This Privacy Policy describes how Through Worlds, Inc. (“Dunia”, “we”, “us”, or “our”) collects, uses, and protects your personal data when you use the Dunia mobile application and related services (the “App” or “Services”). This policy applies to users worldwide and aligns with major data protection regulations, including the General Data Protection Regulation (GDPR) and U.S. state privacy laws.
1. What Information Do We Collect?
We may collect or receive the following types of personal data when you use Dunia:
a. Information You Provide
- Name
- Email address
- Phone number
- Passport or ID information (only when required for bookings)
- Payment information (processed securely by our providers)
- Conversation content — messages, voice communications, and materials you share with Dunia through any channel, including the app, messaging platforms, email, and voice, as well as feedback, inquiries, and support messages
We do not use your voice recordings to create voiceprints or other biometric identifiers.
b. Information We Collect Automatically
- Location data (e.g., GPS or IP-based)
- Device details (model, OS, browser type, unique device identifiers)
- App usage (features used, pages visited, time spent)
- IP address and cookies
c. Information from Third Parties
- Travel or booking partners
- Social or login integrations (if enabled)
- AI agents or assistants you have authorized to act on your behalf. Where we receive your information this way, the agent is required to have your authority to provide it, and this Privacy Policy is how we inform you of our processing.
2. Why Do We Use Your Information?
We use your data to:
- Create and manage your user account
- Help you discover and book personalized travel experiences
- Send booking confirmations, reminders, and updates
- Improve the app’s functionality and user experience, including through quality analysis of recorded calls and chats
- Prevent fraud and ensure secure transactions
- Comply with legal obligations
- Provide concierge services through conversational channels, including generating responses using AI systems
Automated processing. Our concierge services use AI systems to prepare recommendations and responses. We do not make solely automated decisions that produce legal or similarly significant effects on you; meaningful human review is available, and a booking is only confirmed in accordance with our Terms of Service.
3. Legal Basis for Processing (for EU/UK Users)
We process your data under the following legal grounds:
- Contractual necessity – e.g., to complete your bookings
- Consent – e.g., for marketing or location tracking
- Legitimate interests – e.g., to improve our service
- Legal obligation – e.g., for fraud prevention or ID verification
5. International Data Transfers
Your data may be transferred to and stored in countries outside your own, including the U.S. and EU. Where required, we use legal safeguards such as Standard Contractual Clauses (SCCs) to protect your information.
7. Your Rights
Depending on your location, you have rights such as:
- Access – see what data we hold
- Correction – fix errors in your data
- Erasure – request deletion
- Objection – stop certain types of processing
- Portability – transfer your data elsewhere
To exercise your rights, email us at: [email protected]
We respond to verified requests within 30 days, or as otherwise required by applicable law.
You may also have the right to complain to your local data protection authority.
8. Account and Data Deletion
You have the right to request deletion of your Dunia account and associated personal data at any time. Upon receiving a valid request, we will:
- Delete your user account, removing access to our Services.
- Permanently delete or anonymize all personal data associated with your account, unless we are required to retain it under applicable law (e.g., for tax, fraud prevention, or legal obligations).
- Confirm the deletion via email once the process is complete.
To request account and data deletion, please email us at [email protected] using the subject line: “Data Deletion Request”. For verification, we may ask you to confirm your identity before processing the request.
Please note:
- Deletion is permanent and cannot be undone.
- Some booking- or transaction-related data may be retained temporarily or permanently by third-party providers (e.g., Stripe, hotels, airlines) according to their own privacy and legal policies.
9. Children’s Privacy
Dunia is not intended for users under 18. We do not knowingly collect information from anyone under 18, except where an adult member provides details of minor travellers as part of a booking, which the adult provides under their own authority and consent.
Minor Travellers. Minors cannot hold Dunia accounts. Where an adult member provides details of a minor traveller (for example, a child’s name, date of birth, or passport information) as part of a booking:
- We collect only what the travel provider requires to fulfil the booking.
- We do not use minors’ data for marketing, profiling, or advertising, and we never sell or share it.
- The adult providing the details confirms they are the minor’s parent or legal guardian (or otherwise authorized to act for them).
- Travel documents provided for minors are deleted or anonymized within 90 days after travel is completed, unless a provider or law requires us to keep them longer.
- The adult account holder may request access to, correction of, or deletion of a minor traveller’s data at any time through the channels described in Section 7.
10. Data Security
We use industry-standard security practices to protect your data. These include:
- Encryption
- Access controls
- Firewall protection
- Regular audits and employee training
If a security incident affects your personal data, we will notify you and the relevant authorities as required by applicable law.
11. Data Retention
We keep your data only as long as needed to provide our services or meet legal obligations. When no longer required, we securely delete or anonymize it. Conversation records (including chat transcripts and voice communications) are retained for 5 years to provide continuity of service, maintain your preferences, and meet our legal and security obligations, after which they are deleted or anonymized.
As a guide: booking and transaction records are kept for up to 7 years for tax and accounting purposes; marketing preferences are kept until you withdraw consent; and minor travellers’ documents are deleted within 90 days after travel is completed (see Section 9).
12. Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be communicated via the app or email.
13. Contact Us
If you have any questions or concerns:
- Email: [email protected]
- Address: Through Worlds, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, US