless backend functions, push notifications (Cloud Messaging), analytics, and crash reporting. Our primary infrastructure provider; US-based.
  • Google Gemini (Vertex AI) — receives your trip-planning chat messages and trip details (destination, dates, budget, preferences) to generate itinerary content, and receives search parameters to generate flight/stay estimates and nearby-place suggestions. Processed server-side; Google does not receive your Layag account credentials.
  • Google Sign-In and Sign in with Apple — used only to authenticate you, per each provider's own privacy practices.
  • Google Maps, Places & Geocoding — power maps, location search, and nearby-places discovery.
  • Unsplash — supplies destination/cover photography shown in the app; this does not involve your personal data.
  • RapidAPI-hosted flight and stay search providers — search parameters you enter (origin/destination, dates, traveler count) are sent to third-party flight- and stay-search data providers to return estimated options. These providers do not receive your name, email, or account identity.
  • RevenueCat — confirms Layag Pro subscriptions and guide purchases made through the App Store or Google Play. Receives your Layag account ID and store purchase records, not your payment details.
  • Our bank, JazzCash, Easypaisa and Payoneer (creators only) — receive a creator's name and payout details when we send them a payout.
  • Klaviyo (website only) — sends waitlist confirmation and launch-related emails if you sign up on layagapp.com.
  • Google reCAPTCHA / Firebase App Check (website only) — screens the waitlist form for automated/bot signups.

We do not use any advertising or ad-network SDKs, and we do not share your data with data brokers.

5. Analytics and Crash Reporting

In the app: Firebase Analytics (feature/screen usage) and Firebase Crashlytics (crash and error diagnostics) run only in production app builds — never in development or debug builds — so nothing is collected while the app is being built or tested.

On the website: a cookie banner asks for your consent before any non-essential cookie or analytics identifier is set. If you accept, we use Google Analytics / Firebase Analytics to see how many people visit the site and where they came from, plus attribution data (campaign/link/ad click) stored in your browser's local storage. You can change this choice anytime via "Cookie preferences" in the footer. Declining sends no analytics data at all.

6. Payments and Marketplace Purchases

Layag Pro subscriptions and guide purchases are paid through the Apple App Store or Google Play. Apple and Google handle your payment details under their own privacy policies; Layag never sees your card number. We use RevenueCat to confirm purchases: it receives your Layag account ID and your store purchase records (product, date, store transaction ID), and we store the resulting purchase and subscription status in your account.

Creator payouts. Creators who want to be paid give us their payout details: the account holder's name, plus a Pakistani bank account number (IBAN), a JazzCash or Easypaisa mobile number, or (once payouts outside Pakistan are available) a Payoneer email address. We store these in the creator's account, visible only to them and to the Layag team members who send payouts, and share them only with the bank, wallet provider or Payoneer that delivers the payment. We also keep a record of each creator's sales, balance, and payouts.

7. Push Notifications

We use push notifications (and on-device local notifications) to alert you about trip-relevant events — countdowns to departure, a change in visa requirements for an active trip, today's itinerary, and similar reminders. You can disable push notifications at any time in your device's notification settings; doing so does not affect in-app access to the same information via the Alerts screen.

8. Device Permissions

  • Location: to support trip planning and nearby-places discovery, and to share your live location when you choose to from Travel SOS (it keeps updating in the background only while a share is running). Optional — you can plan trips with a typed destination instead.
  • Camera / photo library: only when you choose to upload a profile photo or trip/guide cover photo.
  • Notifications: to deliver trip alerts and reminders.

9. AI Processing

Layag's core planning features (itinerary generation, flight/stay estimates, discovery suggestions) work by sending the trip details and chat messages you provide to Google's Gemini models (via Vertex AI) to generate a response, which is then stored as part of your trip. We do not use your trip content to train third-party foundation models, and Google's enterprise Vertex AI terms govern how that processing occurs on their side. AI-generated content (itineraries, flight and stay estimates, and visa guidance) may be inaccurate, outdated, or incomplete — see the Terms of Service for the full disclaimer.

10. User-Generated Content

Trip itineraries you create, guides you publish as a creator, photos you upload, and any collaborator activity are stored so the relevant features work (e.g. a published guide is visible to buyers; a shared trip is visible to invited collaborators). Published guides and public creator profiles are visible to other users of the Service; private trips are visible only to you and anyone you explicitly invite as a collaborator.

11. Children's Privacy

Layag is not directed to, and is not intended for use by, children under 13 (or under 16 in the EEA/UK, where that higher threshold applies). We do not knowingly collect personal information from children below the applicable age. If you believe a child has provided us with personal information, contact us at hello@layagapp.com and we will delete it.

12. Data Retention

We keep your account and trip data for as long as your account is active, so the Service keeps working as expected. If you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain limited records (e.g. transaction history, if real payments are later introduced) to comply with legal, tax, or fraud-prevention obligations. Website waitlist entries are kept until launch (to grant access) or until you ask us to delete them, whichever comes first. Founding creator applications are kept until we've reviewed them and replied, and for up to 12 months after that, or until you ask us to delete them.

13. Data Security

We rely on Firebase's security infrastructure, including encryption in transit (TLS) and at rest, Firestore/Storage security rules that restrict access to your own data (e.g. wallet, purchase, and payout records can only ever be written by our server-side functions, never directly by any client), and authenticated access to all API calls. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.

14. Your Rights and Choices

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can update most profile information directly in the app. For anything else — including a full data export or deletion request — email us at hello@layagapp.com. If you're in the EEA/UK, you also have the right to lodge a complaint with your local data protection authority.

15. Account Deletion

You can request account deletion from Settings in the app, or by emailing hello@layagapp.com. Deleting your account signs you out of all devices, removes your push token, and deletes your profile, trips, and other personal data, other than limited records we're required to keep as described under "Data Retention." Published guides may be anonymized rather than deleted outright if other users have purchased them, so those purchasers retain access to content they paid for.

16. International Users

Layag's infrastructure providers (primarily Google/Firebase) process and store data in the United States and other countries where they operate. If you're located outside the US, your information will be transferred to and processed in countries that may have different data protection laws than your own; we rely on our providers' standard contractual safeguards for transfers out of the EEA/UK where applicable.

17. Changes to This Policy

We may update this Privacy Policy as the Service evolves. We'll update the "Last updated" date above, and for material changes we'll provide additional notice (e.g. an in-app notice or email) before the change takes effect.

18. Contact Us

Questions about this Privacy Policy or your data? Email hello@layagapp.com. [Company/entity name and mailing address to be added here before launch.]