This Privacy Policy describes how Noya ("Noya", "we", "us" or "our") collects, uses, and shares personal information through noya.travel, the Noya application, and any other service we operate that links to this policy (together, the "Service").
Noya watches your travel bookings and tells you when something changes. To do that, it reads travel confirmations, extracts the details of your trips, and monitors those trips for changes. This page explains exactly what that means for your data.
We have tried to write this plainly. If anything here is unclear, email privacy@noya.travel and we will explain it.
Noya is an independent travel-monitoring service. You can reach us at privacy@noya.travel.
Travel confirmation emails. Either you forward them to us, or, if you connect your Google account, we read them from your mailbox. These contain things like flight numbers, hotel reservations, rental car bookings, confirmation numbers, dates, times, and locations.
Trip details we extract. From those emails we derive structured records: which flights you are on, where you are staying, when you arrive.
Your email address. Used to identify your account and to send you the updates you have asked for.
Basic operational records. Logs of emails received, updates sent, and errors, so we can tell whether Noya is working.
We do not ask for or store payment card numbers, passport numbers, or government identification. If a confirmation email you forward happens to contain such information, it is stored as part of that email. See Retention below.
If you give us your email address on this website to hear when Noya opens up, we collect only that address. It is handled by a third-party form provider on our behalf, and we use it for one thing: to tell you when you can use Noya. We do not add it to any other list, and we do not share it. Email privacy@noya.travel and we will remove you.
Noya's website sets no cookies, runs no analytics, and contains no advertising or tracking scripts. We do not know who visits it.
If you connect your Google account, Noya requests a single permission: gmail.readonly, which allows it to read your email messages and settings.
We look for travel confirmations, and we read the contents of those messages to extract your trip details: flight numbers, dates, times, confirmation numbers, hotel and rental car information. That extracted information is what powers your trip view and the alerts you receive.
We do not read your email for any purpose other than identifying and understanding your travel bookings. We do not use it for advertising. We do not sell it. We do not use it to build a profile of you. We do not use it to train artificial intelligence or machine learning models.
The information Noya depends on, such as the confirmation number, the departure time and the hotel address, appears in the body of a confirmation email rather than in its subject or headers. A narrower permission exposing only headers would not allow Noya to function.
You can disconnect Noya from your Google account at any time at myaccount.google.com/permissions. Doing so immediately stops us reading any further email.
Noya uses an AI service (Anthropic) to read the text of a travel confirmation and pull out the details of your booking. This is how Noya understands that "UA 2444 departs EWR at 8:35am" is a flight rather than a sentence.
To be exact about what that does and does not mean:
Noya's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
Noya is built on a small number of service providers. Each receives only what it needs, and each is used solely to provide Noya's features to you.
| Provider | What it receives | Why |
|---|---|---|
| Anthropic | The text of your travel confirmation emails | To extract your trip details from the email. Anthropic does not train its models on this data. |
| Hosting and storage | Your email address, your emails, your trip details | Where Noya's code runs and where your data is stored. |
| Email delivery | Emails sent to and from Noya | Receiving your forwarded confirmations and sending you updates. |
| Flight data | Flight numbers and dates | To check whether a flight has changed. Receives no personal information. |
We name our AI provider explicitly because reading the contents of your email is the most significant thing Noya does on your behalf, and you should know exactly who does it. Our other providers are named on request: email privacy@noya.travel and we will tell you.
We do not sell your data. We do not share it with advertisers. We do not share it with anyone beyond the providers described above, except where the law requires it.
We do not use your data to advertise to you, and we do not use it to train artificial intelligence or machine learning models.
We keep the original text of travel confirmation emails so that we can re-read them later. Parsing improves over time, and keeping the original lets us correct mistakes without asking you to forward anything again.
We keep your trip details for as long as you have an account with us.
When you delete your account, we delete your data, including stored emails and trip details, within 30 days. Operational logs may persist for up to 90 days before being deleted on our normal cycle.
Depending on where you live, you may have additional rights over your data, including the right to access, correct, export, or delete it, and to object to how it is used. Email us and we will honour them.
Your data is encrypted in transit and at rest. Access to production systems is restricted. Credentials for the services listed above are stored as encrypted secrets and are not present in our source code.
No system is perfectly secure, and we will not claim otherwise. If we become aware of a breach affecting your data, we will tell you.
Noya is not intended for anyone under 16, and we do not knowingly collect data from them.
Your data is stored and processed in the United States. If you are located elsewhere, using Noya means your data is transferred there.
If we change how we handle your data, we will update this page and change the date at the top. If the change is significant, we will email you before it takes effect.