Last updated: April 8, 2026
Data Controller: Marius Hantig, operating VladAI Email: vladairomania@gmail.com
When you use the service, you interact with an AI-based conversational system, not a human operator. This information is provided to comply with transparency obligations, including those under the European Union Artificial Intelligence Regulation (EU AI Act).
This Privacy Policy aims to explain, in a transparent manner and in accordance with applicable law, what categories of personal data are collected through the VladAI application, for what purposes they are processed, how they are protected, and what rights users have concerning their data.
PLEASE READ CAREFULLY BEFORE CONTINUING TO ACCESS THE APPLICATION OR USE OUR SERVICES. This Privacy Policy explains how personal data is collected, used, stored, and protected when you access the application and/or use our services. Your use of the application is also subject to the applicable Terms and Conditions.
If you do not agree with the data processing described in this Privacy Policy, you should discontinue use of the application and may request deletion of your account and associated data, in accordance with the provisions set out below.
If you use the services on behalf of another person, you represent that you are authorized to act on that person's behalf in relation to the use of the services and, where applicable, to provide personal data necessary for that use.
When using the VladAI application, we may collect and process certain categories of personal data depending on how the user interacts with the app and the features used. Data collection and processing are carried out exclusively for legitimate, determined, and explicit purposes, in accordance with applicable personal data protection legislation.
When creating a user account in the VladAI application, we request and collect identification and contact data necessary for account management and providing the services offered through the app. This data may include:
Providing this data is necessary for creating and managing the user account, communicating with the user, and personalizing the services offered through the app. Failure to provide certain data may result in the inability to use some app features.
To provide the essential functionalities of the VladAI application, it is necessary to collect and store certain data generated as a result of app usage. In particular, the app relies on saving user-created itineraries and related information in our database. Without this storage, the correct functioning of the app would be impossible, and core services (including generating, displaying, managing, and retrieving itineraries) could not be provided.
As a result, during app usage, we may collect and process categories of data such as:
These data are processed mainly for:
This processing is necessary to provide the core functionalities of the VladAI app. If a user chooses not to provide or allow the storage of data required for these functionalities, some or all of the app's services may not be available, as the app depends on this processing to operate properly.
When using the VladAI app, certain information may be automatically collected through analytics and app usage monitoring technologies. This information may include:
These data are used for statistical, analytical, and app performance optimization purposes. Although they are not collected for the purpose of directly identifying users, they may still be associated with a device, app instance, or account in certain circumstances.
The VladAI application uses automated systems based on artificial intelligence ("AI") to provide users with travel recommendations, itinerary suggestions, and other personalized information, depending on the data and preferences provided by the user.
By using chatbot-type functionalities, the user is informed and expressly acknowledges that they are interacting exclusively with an automated system and not with a human operator. The responses and itineraries generated are the result of automated processes for analyzing and processing the data entered into the application.
Within interactions with the AI systems of the VladAI application:
The VladAI application does not use these data to make decisions that produce legal effects on the user and does not generate similarly significant legal effects.
Although AI systems are designed to provide relevant and useful information, the generated results:
The user is responsible for how they use the information provided by the application and is encouraged to verify essential information (such as opening hours, access conditions, and availability).
The VladAI application is not designed to collect or process sensitive personal data, such as:
Users are instructed not to enter such information within the chatbot, forms, or any other application functionalities. If such data is received, it will be deleted as soon as identified.
Personal data collected through the VladAI application are processed exclusively for specific, explicit, and legitimate purposes, in accordance with applicable personal data protection legislation, including Regulation (EU) 2016/679 (GDPR).
Specifically, we use personal data for the following purposes:
Data processing is carried out on the basis of performing the contract between the user and the operator (i.e., providing services through the application), the legitimate interest of the operator in ensuring the operation and improvement of the application, and, where applicable, compliance with legal obligations.
We do not use personal data for unlawful purposes and do not sell users' personal data. Data may be shared or disclosed only under the conditions set out in this Privacy Policy and in accordance with the law.
To ensure the technical operation of the VladAI application and to improve performance and user experience, we use certain services provided by third parties. These services may involve the processing of personal data or technical data, to the extent necessary to provide the respective functionalities.
The use of third-party services is based on contractual relationships that require providers to comply with applicable personal data protection obligations, in accordance with relevant legislation.
The VladAI application uses Mapbox services exclusively for displaying maps and cartographic elements necessary for visualizing locations and itineraries generated within the application.
Mapbox may process certain technical data strictly necessary for the operation of mapping services (such as map display requests, technical parameters of the application or device), without the VladAI application transmitting users' location data to Mapbox and without aiming at direct user identification.
Any data processing performed by Mapbox is carried out in accordance with Mapbox's own privacy policy and terms. VladAI does not control how Mapbox processes data on its own behalf and recommends that users consult Mapbox's documentation and privacy policy for additional information.
The VladAI application uses Firebase, a platform provided by Google, for analytics and crash reporting (Firebase Analytics and Firebase Crashlytics). These services collect information about how users interact with the application and help identify and resolve technical issues.
Data collected through Firebase may include information such as:
These data are used exclusively for statistical, analytical, optimization, and stability purposes. Depending on the service configuration, they may include identifiers associated with a device or app instance. Data processing by Google/Firebase is carried out in accordance with Google's applicable privacy policy and terms.
The VladAI application uses OpenAI's API to power the AI chatbot functionality. When users interact with the chatbot, their messages are sent to OpenAI's servers for processing in order to generate responses, recommendations, and itineraries.
OpenAI processes user messages for the purpose of generating responses and, under the applicable API/business terms, does not use API content to train its models by default. VladAI does not intentionally send account profile fields such as name or email to OpenAI as separate inputs; however, any personal data that a user includes in chat messages or prompts may be transmitted to OpenAI as part of the conversation content necessary to generate a response.
Any data processing performed by OpenAI is carried out in accordance with OpenAI's own privacy policy and data processing terms.
As a mobile application, VladAI does not use cookies in the traditional sense specific to websites. However, the application may use technologies equivalent to cookies, such as SDKs, application identifiers, and other similar technologies, which are necessary for technical operation, usage analysis, and performance improvement.
These technologies may be used for the following purposes:
The above-mentioned technologies may be provided directly by VladAI or through third-party services used (such as analytics services), in accordance with their respective privacy policies.
Certain third-party services used by the VladAI application may involve the transfer of data to servers located outside the European Economic Area (EEA), including the United States. These transfers are carried out in compliance with applicable data protection legislation and may rely on safeguards recognized under applicable law, such as adequacy decisions (including the EU-US Data Privacy Framework, where applicable), Standard Contractual Clauses approved by the European Commission, or other lawful transfer mechanisms made available by the relevant provider.
In all cases, data transfers are limited to what is strictly necessary for the provision of the respective services, and the third-party providers are required to protect the data in accordance with applicable law and their contractual commitments. Users may also consult the privacy documentation of the relevant providers for the most up-to-date information on their international transfer mechanisms.
VladAI treats users' personal data with the utmost responsibility. Data collected through the application are not sold, rented, or transferred to third parties for commercial purposes.
Personal data may be shared with the following categories of recipients, strictly for the purposes described in this Privacy Policy:
We do not sell user data, do not share it for advertising purposes, and do not authorize third parties to use personal data for their own marketing purposes beyond what is described above.
We retain the personal data of VladAI users only for the period necessary to fulfill the purposes for which such data was collected and processed, in accordance with the storage limitation principle provided by applicable law.
As a general rule, the following retention periods apply:
The user may request the deletion of their account and associated data at any time by sending a request to the email address: vladairomania@gmail.com or directly from within the application.
Following a valid deletion request, we will take reasonable steps to remove the data from active systems, except where the retention of certain data is necessary:
In such cases, the data will be retained strictly to the extent and for the duration necessary to fulfill these purposes, in accordance with the law.
In accordance with Regulation (EU) 2016/679 on the protection of personal data ("GDPR"), users of the VladAI application benefit from a number of rights regarding the processing of their personal data.
Where the conditions provided by law are met, the user has the following rights:
To exercise any of the rights mentioned above, the user may submit a request to the following email address: vladairomania@gmail.com.
We will review and resolve received requests within the legal time limit provided by the GDPR, with the possibility of extension in cases permitted by law, in which case the user will be duly informed.
Additionally, if you believe that your rights regarding personal data protection have been violated, you have the right to lodge a complaint with the national supervisory authority:
ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal)
Website: www.dataprotection.ro
The VladAI application is not intended for use by persons under the age of 16. We do not knowingly collect or process personal data belonging to minors.
If we have reasonable grounds to believe that personal data of a minor has been collected or processed through the application, we will take the necessary steps to delete such data as soon as possible.
If you are a parent or legal guardian and believe that a minor has provided us with personal data, please contact us at the following email address: vladairomania@gmail.com.
VladAI implements appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures are designed taking into account the nature of the processed data, the risks associated with processing, and the current state of technology.
The adopted security measures may include access controls, internal security procedures, infrastructure protection mechanisms, and other measures intended to ensure a level of security appropriate to the identified risks.
However, no method of data transmission or electronic storage can be guaranteed to be completely secure. Although we make reasonable efforts to protect personal data, we cannot guarantee its absolute security.
We reserve the right to modify and update this Privacy Policy whenever necessary in order to reflect changes to the VladAI application's functionalities, legal requirements, or our data protection practices.
Any changes will be published within the application and will take effect from the date the updated version is displayed. The date of the latest update will be expressly indicated at the beginning of the document.
If the changes are significant and substantially affect the way personal data is processed, we will make reasonable efforts to inform users through appropriate means, in accordance with applicable law.
Continued use of the VladAI application after the publication of changes means that the user has been informed of the updated Privacy Policy. Where required by applicable law for specific processing activities, we will seek separate consent or provide any additional notice required.
For any questions, requests, or concerns related to this Privacy Policy or to the manner in which personal data is processed through the VladAI application, you may contact us using the following details:
Data Controller: Marius Hantig, operating VladAI
Email: vladairomania@gmail.com
We will review and respond to received requests within a reasonable timeframe and in accordance with applicable legal obligations.