Baha Buddy
Privacy Policy
How Baha Buddy handles account, trip, chat, booking, and device data.
Effective date: 2026-05-18
Information we collect
We collect account information, travel preferences, chat messages, trip details, saved items, booking records, support requests, and basic device or usage data needed to operate and improve Baha Buddy.
How we use information
We use traveler data to provide AI trip planning, show relevant stays, flights, restaurants, activities, and tours, manage saved trips and bookings, process support requests, and improve product quality.
Bookings and payments
Payment processing is handled by Stripe. Hotel and flight availability and booking services may be provided through LiteAPI and other travel providers. We share only the information required to search, prebook, book, support, or reconcile a transaction.
AI and third-party services
Baha Buddy uses third-party services including Supabase, Anthropic, OpenAI, Google Maps for maps, Supabase cached place inventory, LiteAPI, Stripe, analytics providers, and support tooling. Each provider handles data under its own terms and policies.
Your choices
You may request access, correction, export, or deletion of your data by contacting support@bahabuddy.com . Some booking, payment, tax, fraud-prevention, and support records may be retained where legally or operationally required.
Contact
For privacy questions, contact Novio Group at support@bahabuddy.com .
Mobile app data and your controls
Baha Buddy is operated by Novio Group. This notice covers our Android and iOS apps, including guest use. Updated October 18, 2026.
We process account and installation identifiers, names and email addresses, travel preferences, searches, conversations with Buddy, saved plans, inspiration boards, and content you choose to share. Optional traveler profiles can include phone numbers, dates of birth, nationality and travel document details. Payment and booking features process billing details, payment references and reservation history through our payment and travel providers. Baha Buddy does not store your full payment-card number.
Voice is optional: microphone recordings are sent to Deepgram for transcription, and text is sent to OpenAI for generated speech. Chat messages and relevant trip context are processed by Anthropic to provide Buddy’s responses. Supabase provides account, database and file services. You can use text instead of granting microphone access.
Location permission is optional and supports nearby places, maps and on-screen tour guidance. Google Maps also processes technical information such as IP addresses, SDK identifiers, map interactions and crash data. Firebase supports notifications and installation identifiers. Document scanning uses on-device ML Kit text recognition; scanned images are not intentionally uploaded by that scanning flow. Values you choose to save are sent to your traveler profile. ML Kit processes technical diagnostics.
These services use data for app functionality, account management, personalization, security and diagnostics. Product analytics may use Mixpanel and PostHog where enabled. Payment and travel data may be processed by Stripe, LiteAPI and the supplier needed to complete your request. Shared trip content is accessible to the people you invite or give the sharing link to. Do not put sensitive information in shared plans.
App service requests use encrypted connections. You can control microphone, location, camera and notification permissions in your device settings. Withholding a permission disables its associated feature, rather than preventing general browsing and planning.
Deletion and retention
You can request deletion without reinstalling the app by emailing support@bahabuddy.com. See Delete your account for the in-app, web and email paths. You may also request access, correction, export or deletion of particular data while keeping your account.
Account deletion removes your profile, conversations, saved travelers and documents, and trips without bookings. Booking, payment and deletion-audit records may remain for transaction support, disputes, security and legal obligations, and may contain personal information. Those records are kept until the applicable requirements have been resolved. Contact us for a review of retained data and requests involving service-provider records. Deleting an account does not cancel a reservation or trigger a refund; contact support about existing travel before deleting your account.