Privacy Policy
How Aventra Travel handles the data you trust us with.
Last updated: April 18, 2026 · Effective: April 18, 2026
1. Who we are
Aventra Travel (“Aventra”, “we”, “our”, “us”) is operated by Poker Games Interactive. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the choices you have.
Questions? support@aventra.travel
2. Scope
This policy applies to the Aventra Travel mobile app on iOS, the aventra.travel website (including shared journey viewers and the Postcard Studio), and our backend API at api.aventra.travel.
3. Information we collect
We collect only what we need to run the features you use. The categories below match what we declare on the App Store privacy label.
Account information
Name and email address, collected through AWS Cognito when you sign up. Used to authenticate you, address you inside the app, and send transactional messages like verification codes and password resets.
Precise location
GPS coordinates, speed, heading, altitude, and timestamps, collected only while a journey is active, live sharing is on, or SOS monitoring is running. Used to plot your route, attach coordinates to photos and pins, stream your live view, and provide map links inside SOS notifications. Never used for advertising.
User ID
The internal AWS Cognito identifier that ties your journeys, trips, profile picture, subscription, and SOS settings together across your devices.
Photos and videos
Uploaded only when you save a pin, change your profile picture, or export a postcard. Stored in your private S3 workspace and served through CloudFront. Never indexed for advertising.
Other user content
Journey names, pin captions, comments and reactions on shared journeys, AI-story prompts, postcard text, SOS messages, and the name, phone, and email of the emergency contacts you enter for SOS. Stored only so we can render journeys back to you, power live sharing, and deliver SOS notifications.
Purchase history
Apple StoreKit transaction identifiers and receipts, used to verify your subscription entitlement (Free, Explorer, Voyager) across devices. We never see your payment details — those stay with Apple.
4. What we don’t collect
Some categories that are commonly collected by other apps — and that Aventra deliberately avoids:
- Health or fitness data (we do not integrate with HealthKit).
- Your device address book or contacts (emergency contacts are typed in manually).
- Financial information or payment card numbers (Apple handles payment).
- Browsing or search history inside or outside the app.
- Device identifiers used for advertising (IDFA, etc.).
- Sensitive personal information (religion, race, orientation, etc.).
- Crash data, analytics, or usage telemetry — we do not ship a third-party analytics SDK.
5. How we use your information
- App functionality: authenticate you, record and render journeys, sync across your devices, handle uploads and live sharing.
- Account management: associate your profile and subscription with your account.
- Safety: deliver SOS alerts to live viewers and to the emergency contacts you configure.
- Support: respond to questions you send to support@aventra.travel.
We do not use your information for:
- First-party or third-party advertising.
- Marketing emails (unless you opt in separately, which we don’t offer today).
- Analytics platforms or data brokers.
- Cross-app or cross-site tracking.
- Training machine-learning models (see section 7 regarding OpenAI).
6. How we store and secure your data
Your data is processed and stored on U.S.-based cloud infrastructure operated by Amazon Web Services.
- All traffic between your device and our API is encrypted in transit with TLS 1.2 or higher.
- Data at rest is encrypted using industry-standard, provider-managed keys.
- Access is controlled with industry-standard token-based authentication and least-privilege access policies.
- We apply rate limiting, input validation, and abuse controls across our public API.
- We monitor for unusual activity and patch our infrastructure on an ongoing basis.
7. Third parties and service providers
Amazon Web Services
Our cloud infrastructure provider. AWS hosts our application, databases, media storage, and transactional email delivery, and acts only as our processor under its standard data processing terms.
OpenAI
When you explicitly request an AI Story, we send that trip’s metadata (journey name, pin locations, dates, captions) to OpenAI so it can compose a narrative. Per OpenAI’s API data usage policy, API inputs are not used to train their models.
Apple
Processes all App Store purchases through StoreKit, and provides the map tiles used in our web-based journey viewer. Apple’s privacy policy applies to those interactions.
We do not share your data with advertising networks, attribution SDKs, or data brokers.
8. Live sharing
When you generate a live share link, anyone who has the link can see that journey’s route, pins, and photos as they update. You can revoke the link at any time from the app. Viewers do not need an Aventra account; we do not collect identifying information about them beyond what’s needed to deliver the live updates.
9. SOS alerts
When SOS is triggered, Aventra:
- Shows the alert to anyone currently viewing your live journey.
- Sends an email, via Amazon SES, to the emergency contacts you configured. The email includes the alert type, timestamp, your last known coordinates, and Apple and Google Maps links.
Aventra’s SOS is a best-effort convenience feature that depends on your device having connectivity. It is not a substitute for calling 911, your local emergency number, mountain rescue, or a dedicated satellite messenger.
10. Retention
- Active account: we retain your data while your account exists.
- Account deletion: journeys, media, profile info, and subscription records are deleted within 30 days of your request.
- SOS idempotency records: automatically expire after 10 minutes.
- Shared journey links: remain live while the share is active; revoke them any time.
- Backups: encrypted database backups are retained for a limited recovery window in accordance with industry best practice.
11. Your rights
Subject to local law (GDPR, UK GDPR, CCPA/CPRA, and similar), you may:
- Access the data we hold about you.
- Correct inaccurate data.
- Export your journey data in a portable format.
- Request deletion of your account and data.
- Object to or restrict specific processing activities.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your local supervisory authority.
To exercise any of these rights, email support@aventra.travel from the address on your account. We respond within 30 days.
12. Children
Aventra Travel is intended for users 13 years or older (16 where required by local law). We do not knowingly collect personal information from children below those ages. If you believe a child has created an account, please contact us so we can remove the data.
13. International transfers
Our servers are located in the United States. If you use Aventra from outside the United States, your data will be transferred to and processed in the United States. Where required, we rely on standard contractual clauses or equivalent mechanisms to protect the transfer.
14. Website cookies and storage
aventra.travel uses only essential cookies and local storage required for authentication, session handling, and rendering shared journey viewers. We do not set analytics or advertising cookies, and we do not integrate with marketing pixels.
15. Changes to this policy
We update this policy when our practices change. Material changes are announced in-app and by email at least 30 days before they take effect. The “Last updated” date at the top of this page reflects the most recent revision.
16. Contact us
Questions, requests, or complaints about this Privacy Policy?
Poker Games Interactive · Las Vegas, Nevada, USA