Vialudi Privacy Policy

Effective date: October 8, 2026 · Version: 4.6

This Privacy Policy explains how Vialudi LLC ("Vialudi," "we," "us") collects, uses, shares and protects personal information when you use the Vialudi websites, apps, the LUDI assistant and related services (the "Service"). It also explains your choices and rights. It applies to users in the United States.

Our Consumer Health Data Privacy Policy supplements this policy for health-related information.

Our commitments at a glance

• We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
• We do not use targeted advertising. We do not use your activity on other companies' websites or apps to show you ads. Sponsored content in Vialudi is labeled and is never based on sensitive information.
• We do not sell location information. We do not store your exact device coordinates.
• We remove location and device details from the photos and videos you upload. The date they were taken stays.
• We do not sell or target ads to anyone under 18, and we do not profile minors for advertising.
• We do not use your personal information to train large language models or other generative AI models. We do not allow our AI providers to train their models on it.
• Your Memories are private by default. Nothing you complete is published unless you choose to share it.
• We do not use your photos for facial recognition, and we do not create biometric identifiers.
• Privacy rights are available to all US users, whatever state you live in.

If any of these practices changes, we will update this policy first. Where the law requires it, we will ask for your consent before the change applies to you.

1. Who we are and how to contact us

Vialudi LLC is a Michigan limited liability company.

Vialudi LLC
2222 W Grand River Ave, Ste A
Okemos, MI 48864, United States
support@vialudi.com (subject "Privacy Request")

You do not need an account, or a particular subject line, to contact us about privacy.

2. Information we collect

What we collect depends on the features you use. We collect only what is reasonably necessary for the purposes described here.

Information you give us

Information collected automatically

Information from others

• Other users, for example when they invite you, name you as a Trip companion, react to your posts or report content.
• Sign-in providers you choose, such as Apple, Google or Facebook: your name and email address.
• Payment processors and app stores: payment status.
• Affiliate partners, where affiliate links are offered: whether a purchase you started from a Vialudi link was completed, and the commission due. We do not give partners your name or contact details through affiliate links.
• Public and licensed sources that describe experiences and places.

3. How we use information

We use personal information to:

• provide, maintain and improve the features you use;
• personalize your own discovery and planning suggestions, based on what you save, plan and do in Vialudi;
• let you connect, message and share with the audiences you choose;
• process payments and manage subscriptions;
• send service messages, and marketing you have agreed to;
• keep the Service safe: detect fraud, abuse and security incidents, review reports and enforce our Terms;
• respond to your requests and support questions; and
• comply with the law and protect legal rights.

We do not use personal information for purposes that are materially different from these without telling you and getting any consent the law requires.

Sensitive information. The following count as sensitive under many state laws:

• health-related information, including accessibility needs;
• device location;
• information about children; and
• information revealing racial or ethnic origin, religion, sex life, sexual orientation, gender identity, citizenship or immigration status.

We process sensitive information only when it is strictly necessary to provide a feature you have asked for, and only with your opt-in consent where the law requires it. We never sell it or use it for advertising. Your consent never allows a use the law prohibits. Please do not enter unnecessary sensitive information in free-text fields.

Analytics, diagnostics and experiments

We measure how the Service is used, keep it reliable and secure, and test improvements. Each of these is a separate purpose. You can see each purpose and change the optional ones in Settings. When you turn an optional purpose off, we stop collecting information for it right away and delete what we collected for it, except information under a legal hold (Section 9).

Support bundles. We receive a support bundle only when you ask for help, agree to send one, and choose what it covers:

• What it contains: a structured record of app events from the categories you pick, over a period you pick (at most 7 days). It does not include your messages or other content.
• How long we keep it: 30 days after we receive it, then we delete it.
• Who can see it: only authorized support staff can read it, and every access is recorded.
• Withdrawing it: you can withdraw a bundle at any time, and turning the purpose off deletes any bundle you have sent.

Users under 18.

• Optional analytics and diagnostics: these run for a user under 18 only with a parent or guardian's consent and the teen's own choice.
• Experiments: these never include users under 18.
• Unconfirmed age: if we cannot confirm a user's age, optional purposes and experiments stay off.

4. LUDI and artificial intelligence

LUDI is an AI system, not a person. When you use LUDI, we send your request and the context needed to answer it to an AI model provider, which generates the reply for us. That context can include earlier messages in the conversation, your planning preferences and your current plan. Our AI providers currently include OpenAI, Google and Anthropic.

We may also use automated image analysis on photos and videos you upload to detect prohibited content, create accessibility descriptions (alt text) and check image quality. This analysis does not identify people. We do not create biometric identifiers from it.

No AI training on your information.

• We do not use your personal information, including your LUDI conversations, Memories, messages and photos, to train large language models or other generative AI models.
• We use AI providers only under terms that prohibit them from training their models on the data we send them.
• Providers may keep data briefly, under their contract with us, to operate their service and to detect abuse.

Personalization. We use your activity in Vialudi, such as experiences you save and plans you make, to personalize suggestions for you. Suggestions about people respect blocks and visibility settings. A suggestion is not a judgment about anyone's character or safety.

Human access. Authorized Vialudi staff and service providers may access information, including private content, only when needed to provide support you ask for, investigate a report or safety concern, secure the Service, or comply with the law. Access is restricted and logged.

5. What other people can see

• Memories are private by default. A Story or Timeline post is visible only to the audience you choose. Public content can be viewed, copied and indexed outside Vialudi.
• My Bucket List is private by default. Where available, you can set each item's audience to friends, family or public. Those people see only the item's title, the experience it refers to, whether it is planned or lived, how many times you have lived it, and the day you added it. They never see your notes, reminders, plans, linked trips or companions. Blocks and your profile visibility still apply. A public item can be viewed, copied and indexed outside Vialudi, like other public content.
  • Shared wishes (only if you turn them on). You can choose individual bucket-list items to share for discoverability and turn on the discoverability preview. Another adult who shared the same experience may then see that you both want it, on your profile and in friend suggestions. They see only experiences you both chose to share, never your other items, and never across a block.
  • Friends' interest hints. Unless you turn them off in Settings, your saves may count toward hints shown to people you are connected with, such as "3 friends are interested" or "Someone in your network saved this." These hints never name you unless you choose to allow it.
• Your profile is private by default. To other users your name appears as your first name and last initial, with your profile photo. You control your profile visibility and discoverability in Settings.
• People matching (only if you turn it on). If you turn on people matching, we compare the experiences on your bucket list, the dates of Trips you are planning, your matching choices and the distance between your home areas with those of other people who also turned it on, within the circle you choose (for example, friends only or the wider community). Until you both accept a match, neither of you sees who the other is: you see only a short explanation that never names a bucket-list item, a Trip or a date. When you both accept, each of you sees the other's name and profile photo as your profile settings allow. Your Trip dates and home area are never shown. You can dismiss a match or turn matching off at any time, and blocking someone ends a match.
• Connections do not get automatic access to your private Memories, messages, account details or location. Labeling someone as family does not give them authority over your account.
• Comments and reactions are visible to people who can see the post. They are not private messages.
• Events and Trips: participants and organizers can see the participation and profile information that the feature explains. An Event's group chat is visible to that Event's members.
• Messages are private within the Service, but they are not end-to-end encrypted. See Section 4 for when staff may access them.

6. Cookies, local storage and your browser

We use only the storage needed to run the Service.

We do not use advertising cookies, tracking pixels or third-party analytics cookies. Some experience images are loaded from Unsplash, an image service. When that happens, Unsplash receives your IP address and browser information, as it would when you visit any website. Maps on the website are loaded from Google Maps. When you view one, Google receives your IP address, browser information and the area the map shows, as it would when you visit any website.

Global Privacy Control and Do Not Track.

• We treat a Global Privacy Control (GPC) signal, or another legally recognized opt-out preference signal, as a valid request to opt out of the sale or sharing of your personal information and of targeted advertising. It applies to the browser or device that sends it, and to your account when you are signed in.
• Because we do not sell, share or target ads, receiving a signal does not change how we process your information today. If our practices ever change, we will apply those signals automatically.
• We do not track you across other companies' websites, so we do not respond differently to Do Not Track signals.

7. Communications

We send service messages: security alerts, receipts, subscription notices, legal notices and replies to you. You cannot opt out of these while you have an account.

Marketing messages. We send marketing email or push notifications only as the law allows, and you can opt out at any time with the unsubscribe link or in Settings. We send marketing texts only with your prior express written consent, and consent is never a condition of using Vialudi. Reply STOP to any text to opt out. Giving us your phone number, accepting our Terms or joining an Event is not consent to marketing texts or calls.

8. How we share information

We do not sell personal information. We share it only as follows:

• With the people you choose. Your chosen audiences, connections, Event participants and Trip companions see what the feature explains.
• With service providers acting for us. Under contracts that limit their use of the information to providing services to us:
  • hosting and cloud storage;
  • content delivery and network security (including Cloudflare);
  • payment processing (Stripe; Apple and Google for app-store purchases);
  • text messaging and phone verification (Twilio);
  • email delivery;
  • push notifications (Apple and Google);
  • AI model providers (see Section 4);
  • maps, place search and address lookup (Google; Apple Maps in the iPhone app);
  • age-verification providers, where state law requires age verification; and
  • customer support and security tools.
• With providers you choose to engage. When you ask for a handoff, inquiry or booking with an independent travel, activity or event provider, we send what that interaction needs. The provider's own privacy policy then applies. Affiliate links do not send partners your name or contact details.
• With your calendar service, at your direction. If you connect Google Calendar or Microsoft Outlook and choose a Trip, we send that calendar service only the itinerary items you added to that Trip yourself: each item's title, its start and end times with time zone, whether it is all-day, an approximate place name (never exact coordinates) and a link back to the item in Vialudi. We never send your companions' names or details, your notes, booking or confirmation references, prices, documents or anything another person added. Google's or Microsoft's own privacy policy applies to your calendar. You can remove a Trip or disconnect at any time.
• With event-listing services, without identifying you. Where available, to show events near you we ask event-listing services (such as Ticketmaster and Eventbrite) and Google's AI search for public events in a broad area around you: a grid square roughly 30 miles across that many people share. We never send your exact location, your account or anything else that identifies you.
• In copyright matters. If you send a copyright notice, we give the person who posted the material a copy with your name. If you send a counter-notice, we give the person who sent the notice a copy, including your contact details, as copyright law provides.
• For legal and safety reasons. When we believe in good faith it is required by law or legal process. Also when it is necessary to protect someone's safety, investigate fraud or abuse, enforce our Terms, or establish or defend legal claims. We report apparent child sexual exploitation to the National Center for Missing & Exploited Children as federal law requires.
• In a business transfer. In a merger, acquisition, financing or sale of assets, subject to this policy's protections.
• With your consent or at your direction.

List of specific third parties. On request, we will give you a list of the specific third parties to which we have disclosed personal information. Where the law gives you that right, we will give you a list of the specific third parties to which we have disclosed your own information.

9. How long we keep information

We keep personal information only as long as needed for the purposes in this policy, and then delete or de-identify it.

We keep retained information secure, and we do not use it for any other purpose.

10. Your privacy rights

Your rights. Whatever state you live in, you can ask us to:

• Know and access the personal information we have about you, and get a portable copy.
• Correct inaccurate information.
• Delete your personal information.
• Withdraw consent you have given, for example for device location or accessibility information.
• Opt out of the sale or sharing of personal information, targeted advertising, and profiling that produces legal or similarly significant effects. We do not do any of these today, but you can still send a request, and we will honor it if our practices ever change.
• Get a list of the specific third parties to which we have disclosed your information.
• Appeal our decision on your request.

How to make a request. Use the privacy controls in Settings where available, or email support@vialudi.com with the subject "Privacy Request." You do not need an account. Tell us what you are asking for and how to reach you. Do not send passwords or identity documents unless we ask for them through a secure method.

Verification. To protect you, we verify requests to access, correct or delete information. We may confirm you control the account or the email address, or ask for information that matches our records. We will not ask for more than is reasonably necessary. You never need to verify your identity to opt out.

Authorized agents. Someone you authorize may make a request for you. We may ask for proof of that authorization and may confirm the request with you directly, as the law allows. A parent or legal guardian may make requests for a user under 18.

Response times.

• We respond to requests within 45 days. If we need more time, we will tell you why, and extend by up to 45 more days where the law allows.
• We act on opt-out requests within 15 business days.
• If we deny a request, we explain why.

Appeals. To appeal a decision, reply to our response or email support@vialudi.com with the subject "Privacy Request — Appeal." We decide appeals within 45 days and explain the result. If you are not satisfied, you may contact your state attorney general.

No discrimination. We will not deny you service, charge you a different price or provide a different quality of service because you exercised a privacy right. If you withdraw information that a feature needs, that feature may stop working. Your other rights are not affected.

11. Children and teens

Children under 13.

• Vialudi is not for children under 13, and children under 13 may not create accounts.
• We ask for your date of birth when you sign up and do not allow sign-up below the minimum age.
• If we learn that we collected personal information from a child under 13, we delete it promptly and close the account.
• To stop the same person signing up again before they turn 13, we keep only a scrambled code made from the email address or sign-in account they used, and the date they turn 13. The code can't be turned back into the email or account. We use it only to refuse sign-up, and we delete it on that date.
• If you believe a child under 13 is using Vialudi, email support@vialudi.com with the subject "Privacy Request — Age Concern."
• We use date of birth only to confirm eligibility and apply age-appropriate protections, and we never show it to other users.

Teens (13–17). For every user under 18:

• We do not sell their personal information or use it for targeted advertising, and we do not profile them for advertising, even with consent.
• Their profile is private by default, and device location is off by default.
• Adults who are not connected with them cannot send them direct messages.
• We do not show them sponsored content based on their personal information.
• We may limit particular features, apply stricter defaults, or require an app store's age or parental-consent signal or a parent's consent where state law requires.
• In some states we may not offer certain features to minors.

A Friends & Family relationship does not by itself give anyone parental authority or access to a teen's information.

Age verification and parental consent. Where state law requires it, as in Mississippi and Tennessee, we verify the age of account holders and obtain a parent or guardian's consent before a minor can use the Service. We may use an app store's age signal or a third-party verification provider to do this. We use information from age verification only to determine age and eligibility and to keep the records the law requires. We do not use it for any other purpose. We delete identity documents and images used for verification promptly after the check, and do not retain them.

Where state law gives parents and guardians tools to supervise a minor's account, we provide them. Examples are viewing privacy settings and setting time limits.

Parents and guardians may contact support@vialudi.com to ask about, review, or request deletion of their child's information. We will verify the request.

California users under 18 may remove content they posted through the delete controls, or ask us to remove it by emailing support@vialudi.com with the subject "Privacy Request — Remove My Post." Removal may not ensure complete erasure. For example, we cannot remove copies others have reposted, or records the law requires us to keep. You do not need to delete your account to make this request.

12. Security

We use administrative, technical and physical safeguards appropriate to the information we hold. These include:

• encryption in transit;
• encryption of sensitive fields such as notification tokens;
• hashed passwords;
• access controls; and
• logging.

No system is perfectly secure, so we cannot guarantee absolute security. If a security incident affects your personal information, we will notify you and the appropriate regulators without unreasonable delay and within the time the law requires. Tell us promptly at support@vialudi.com if you suspect unauthorized access to your account.

13. Where information is processed

Vialudi is operated from the United States, and we primarily store and process personal information in the United States. Some service providers may process information in other countries under contracts that protect it.

14. State-specific information

California. This section is our notice at collection and privacy policy under the California Consumer Privacy Act (CCPA) and the California Online Privacy Protection Act.

• Categories collected in the past 12 months:
  • identifiers (name, email, phone number, username, IP address, device tokens);
  • customer records (Cal. Civ. Code §1798.80);
  • protected characteristics (age);
  • commercial information (purchases, subscriptions);
  • internet or network activity;
  • approximate geolocation;
  • audio or visual information (photos and videos you upload);
  • inferences (your interests, for personalization); and
  • sensitive personal information (account login, device location, health-related accessibility information you choose to share, and government identification if used for age verification, which is deleted after the check).
• Sources, purposes and retention: see Sections 2, 3 and 9.
• Disclosures: we disclosed each category for business purposes to the service providers and recipients in Section 8.
• No sale or sharing: we have not sold or shared personal information in the past 12 months, and we have no actual knowledge of selling or sharing information of consumers under 16.
• Sensitive information: we use and disclose sensitive personal information only for purposes permitted by Cal. Code Regs. tit. 11, §7027(m). We do not use it to infer characteristics about you.
• Your rights: see Section 10.
• "Shine the Light": we do not disclose personal information to third parties for their own direct marketing.
• Do Not Track: see Section 6.

Nevada. We do not sell covered information as defined in NRS 603A. You may still submit an opt-out request to support@vialudi.com.

Washington, Nevada, Connecticut and other states with consumer-health laws. See our Consumer Health Data Privacy Policy.

Rhode Island. We do not sell personal information to any third party.

Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia and other states with consumer privacy laws. You have the rights in Section 10. We do not sell personal data, including sensitive personal data. We do not process personal data for targeted advertising, and we do not profile in furtherance of decisions with legal or similarly significant effects.

15. Changes to this policy

We will post any update with a new effective date. For a material change, we will notify you by email or in the Service before it takes effect. We will not use personal information we already collected in a materially different way without the consent the law requires.

16. Contact

support@vialudi.com (subject "Privacy Request")
Vialudi LLC, 2222 W Grand River Ave, Ste A, Okemos, MI 48864, United States