Privacy Policies

Last Updated: 07.05.2026

This Privacy Policy (“Policy”) describes how TravelVerse, including 1World Swiss SA and its affiliated entities (collectively, “TravelVerse”, “Company”, “we”, “us”, or “our”), collects, uses, processes, stores, and discloses personal data in connection with your access to and use of the TravelVerse platform, including its website, mobile and web applications, AI assistant known as “Vulpi,” dashboards, APIs, integrations, and all related services (the “Platform”).

By accessing or using the Platform, you acknowledge that your personal data will be processed as described in this Policy.

1. Scope and Application

This Policy applies to all individuals who interact with TravelVerse in any capacity. This includes users who browse the Platform without creating an account, registered users (tourists), creators who contribute content, advertisers and partners, and individuals who communicate with TravelVerse through support, marketing, or partnership channels.

Depending on how you interact with the Platform, the type and scope of data processed may vary. This Policy is intended to provide a comprehensive and transparent overview of those practices.

2. Categories of Personal Data We Collect

We collect personal data directly from you, automatically through your use of the Platform, and, in certain cases, from third parties.

Below is an overview of the main categories of data we collect and how they arise in practice when you interact with the Platform.

2.1 Information You Provide

When you create an account, interact with features, or communicate with us, you may provide personal data such as:

• your name, email address, and contact details;
• account credentials and authentication information;
• profile information, preferences, and interests;
• content you submit, including tours, Points of Interest (POIs), text, images, audio, video, and other materials;
• communications, feedback, or support requests.

This information is necessary to enable the core functionality of the Platform and to provide a personalized experience.

In some cases, this may include content that you have made publicly available elsewhere (for example, social media or open sources) and that you voluntarily integrate into the Platform. TravelVerse does not independently collect personal data from external sources without a lawful basis.

2.2 Automatically Collected Data

When you access or use the Platform, certain technical and behavioral data is collected automatically.

This may include:

• device and technical information, such as IP address, device type, operating system, browser type, and app version;
• usage data, including pages visited, features used, interactions with content, time spent, and navigation patterns;
• log and diagnostic data, such as timestamps, error reports, and system activity.

This data helps us understand how the Platform is used and allows us to improve performance, reliability, and user experience.

2.3 Location Data

TravelVerse may collect, access, process, and store precise and/or approximate location information when users enable location permissions and interact with location-based features.

This may include:

• GPS coordinates;
• device-derived location information;
• proximity signals;
• location verification events;
• visited points of interest;
• tour progression records;
• other location-related information associated with Platform activity.

TravelVerse does not use background location tracking unless explicitly disclosed and enabled in future versions of the Platform.

Location information may be retained to support tour functionality, rewards, proof-of-visit validation, user experience personalization, fraud prevention, analytics, destination management services, crowd management services, and other legitimate Platform purposes.

2.4 AI Interaction Data

When you interact with AI-powered features, including the Vulpi assistant, we may process data related to those interactions.

This includes:

• user inputs, prompts, and queries;
• generated responses and outputs;
• interaction patterns with AI features.

This data is used to:

• improve the performance and relevance of AI systems;
• personalize recommendations and experiences;
• monitor quality, safety, and reliability of outputs.

2.5 Data from Partners and Third Parties

In certain cases, we may receive personal data from third parties, including:

• travel and hospitality partners;
• event organizers or cultural institutions;
• analytics providers;
• authentication and identity providers.

Such data is processed only where necessary to provide Platform functionality or fulfill contractual relationships.

3. How We Use Personal Data

We use personal data to operate, maintain, and improve the Platform, as well as to provide users with a personalized and engaging experience.

In particular, personal data is used to:

• provide access to Platform features, tours, and content;
• create and manage user accounts;
• personalize recommendations, itineraries, and experiences;
• issue and validate rewards, including digital collectibles or NFTs;
• enable interactions with partners, offers, and services;
• communicate with users regarding accounts, updates, and support;
• analyze usage patterns and improve Platform performance;
• detect, prevent, and investigate fraud, abuse, or security issues;
• provide location-based services, route guidance, check-ins, proof-of-visit validation, crowd management functionality, destination analytics, and location-aware experiences;
• personalize content, offers, recommendations, advertising, sponsorship opportunities, and promotional experiences based on user activity, preferences, interests, location, and interactions with the Platform;
• create aggregated, anonymized, pseudonymized, or statistical insights regarding user activity, tourism patterns, destination usage, and crowd flows;
• create audience segments, behavioral insights, travel preference indicators, and other derived analytics to improve personalization, recommendations, advertising, sponsorships, tourism intelligence, and Platform services;
• comply with legal and regulatory obligations.

We do not process personal data for purposes that are incompatible with those described in this Policy unless required or permitted by law.

4. Legal Basis for Processing

Where required by applicable law, including the GDPR and Swiss data protection law, we rely on specific legal bases for processing personal data.

These include:

• performance of a contract, where processing is necessary to provide Platform services;
• legitimate interests, such as improving services, ensuring security, and operating our business;
• consent, where required, including for location tracking or marketing communications;
• legal obligations, where processing is necessary to comply with applicable laws.

Where we rely on legitimate interests, we take into account the impact on your rights and implement safeguards to ensure that such processing remains appropriate and proportionate.

5. AI and Automated Processing

TravelVerse uses artificial intelligence systems, including the Vulpi assistant, to enhance user experiences and improve Platform functionality.

AI may be used to:

• generate recommendations and suggested routes;
• personalize content and user journeys;
• analyze and improve content quality;
• detect patterns, trends, and user behavior.

TravelVerse may create profiles, audience segments, interest categories, behavioral models, travel preference indicators, location-derived insights, and other inferred data based on user interactions, location information, content engagement, platform activity, partner interactions, and use of Platform features. Such profiling may be used to improve recommendations, personalize experiences, support advertising and sponsorship opportunities, enhance analytics, and improve Platform functionality.

These processes may involve automated analysis of user data. However:

• AI outputs are not guaranteed to be accurate, complete, or up to date;
• users remain responsible for decisions made based on such outputs;
• TravelVerse does not use AI to make decisions that produce legal or similarly significant effects without appropriate safeguards.

Users are encouraged to exercise independent judgment and act prudently when relying on AI-generated outputs.

6. Sharing of Personal Data

We may share personal data with third parties where necessary to operate the Platform and deliver services.

This may include:

• affiliates and group companies;
• service providers (e.g. hosting, infrastructure, analytics, AI processing);
• partners and advertisers, where required to deliver offers or experiences;
• tourism boards, destination management organizations, municipalities, universities, event organizers, hospitality providers, and commercial partners for analytics, operational, tourism, destination management, crowd management, research, sponsorship, and experience-related purposes;
• advertising, marketing, audience measurement, personalization, and analytics partners;
• legal or regulatory authorities, where required by law;
• third parties in connection with business transactions such as mergers or acquisitions.

Where personal data is shared with service providers or partners, such parties are typically contractually bound to process it only for defined purposes and in accordance with applicable laws.

TravelVerse may share personal data, location-related information, and location-derived insights in identifiable, pseudonymized, aggregated, anonymized, or de-identified forms depending on the purpose of the processing, technical requirements, user permissions, contractual obligations, and applicable law.

TravelVerse does not sell personal information in exchange for monetary consideration.

Additional information regarding data sharing practices and applicable rights for certain jurisdictions, including California, is provided in Section 10 below.

Requests regarding these rights may be submitted to: [email protected]

6.1 Location Sharing

TravelVerse may share location information and location-derived insights with service providers, tourism organizations, municipalities, universities, destination management organizations, event organizers, commercial partners, advertisers, and analytics providers where necessary to provide Platform functionality, rewards, personalization, advertising, destination intelligence, crowd management, research, safety, operational, or business services.

Such sharing may occur using precise location information, approximate location information, pseudonymized records, aggregated statistics, anonymized datasets, audience segments, visitation analytics, mobility insights, or other derived information depending on the nature of the service.

7. International Data Transfers

TravelVerse operates globally. As a result, personal data may be transferred to and processed in countries outside your jurisdiction, including outside Switzerland or the European Economic Area.

Where required, we implement safeguards such as:

• Standard Contractual Clauses (SCCs);
• contractual and technical protections;
• data minimization and security measures.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy.

Retention periods may depend on:

• the nature, sensitivity, and purpose of the data;
• applicable legal and regulatory requirements;
• the need to resolve disputes or enforce agreements;
• security, fraud prevention, and operational considerations;
• whether your account remains active.

Location information, location verification events, tour progression records, rewards history, and location-derived analytics may be retained for as long as reasonably necessary to provide Platform functionality, improve services, satisfy contractual obligations, maintain historical records, prevent fraud, support analytics, comply with legal obligations, and operate the TravelVerse ecosystem.

When data is no longer required, it is securely deleted or anonymized where feasible.

9. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data.

These may include the right to:

• access your personal data;
• correct inaccurate data;
• request deletion;
• restrict or object to processing;
• request data portability;
• withdraw consent where applicable.

Users in certain jurisdictions may have additional rights under applicable data protection laws. Where required, TravelVerse will comply with such laws and provide mechanisms for exercising those rights.

Requests may be submitted to: [email protected]

We may require verification of identity before fulfilling such requests.

10. California Privacy Rights

If you are a California resident, you may have additional rights under applicable law.

These include:

• the right to know what personal information is collected and how it is used;
• the right to request deletion of personal information;
• the right to request correction of inaccurate information;
• the right to opt out of certain data sharing practices;
• the right not to be discriminated against for exercising these rights.

Under applicable California law, “personal information” includes categories of data described in this Policy, including identifiers, internet activity, geolocation data, and in certain cases “sensitive personal information” such as precise location data.

TravelVerse uses such data solely for purposes described in this Policy, including providing Platform functionality, personalization, and security. TravelVerse does not sell personal information in exchange for monetary consideration. However TravelVerse may engage in data sharing, advertising technologies, audience measurement, personalization, and analytics practices that may constitute “sharing” under certain privacy laws, including under California law.

California residents may also have the right to request information about categories of personal information collected, disclosed, or shared, as well as to request limitation of the use of sensitive personal information where applicable, including precise geolocation data, where such processing is not necessary to provide the requested services.

Requests regarding this matter may be submitted to: [email protected]

11. Cookies and Tracking Technologies

We use cookies and similar technologies to support the operation of the Platform and improve user experience.

These technologies may be used to:

• enable core functionality;
• analyze usage and performance;
• remember preferences;
• support marketing and personalization.

You may manage cookie preferences through your browser settings or consent tools available on the Platform.

For more details, please refer to our Cookie Policy, where available.

12. Data Security

We implement appropriate technical and organizational measures designed to protect personal data from unauthorized access, disclosure, alteration, or destruction.

These measures include:

• secure infrastructure and encryption where appropriate;
• access controls and authentication mechanisms;
• monitoring and incident response processes.

Despite these safeguards, no system can be guaranteed to be completely secure. Users should also take reasonable steps to protect their own information, including safeguarding account credentials and using secure environments.

13. Children's Privacy

The Platform is not intended for children under the age of 16, or such higher age as may be required under applicable local law.

TravelVerse does not knowingly collect, use, or process personal data from individuals under this age without appropriate authorization from a parent or legal guardian, where such authorization is required by applicable law.

If you are under the applicable minimum age, you must not create an account or use the Platform independently.

13.1 Data Collection and Safeguards

TravelVerse does not intentionally design the Platform to target or attract children, and does not knowingly engage in profiling, behavioral tracking, or location-based processing of children's data.

In particular:

• we do not knowingly enable account creation by children without appropriate consent mechanisms;
• we do not knowingly process precise location data of children beyond what is strictly necessary to ensure the safe operation and core functionality of the Platform;
• we do not knowingly use children's data for personalization, analytics, or marketing purposes.

Despite reasonable safeguards, it is not always possible to determine the age of users with certainty.

If TravelVerse becomes aware that personal data has been collected from a child in violation of applicable law:

• we will take prompt steps to delete such data or obtain appropriate consent where feasible;
• we may suspend or terminate the associated account;
• we may implement additional safeguards to prevent recurrence.

13.2 Parental and Guardian Rights

If a parent or legal guardian becomes aware that a child has provided personal data to the Platform without proper authorization, they may contact TravelVerse to request review, correction, or deletion of such data.

Upon receiving a verified request, TravelVerse will take reasonable steps to:

• investigate the situation;
• delete or restrict access to the relevant personal data;
• prevent further unauthorized processing where appropriate.

Requests relating to children's data may be submitted to: [email protected]

14. Third-Party Services

The Platform may integrate with or link to third-party services, such as maps, analytics tools, social networks, wallets, or partner systems.

These services operate independently and are governed by their own privacy policies. TravelVerse does not control or assume responsibility for their data practices.

15. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform functionality.

Updated versions will be published on the Platform. Continued use of the Platform after such updates constitutes acceptance of the revised Policy.

16. Contact

If you have any questions, concerns, or requests regarding this Policy, you may contact us at:

1World Swiss SA
Rue du Château 21, 2000 Neuchâtel, Switzerland
Email: [email protected]

We aim to respond to all requests within a reasonable timeframe and in accordance with applicable legal requirements.