What Tujuvia keeps, and why
Tujuvia turns links you share from TikTok, Instagram, YouTube and the web into saved places on a map, and plans trips from them. To do that it has to store what you save. This page explains exactly what is collected, what it is used for, which services see it, and how to delete it. It is written to be read, not skimmed. If anything here is unclear, write to aiman@iteratis.my.
Tujuvia is operated by Candela Capital Sdn Bhd, No. 14-A, Jalan 5, Taman Bukit Jati, Klang, Selangor, Malaysia ("we"). We are the data controller for the personal data described here.
1. What we collect
Account
- Sign-in with Google or Apple: your name, email address and profile photo, as provided by that account. We do not receive your password.
- Sign-in with email: your email address and a password, which is stored only as a salted hash by our authentication provider.
- Profile photo you upload from your device, if you choose to set one. It is stored in a public image bucket so the app can display it.
Things you save
- The links you share or paste, and what we fetch from them to find the places: the post's caption, on-screen text, cover image or slides, a transcript where one is available, and the poster's public handle.
- The places we match: venue name, address, coordinates, category, opening hours and a photo, and any corrections or manual places you add.
- Your collections and trips: how you group places, the trip mode and dates you choose, and the plan we build.
- Notes you attach to a save.
Location
The app asks for your device location only when you use a feature that needs it: centring the map on you, and using "your location" as the start of a trip plan. Location is used at that moment to frame the map or build the plan and is not stored or tracked in the background. You can decline the permission and enter a start point instead.
Usage and billing
- Usage counts: how many saves and trip plans you have used against your plan's monthly allowance, and the cost of the AI and mapping calls behind them. This is what enforces the Free, Plus and Pro limits.
- Purchases: if you subscribe, we receive a purchase token and subscription status from Google Play (or the App Store on iOS). We never see your card or payment details; the store handles payment.
- Diagnostics: the outcome of each save (found, needs confirmation, failed, and the error) is stored with the save so we can fix extraction problems, and the app keeps a short log of share attempts on your device that you can show support. We do not run third-party analytics or advertising SDKs.
Website analytics
On tujuvia.app we use a self-hosted installation of Umami to understand page visits, campaign sources, app-download clicks, guide and support-link clicks, and page performance. It records the page path, referring site, campaign tags, browser and device type, approximate country and the named action. It does not use cookies or collect your name, email, saved places or app account. Your IP address is used briefly to derive an anonymous session and approximate location but is not stored. The tracker respects your browser's Do Not Track setting, and the analytics data stays on our own server.
2. What we use it for
- To do what the app does: find the real place behind a post, put it on your map, and plan trips from it.
- To keep your saves available across sign-ins and devices.
- To enforce plan limits and confirm subscriptions.
- To diagnose failed saves and improve extraction.
- To answer support requests.
We do not sell personal data, use it for advertising, or build profiles for third parties. Your saves are private to your account; there is no public feed.
3. Who sees it
Tujuvia runs on services that each see a slice of the data. We only send what the step needs.
- Supabase hosts our database, authentication and file storage. Everything in section 1 lives there.
- DeepSeek (AI) receives the text and images fetched from a post you saved, so it can identify the places mentioned. It does not receive your name, email or location.
- Google Places receives venue names and the area we think they are in, to resolve them to a real address, hours and photo. OpenStreetMap Nominatim is used as a fallback for the same purpose.
- OSRM (routing) receives the coordinates of the places in a trip to estimate driving times between them.
- Google Play (and the App Store) handle payment and tell us whether a subscription is active.
- TikTok, Instagram, YouTube and other sites you save from are contacted to fetch the public post. Where possible the app fetches the post from your phone directly, so those sites see your device's request rather than ours.
- Google Maps opens on your device when you tap a place or a route. From that point Google's own privacy policy applies.
- Umami is self-hosted on our server for the website analytics described above. Analytics is not sent to Umami Software or an advertising network.
We will disclose data if the law requires it, or to protect the service and its users from abuse.
4. How long we keep it
- Your account and saves are kept until you delete them or your account.
- Fetched post content (captions, images, transcripts) is kept with the save so you can see what it came from, and goes when the save goes.
- Usage counts are kept per billing month for the life of the account.
- Anonymous website analytics is kept only while it remains useful for understanding site performance and downloads, and is deleted during routine analytics maintenance.
- Deleted data can persist for a short time in our hosting provider's backups before those roll over.
5. Deleting your data
You can delete your account from inside the app: You tab → Delete account. This removes your account, saves, places, collections, trips, notes, profile photo and usage records from our database. It cannot be undone. Purchases are managed and cancelled through Google Play or the App Store, not by deleting the account.
If you can no longer sign in, email aiman@iteratis.my from the address on the account and we will delete it for you. Full steps are on the account deletion page.
You can also ask us for a copy of your saved places as a KML file, which opens in Google Earth, Google My Maps and most mapping tools, by emailing the address below.
6. Your rights
You can ask us what personal data we hold about you, ask for it to be corrected or deleted, or object to how it is used, by emailing aiman@iteratis.my. We answer within 30 days. Where the Personal Data Protection Act 2010 (Malaysia) or another law gives you further rights, those apply too.
7. Children
Tujuvia is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, email us and we will delete it.
8. Security
Data is encrypted in transit and at rest by our hosting provider. Access to the database is restricted to the service itself and to us for support and maintenance. No system is perfectly secure; if we learn of a breach affecting your data we will tell you.
9. Changes
If this policy changes in a way that matters, we will update the date at the top and tell you in the app before the change takes effect. Earlier versions are available on request.
10. Contact
Candela Capital Sdn Bhd
No. 14-A, Jalan 5, Taman Bukit Jati, Klang, Selangor, Malaysia
aiman@iteratis.my