Privacy Policy.

Last Updated 12 October 2026

This Privacy Policy explains how AHMEDMEDIAGROUP (“AHMEDMEDIAGROUP”, “we”, “us” or “our”) collects, uses, shares and protects personal information. It covers our website ahmedmediagroup.com, our apps Travelyfe (on iPhone, iPad, Mac and at travelyfe.com) and Convertable (on iPhone, iPad and Mac), our social media accounts and the tools we use to run them, and our everyday dealings with customers, partners, suppliers and job applicants (together the “Services”).

In short: we collect only what we need, we never sell your data, we do not use it for advertising profiles or to train AI models, and you can ask us to see or delete it at any time.

1. Who We Are

AHMEDMEDIAGROUP is an independent app studio based in the United Kingdom. We are the controller of your personal information under the UK GDPR, the Data Protection Act 2018 and, where it applies, the EU GDPR. We are a small business and have not appointed a Data Protection Officer; privacy questions are handled directly by the people who run the company.

AHMEDMEDIAGROUP is the trading name of AHMEDMEDIAGROUP LTD, a company registered in England and Wales. Our company number and registered office address are on the public Companies House register and are available on request through our contact chat.

  • Contact: our contact chat
  • Post: AHMEDMEDIAGROUP, Crawley, West Sussex, United Kingdom (full postal address available on request)

2. What This Policy Covers

This policy applies whenever we process your personal information in connection with the Services. It does not cover third-party websites, apps or services that we link to or that you reach through us (for example Viator, or the social media platforms themselves), which have their own privacy policies. Where a platform sells or delivers our app for us, such as the Apple App Store, that platform’s own policy also applies to what you do there.

3. Information We Collect

Information you give us:

  • Contact and enquiry details: your name, email address, what you need, your budget and timeline, and the questions you type, when you use our contact chat. The chat answers questions with Cloudflare Workers AI and does not store the conversation. Only the details you confirm and send are emailed to us.
  • Mailing list: your email address when you join a mailing list or waiting list.
  • Account and profile data: in Travelyfe, your email address, name, username and profile photo.
  • Content you create: itineraries, notes, photos, documents, expenses and packing lists you add to Travelyfe, and anything you choose to import.
  • Purchases: confirmation of what you bought and the limited billing details needed to manage it. We never receive your full card number.
  • Business and recruitment details: contact and company details of customers, partners and suppliers, and the CV, cover letter and contact details job applicants send us.

Information we collect automatically:

  • Device and technical data: device model, operating system and version, app version, browser type, language and time zone.
  • Usage data: which pages and features are used and how, where you allow analytics (Section 7).
  • Log and security data: IP address, access times, and error and crash reports.
  • Approximate location: derived from your IP address for security and regional features. Precise location is used only in Travelyfe and only if you allow it (Section 20).

Information from third parties: the name and email address you authorise when you sign in with Apple or Google; purchase and subscription status from Apple and RevenueCat; and what a platform shows us when you interact with our social media accounts (Section 8).

We do not intentionally collect special category data (such as health, religion or political opinions) and ask you not to send it to us.

4. How We Use It And Why

We use personal information only for the purposes below, each with a legal basis under the UK and EU GDPR:

  • To provide the Services you ask for, including creating and running your Travelyfe account, syncing your content, and processing purchases. Basis: contract.
  • To answer enquiries and provide support. Basis: legitimate interests (responding to people who contact us), or contract where you are a customer.
  • To send service messages such as sign-in codes, receipts, security alerts and important changes. Basis: contract and legitimate interests.
  • To send marketing emails and product updates. Basis: consent, which you can withdraw at any time (Section 5).
  • To keep the Services secure, prevent fraud and abuse, and fix errors and crashes. Basis: legitimate interests.
  • To understand and improve the Services through analytics. Basis: consent for cookies on our websites; legitimate interests for in-app analytics, which you can switch off (Section 7).
  • To run our own social media accounts, including publishing and measuring our posts. Basis: legitimate interests (promoting our business).
  • To use optional features that need your permission, such as location, camera, photos, notifications and AI imports in Travelyfe. Basis: consent.
  • To manage our business relationships and recruitment. Basis: contract or steps before a contract, and legitimate interests.
  • To meet our legal obligations, for example tax and accounting records, and to establish or defend legal claims. Basis: legal obligation and legitimate interests.

Where we rely on legitimate interests, we have balanced them against your rights, and you can object at any time (Section 13).

5. Marketing Communications

We send marketing emails only if you have asked to receive them, for example by joining a mailing list, or, where the law allows, if you are an existing customer and did not opt out. Every marketing email has an unsubscribe link, and you can also contact us to stop. We do not buy mailing lists and never share your email address with other companies for their marketing. Service messages, such as sign-in codes and receipts, are not marketing and will still be sent while you have an account.

6. Who We Share It With

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share it only with:

  • Service providers (processors) who work for us under contract and may use the data only to provide their service to us. For our website and business these are Cloudflare (hosting, security and file storage), Resend (sending our email and managing our mailing list), Microsoft 365 (our business email) and Google Analytics (website analytics, only with your consent). Travelyfe’s providers are named in Section 20 and Convertable’s in Section 21.
  • Our internal tools, which handle enquiries, support messages and other email we receive: Google Workspace (Gmail, Google Sheets and Google Drive, for our team’s mailbox and records), Slack (internal notifications), an automation tool that we host and run ourselves to pass messages between them, and Anthropic (Claude, United States), which helps our team sort incoming messages and draft replies. Anthropic processes the text on our behalf and does not use it to train its models. We also use Postiz to schedule posts on our own social media accounts; it handles only what we post.
  • Platforms we work through, such as Apple for App Store purchases and push notifications, and the social media platforms we publish on.
  • Professional advisers such as accountants, lawyers and insurers, under duties of confidentiality.
  • Authorities and others where the law requires it, or to protect the rights, property or safety of our users, the public or us.
  • A buyer or successor if our business, or part of it, is sold or reorganised, who must continue to protect your data as this policy describes.
  • Anyone else you ask us to share with.

7. Cookies And Analytics

Strictly necessary. Our websites use storage that they need to work: remembering your cookie choice and settings (such as appearance and language) and, on travelyfe.com, a secure http-only cookie that keeps you signed in. These do not need consent.

Optional, only with your consent. On ahmedmediagroup.com, Google Analytics (with IP anonymisation) loads only if you accept the cookie banner, to show us how the site is used. On the travelyfe.com home and install pages, the same applies to Google Analytics, our own analytics beacon and the Pinterest tag, which measures whether our Pinterest advertising leads to visits. If you decline, none of them load and any identifiers they stored are removed. We treat the Global Privacy Control signal as a decline. To change your choice, clear the site’s data in your browser and the banner will appear again.

Voice input. If you press the microphone button in our chat, your browser’s own speech recognition turns what you say into text (Chrome sends the audio to Google, Safari to Apple). We receive only the text you choose to send, never the audio.

Voice conversations. If you open voice mode in the contact chat, your browser records short clips while you speak and sends each one to Cloudflare Workers AI to turn it into text, and our spoken replies are made by Cloudflare Workers AI text to speech. We do not store or log the audio, and the clips are gone once the text comes back. If you decide to send a message to the team, only the details you confirm are emailed to us.

Without consent. Our forms use Cloudflare Turnstile to tell people from bots, and the site uses Cloudflare Web Analytics for anonymous page-view counts. Neither sets cookies or builds a profile of you.

In the Travelyfe app. Product analytics and crash reports are described in Section 20. You can switch analytics off at any time with Share Usage Data in Settings.

In the Convertable app. Product analytics and crash reports are described in Section 21. You can switch analytics off at any time with Share Usage Data in Settings.

You can also block or delete cookies in your browser settings; signing in to travelyfe.com needs the strictly necessary cookie.

8. Social Media

Our social media pages. When you follow, message, comment on or otherwise interact with our accounts on platforms such as TikTok, YouTube, Instagram, Facebook, Threads, Pinterest, LinkedIn and X, we see what the platform shows us, such as your public username, profile picture and what you post or send, and we use it to reply and to understand how our content performs. The platform processes your data under its own privacy policy; for page statistics on Facebook and Instagram, Meta and we are joint controllers under Meta’s Page Insights Controller Addendum.

Each platform’s own policy also applies: TikTok, Meta (Facebook, Instagram and Threads), Pinterest, LinkedIn and X.

9. International Transfers

We are based in the United Kingdom, and our providers may process data in the UK, the European Economic Area, the United States and other countries. Where personal data leaves the UK or EEA, we rely on appropriate safeguards: an adequacy decision (including the UK–US Data Bridge and EU–US Data Privacy Framework where the provider is certified), the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses. You can ask us for details.

10. How Long We Keep It

  • Accounts and their content: while your account is open; deleted or anonymised within 30 days after you delete it.
  • Enquiries and support messages: up to 2 years after the conversation ends, unless they become part of a customer or business relationship.
  • Mailing lists: until you unsubscribe; we then keep only your address on a suppression list so we never email you again.
  • Purchase, tax and accounting records: 6 years after the end of the financial year they relate to, as UK law requires.
  • Job applications: 6 months after the role is filled, unless you agree to us keeping them longer or you join us.
  • Business contacts: for as long as the relationship lasts and up to 6 years afterwards.
  • Internal records of messages and replies (our mailbox, spreadsheets and team notifications): as for enquiries and support messages above.
  • Security logs and crash reports: for the limited period our providers keep them, typically up to 90 days.
  • Backups: overwritten on a rolling basis.

We may keep data longer where needed to resolve a dispute, enforce our terms or comply with the law. Anonymised statistics that cannot identify you may be kept indefinitely.

11. How We Protect It

We use appropriate technical and organisational measures, including encryption in transit (HTTPS/TLS), encryption at rest where appropriate, on-device encryption of Travelyfe documents, access controls, two-factor authentication for our own accounts, least-privilege access and regular review of our providers. No system is completely secure, but we work hard to protect your data.

12. Data Breaches

If a personal data breach happens, we will contain it, assess the risk, and, where the law requires, report it to the Information Commissioner’s Office within 72 hours and tell the people affected without undue delay.

13. Your Rights

Depending on where you live, you have the right to:

  • access the personal data we hold about you and receive a copy;
  • correct data that is inaccurate or incomplete;
  • delete your data;
  • restrict how we use it;
  • object to processing based on legitimate interests, and to direct marketing at any time;
  • data portability: receive data you gave us in a machine-readable format;
  • withdraw consent at any time, without affecting what we did before.

To use any of these rights, use our contact chat. It is free. We may ask you to confirm your identity, and we will respond within one month (extendable by two months for complex requests, in which case we will tell you why).

14. Deleting Your Account And Data

  • Travelyfe: delete your account in the app (Settings → Delete Account). This removes your profile, itineraries, photos and documents as described in Section 10. You can download a copy first with Export My Data.
  • Convertable: delete your account in the app (Account → Delete Account). You can download a copy of your data first.
  • Anything else: use our contact chat, giving the email address we know you by, with the subject “Data deletion”. We will verify the request, delete the data, and confirm when it is done.
  • Messages and comments on our social media accounts: ask us through our contact chat, and also use the platform’s own tools, because the platform holds its own copy.

15. Automated Decisions And AI

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Where Travelyfe uses AI, it is to read places out of content you choose to import, and only when you switch that on (Section 20). We do not use your data to train AI models, and our AI provider does not either.

16. Children

Our Services are not directed to children under 13, and Travelyfe accounts are for people aged 13 and over (or the minimum age of digital consent where you live). We do not knowingly collect personal information from children under that age. If you believe a child has given us personal data, contact us and we will delete it.

17. United States Privacy Rights

If you live in California or another US state with a consumer privacy law, you have the right to know what personal information we collect, use and disclose, to access and delete it, to correct it, and to opt out of its “sale” or “sharing” for targeted advertising. We do not sell or share personal information as those laws define it, and we do not process sensitive personal information to infer characteristics about you. The categories we collect are listed in Section 3, the purposes in Section 4, the recipients in Section 6 and how long we keep it in Section 10. We honour the Global Privacy Control signal. To exercise your rights, or appeal a decision we make about a request, use our contact chat. We will not discriminate against you for exercising them.

18. Business Contacts And Job Applicants

If you work with us as a customer, partner or supplier, we use your business contact details to manage the relationship, pay and invoice, and keep required records. If you apply for a role, we use your application to assess you for it and to contact you; we will ask before contacting your referees or keeping your details for future roles.

19. Links To Other Sites

Our Services contain links to other websites and services, such as Viator, Apple, Google and social media platforms. We are not responsible for how they handle your data; please read their privacy policies.

20. Travelyfe

Travelyfe (on iPhone, iPad, Mac and at travelyfe.com) needs an account: you sign in with an email code, Sign in with Apple or Sign in with Google, and there is no guest mode. It relies on the following providers. Each receives only what it needs to do the job described.

  • Supabase (EU hosting): hosts your account (email address, name, username, profile photo), your itineraries, and the photos and documents you attach, and handles sign-in. Documents are encrypted on your device before upload.
  • Apple: if you choose Sign in with Apple, Apple shares the name and email address you authorise. Apple also delivers push notifications, and provides maps, place search, Look Around and weather (Apple Weather) in the apps; the places you look up and the destinations of your itineraries are sent to Apple to show maps and forecasts, and your device location is sent only when you allow it. When location is on, Travelyfe uses it to show nearby activities and to fill in the city an itinerary starts from; only that city name is saved, never your exact location.
  • Google: if you choose Sign in with Google, Google shares the name and email address you authorise. Directions you choose to open in Google Maps leave Travelyfe for Google.
  • RevenueCat (United States): manages Travelyfe Pro subscriptions and lifetime unlocks, identified by your Travelyfe account ID. Purchases in the apps are processed by Apple; purchases on the web are processed through RevenueCat’s web billing and its payment processor. We never receive your card details.
  • PostHog (EU hosting): product analytics showing which features are used. On travelyfe.com it runs in memory only and writes no cookie or device identifier; the apps keep a random analytics identifier on the device. Analytics are linked to your account so we can see how features are used across your devices, are never used for advertising, and are never sold. With Share Usage Data off in Settings, nothing is sent from that device or browser.
  • Sentry (EU hosting): crash and error reports, including device model, operating system and app version. The apps are configured not to attach your name or email address to them.
  • Resend (US company, sending from its EU region): sends sign-in codes and other transactional email to your email address.
  • Cloudflare (global network): hosts travelyfe.com and the Travelyfe API, handles the links, video frames and photos you send for an import while it is processed, and passes AI import requests to Anthropic through its AI Gateway. The gateway keeps request logs, which can include the content of the request, for troubleshooting and cost tracking, for a limited period.
  • Anthropic (United States, AI): when you ask Travelyfe to build an itinerary from a video, a link, photos or screenshots, or to scan a page or place onto a day, the content you chose (for example video frames, captions or subtitles, or the text of the page) is sent to Anthropic’s Claude model to read the places out of it. This only happens when you have turned on Use AI For Imports (asked during setup, off by default, and changeable at any time in Settings) and then start an import; with it off, nothing is sent and imports are unavailable. Anthropic processes it on our behalf and does not use it to train its models. Paste A Booking and the receipt scanner read your text on your device and do not use Anthropic.
  • Video and social platforms (TikTok, Instagram, Pinterest, YouTube and the site you link to): when you import from a link, our servers fetch that public post or page from the platform to read it. The platform receives the link from our servers, not your identity.
  • Viator (a Tripadvisor company): Travelyfe shows tours and activities from Viator. To search, our servers send Viator only the destination or search words and a currency; nothing that identifies you. Activity listings and “Book” links are affiliate links: if you open one, you leave Travelyfe for viator.com. Viator receives the click, including that you arrived from Travelyfe, and whatever you then enter on its own site, which it handles under Viator’s privacy policy. We do not send Viator your name, email address, account or itinerary data. We may earn a commission if you book, at no extra cost to you; any booking is made directly with Viator.
  • Image, place and currency data: to find destination photos we send only the place name to Openverse, Wikimedia Commons, Unsplash and Pexels; opening hours come from our own copy of OpenStreetMap data; to convert expense currencies we request exchange rates from Frankfurter and the open currency-api dataset. None of these requests carry your personal information.
  • Marketing tags (travelyfe.com home and install pages only, and only after you accept the cookie banner): Google Analytics, our analytics beacon (hosted on Convex, United States) and the Pinterest tag, as described in Section 7.

Your controls in Travelyfe: turn Use AI For Imports, Share Usage Data, location and notifications on or off in Settings; download a copy of your data with Export My Data (Settings → Delete Account); and delete your account in the app (Section 14). Itineraries you publish to Explore, or share with a link, can be seen by the people you share them with until you unpublish them, reset the link or delete them.

21. Convertable

Convertable (on iPhone, iPad and Mac) converts files on your device. The files you convert are not uploaded to our servers. You can use it without an account; you sign in to buy Convertable Pro. You sign in with your email address, using a link or a code we send you, and there is no password. It relies on the following providers. Each receives only what it needs to do the job described.

  • Supabase (EU hosting): holds your account (your email address, the name you choose to add, and your account ID) and the count of conversions used against the free allowance.
  • Resend (United States): sends you the sign-in email containing your link or code.
  • RevenueCat (United States): manages Convertable Pro subscriptions, identified by your account ID. Purchases are processed by Apple, and we never receive your card details.
  • PostHog (EU hosting): product analytics showing which features are used, identified by your account ID only, with no email address or name. With Share Usage Data off in Settings, nothing is sent.
  • Sentry (EU hosting): crash and error reports from the released app, which do not identify you.
  • Apple: delivers the app and processes purchases through the App Store.

Your controls in Convertable: turn Share Usage Data on or off in Settings, and delete your account in the app (Section 14).

22. Changes To This Policy

We may update this policy as our Services or the law change. We will change the “Last Updated” date above and, for material changes, tell you in the app or by email before they take effect.

23. Contact And Complaints

Questions, requests or concerns about this policy or your data? Use our contact chat and we will be glad to help. If you are unhappy with our response, you can complain to the UK Information Commissioner’s Office at ico.org.uk, or, if you live in the EU, to your local data protection authority.