Privacy Policy — OhMyWay

Last updated: 7 September 2026

This Privacy Policy explains how OhMyWay (the "App") processes users' personal data. By creating an account and using the App, you accept the practices described here.

1. Data controller

Company: Artsessions SLU
Tax ID (CIF): B64848997
Address: Carrer Llull 240, 08005 Barcelona, Spain
Contact email: privacy@replai.net (confirm contact address)

2. What data we process

We only process the data needed for the App to work:

Account data: name, email address, username (@handle) and password (always stored encrypted; never in plain text).
Content you create: trips, itineraries, bookings, expenses and their associated currencies.
Images: your profile photo and the photos of the companions you add, as well as images you attach to bookings or documents.
Documents you upload: tickets, reservations and identity documents (for example, passport or national ID) that you choose to store in the App. These documents are processed only because you upload them voluntarily.
Companions: data about the people you travel with (name, photo and documents) that you enter.
Minimal technical data: information strictly required for synchronization and security (for example, internal identifiers and change timestamps).

The App does not currently collect real-time location data, and does not use third-party analytics or advertising. Artsessions SLU reserves the right to add analytics tools (its own or third-party) in the future; if it does, it will update this policy and, where required by law, request your prior consent. The website (not the app) uses Google Analytics with your consent; see the Cookie Policy.

3. Purpose and legal basis

Providing the service (creating and syncing your trips, bookings, documents and expenses across your devices and your companions'): legal basis = performance of a contract (Art. 6(1)(b) GDPR).
Sharing trips with companions you invite: performance of a contract and your consent when sharing.
Storing identity documents you choose to upload: your explicit consent (Art. 6(1)(a) GDPR). You can delete them at any time.
Security and maintenance of the service: legitimate interest in providing a secure service (Art. 6(1)(f) GDPR).

4. Who can see your data

Your companions: the people you share a trip with can see that trip's information (its bookings, documents and expenses) according to the permission you grant (view-only or edit).
Apple: as the App's distribution platform. Apple processes your data under its own policy.
We do not sell or transfer your data to third parties for advertising or commercial purposes.

5. Where your data is stored

Data is hosted on servers located in the European Union (travel.replai.net infrastructure). We do not transfer data internationally outside the European Economic Area.

6. How long we keep it

We keep your data while your account is active. If you delete a trip, a booking or a document, it is removed from our systems (it may remain briefly in technical backups). If you request account deletion, we erase your personal data except where we must retain it by legal obligation.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time by writing to privacy@replai.net. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe we have not handled your request properly.

8. Security

We apply reasonable technical and organizational measures: encrypted communications (HTTPS), password storage using hashing algorithms, and restricted access to documents, so that only you and the people you share a trip with can access their content.

9. Minors

The App is not directed to children under 14. If you are under that age, you must not create an account without the consent of your parents or guardians.

10. Changes to this policy

We may update this Privacy Policy. We will publish the current version on this page and indicate the date of the last update.

OhMyWay is a product of Artsessions SLU.