RAAHII

Privacy Policy

Last updated: 29 October 2026

October 24, 2026: The in-app copy of this policy in app versions before 1.0.10 may say "explicitly invite". This web page is the current policy.

Our promise

RAAHII is operated by Alyara Apps Studio LLC ("we," "us"), a Florida company. RAAHII is designed with privacy as the default. We do not sell your data. We use one advertising-measurement service (Meta) for a single purpose: to see how well our own ads bring new travelers to RAAHII. RAAHII may ask for your permission through Apple's App Tracking Transparency prompt first. If you do not allow it, advertiser tracking stays off. We do not show you personalized third-party ads. See "Advertising measurement" below.

Age requirement

RAAHII is not directed at children or at anyone under 18. You must be at least 18 years old to use RAAHII.

What we store

Your trips, bucket list, friends list, and profile preferences live on your device and are mirrored to your iCloud Key-Value store. When you sign in with Apple, the essentials — your profile, trips, visited countries, goals, bucket list, expenses, and friend connections — are also backed up to your private RAAHII account so they can restore on a new phone and power shared trips with friends. Only you, and people you invite to a trip or share the trip link with, can read them.

Photos & Memory Timeline

Memory Timeline runs on your device. We read photo metadata (date, location) from the photos you select and store photo identifiers locally. If you sign in, a compressed copy of each day's chosen hero photo is uploaded to your account, so your timeline can be restored on a new device. You and the people you accept as RAAHII friends can see these hero photos; nobody else can. The rest of the day's photos are never uploaded. To turn a photo's coordinates into a place name we use Apple's geocoder, which is handled by Apple, not RAAHII. When you delete your account, RAAHII removes the hero photos you uploaded. If a network error stops this, a photo can stay in storage; email privacy@raahii.app and we will delete it.

Share links

You can share a trip with a link. Anyone who has the link and signs in to RAAHII can view and join that trip. They can then see its plans, members, and shared content.

You choose who gets the link. Send it only to people you trust. A person who gets the link from someone else can use it too.

You can remove a member from your trip or delete the trip at any time. A removed person cannot join the same trip again.

Trips, accounts, and other records have technical ID numbers. People you share a trip or a link with may see the ID of that trip or of its members. The ID does not show your name, email, or location.

Private by design

The core of RAAHII works on your device — destination guides, climate info, posters, itineraries, packing lists, and the on-device AI all ship inside the app and run locally, so it's useful offline. Some features add live data over the network (see "Services we use"). Smart Import reads bookings on your device unless you allow cloud reading (see "Smart Import"). Your account backup is private: row-level security means only you, and people you invite to a trip or share the trip link with, can access it. The one third-party advertising component in RAAHII is Meta's measurement SDK, described under "Advertising measurement" below.

Services we use

RAAHII uses these services: Supabase (hosts your private account backup and shared trips); RevenueCat (manages your subscription — see Subscriptions); Open-Meteo (we send a place name or coordinates to show current weather); Frankfurter (currency rates — no personal data); Nager.Date (we send a country to list its public holidays); Postmark (only if you use email import — see "Email import"); and Anthropic (only if you allow cloud reading — see "Smart Import"; a booking you send can contain your name). Each service gets only what its feature needs. We also use Meta to measure our own ads — see "Advertising measurement" below.

Advertising measurement

We run ads for RAAHII on Meta (Facebook and Instagram) to reach new travelers. To learn whether those ads actually work, RAAHII includes Meta's app SDK. In RAAHII 1.0.9 and earlier, the Meta SDK starts when the app opens. It sends app events and your advertising ID only after you allow tracking. From RAAHII 1.0.10, the Meta SDK starts only after you allow tracking. When the Meta SDK starts, it may contact Meta's servers to load its settings. With your permission, app events — such as opening RAAHII — let Meta attribute an install to an ad we paid for. We use this only to measure the results of our own ads. We do not use it to show you personalized third-party ads, and we do not sell this data. After you start using RAAHII, the app may ask for your permission through Apple's App Tracking Transparency prompt. If you allow tracking, Meta can use a device identifier, your app activity, and purchase events to measure which of our ads bring people to RAAHII across other companies' apps and websites. If you do not allow tracking, RAAHII 1.0.9 and earlier does not send app events or your advertising ID to Meta, and RAAHII 1.0.10 does not start the Meta SDK. You can change your choice at any time in iPhone Settings. We do not sell this data.

Smart Import

Smart Import reads a booking you paste, scan, or upload and turns it into a trip. It runs on your device. Cloud reading is a feature we may turn on in a later update. If you allow it, the booking text is sent through our server to Anthropic, whose Claude AI reads it and returns the trip details. A booking can contain your name, your itinerary, and confirmation numbers. This also applies to the text of a forwarded email that you open to review. We ask before the first upload, and you can turn cloud reading off anytime in Settings. With it off, bookings are read only on your device. Before we turn cloud reading on, this section will say what RAAHII keeps on its server.

Email import

If you turn on email import and forward a booking email to your import address, that email is delivered to Postmark, our inbound-email provider, which passes it to RAAHII. You review it, then create the trip. When you import or dismiss the email in the app, the app may remove its text from our server sooner. In any case, we delete each forwarded email, with its text, sending address, and subject, about 30 days after it arrives. A daily job does this, also for emails you never review. Settings → Reset all data and Settings → Delete account remove it sooner, or you can write to privacy@raahii.app. A forwarded booking email can contain your name, your itinerary, confirmation numbers, and the sending address. RAAHII reads it on your device, or with cloud reading if you allowed that (see "Smart Import"). If you never forward an email, no booking email is ever sent to Postmark.

Flights & hotels

"Find flights" and "Browse hotels" are powered by Travelpayouts (Aviasales). When you search flights, your home city and the destination are sent to our own server, which queries live prices; "Browse hotels" opens a hotel search for the destination. These links carry an affiliate code, so RAAHII may earn a commission if you book — the code does not identify you and it costs you nothing extra. RAAHII is not the seller: bookings happen on the travel provider's own website, under their terms.

Subscriptions

Purchases are processed by Apple — we never see your payment method. We use RevenueCat to manage subscription status and Pro entitlements; to do that, RevenueCat receives your RAAHII account ID, your account email, your purchase history, and basic device/OS info so your Pro access stays in sync across your devices. See RevenueCat's privacy policy for details.

Identifiers and how long we keep them

An identifier is a value that can single out an account, an app install, or a device. RAAHII uses these identifiers:

RevenueCat, Meta, Postmark, and Anthropic keep the data they get under their own privacy policies.

Security

We use reasonable technical and organizational safeguards to protect your data. These include access rules in our database and encryption in transit.

No app or internet service is perfectly secure. We cannot promise that your data will never be accessed without permission.

If a security incident affects your personal data, we will investigate it and fix it. We will tell affected users and the authorities when, and in the way, the law requires. You can reach us at privacy@raahii.app.

Your rights

Delete your content anytime from Settings → Reset all data (this device, iCloud, and your cloud backup), or erase everything including the account itself with Settings → Delete account. RAAHII removes its copy in iCloud when you reset. Apple syncs the change to your other devices; the time is set by Apple.

Contact

Privacy questions? Email privacy@raahii.app.

RAAHII · Terms of Service