This is a translation provided for convenience. In case of any discrepancy, the Ukrainian version prevails.
Privacy Policy
Version of 30 September 2026
1. Who processes the data
1.1. The personal data controller is individual entrepreneur Nikita Serhiiovych Karetnikov, RNOKPP 3734801952, 3b Hrushevskoho St., Brovary, Kyiv Oblast, Ukraine, nikita@valizka.com.
1.2. Data is processed in accordance with the Law of Ukraine "On Personal Data Protection" and, for users in the EU, the General Data Protection Regulation (GDPR).
2. What data we collect
| Category | Examples | Purpose | Legal basis |
|---|---|---|---|
| Account | Email for link-based sign-in | Sign-in, saving trips | Performance of contract |
| Trip data | Cities, dates, budget, number of travellers, interests | Building the itinerary and searching offers | Performance of contract |
| Travel profile | Settings derived from your forms and choices | Personalising future plans | Legitimate interest |
| Booking requests | Name, email, phone, selected tickets and accommodation | Processing of the request by staff | Performance of contract |
| Payment | Amount, status, last 4 digits of the card | Payment records, refunds | Performance of contract, law |
| Technical data | IP address, device type, error logs | Security and stability | Legitimate interest |
2.1. We do not collect full payment card details — they are processed by WayForPay.
3. Sensitive data
3.1. If you indicate reduced mobility, an event such as a doctor's appointment, or travel with children, this information may relate to health or to minors.
3.2. We process it only to build your itinerary and only with your explicit consent, which you give via a separate checkbox before entering it. You can withdraw consent by removing this data from the trip or by deleting your account.
3.3. Such data is not used to train models and is not shared with transport or accommodation suppliers, unless you include it in a booking request yourself.
4. Artificial intelligence
4.1. To build an itinerary, your trip data is sent to several AI providers: Google (Gemini), Anthropic (Claude) and DeepSeek. Their answers are merged into one plan.
4.2. DeepSeek processes data on servers in China. For users in the EU, DeepSeek is not used: the itinerary is built by the other providers.
4.3. We store "request — agreed plan" pairs to train Valizka's own model. These records do not contain email, name, phone or the sensitive data described in section 3. You can opt out in your account settings or by email.
5. Who we share data with
| Recipient | What they receive | Purpose |
|---|---|---|
| Google, Anthropic, DeepSeek | Trip parameters | Itinerary generation |
| Kiwi.com, FlixBus, SerpAPI (Google Flights, Google Hotels), Airbnb | Cities, dates, number of travellers | Searching tickets and accommodation |
| Geoapify, OSRM, Open Charge Map | Coordinates and route | Maps, walking segments, charging stations |
| Resend | Email, message text | Sending emails and sign-in links |
| WayForPay | Payment data | Accepting payments |
| Railway | All Service data | Server and database hosting |
5.1. We do not sell personal data and do not share it for advertising.
5.2. Some recipients are located outside Ukraine and the EU (including the USA and China). Transfers from the EU rely on standard contractual clauses or your consent.
6. Retention
6.1. Account and trip data are kept for as long as the account exists. Anonymous profiles without sign-in are deleted after 12 months of inactivity.
6.2. Booking requests and payment data are kept for as long as tax law requires (up to 3 years).
7. Your rights
7.1. You have the right to obtain a copy of your data, correct it, delete your account, restrict or object to processing, withdraw consent and receive your data in a machine-readable format.
7.2. Send requests to nikita@valizka.com; we respond within 30 days.
7.3. You may lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or, in the EU, with the data protection authority of your country.
8. Cookies
8.1. We use only strictly necessary cookies for sign-in and operation of the Service. There are no analytics or advertising cookies.
9. Children
9.1. The Service is not intended for persons under 16. Data about children travelling with you is entered by you as the adult responsible for the trip.
10. Changes
10.1. We will notify you by email of material changes to this policy at least 14 days in advance. Translations are provided for convenience; in case of discrepancies, the Ukrainian version prevails.