This policy explains how Journey Rewards Inc., doing business as Journey, Journey Experiences and Epicurate ("Journey," "we"), handles personal information in Journey accounts, membership and loyalty services, journey.com and epicurate.vip, mobile apps, Journey Concierge and Threads, approved AI connections, and Journey-operated features on partner domains. The applicable effective date is shown in the policy publication or notice provided to you. This policy is a notice of our practices, not blanket consent to every use described here.
1. Who controls information
Journey controls information it uses for its own member relationship, account, program administration, service operations and permitted personalization. An Alliance Partner or other merchant controls information it uses for its own bookings, hospitality, custom loyalty program and independent marketing. When Journey operates software solely under a partner's documented instructions, Journey may instead act as that partner's processor or service provider for that processing. Roles depend on the particular purpose, not merely whose logo or domain appears.
A partner's notice applies to its independent processing. The Journey sharing screen and this policy describe Journey's processing and disclosure. Where joint-controller arrangements are legally required, the relevant notice will identify them and how to exercise rights. Journey network participation does not give every partner access to every member.
2. Information we collect and its sources
The information involved depends on the services you use and permissions you grant. We collect information you provide directly, information generated by your use of the service, transaction and fulfillment information from partners, and information from identity, payment, security, communications and other service providers. Connected accounts and Trusted Contacts supply information only within their authorized scope. Sources may also include a person lawfully booking or coordinating for you and public business or travel information used for research.
Account and contact information includes name, email, telephone number, member identifiers, authentication records, age/eligibility confirmation, residence or billing country, account settings, membership and consent records. We may request proportionate identity evidence when needed to prevent fraud or meet law; ordinary sign-in does not require an unrestricted identity-document collection.
Transaction and loyalty information includes bookings, purchases, itinerary details, participating guests, payments and refunds, merchant and location identifiers, points and awards, status, partner-program membership, benefit use and support records. Payment providers handle full payment credentials through the designated payment flow; Journey may receive tokens, last digits, billing details, payment status and fraud signals. Do not send full card numbers in ordinary chat.
Preferences and inferences include interests, preferred destinations, room and dining preferences, occasions, service requests and patterns derived from lawful interactions. These may support service personalization and relevant offer selection. An inference may be wrong; you may ask to correct or object to its use as provided below. We do not treat an inferred preference as verified identity or authority to transact.
Conversations and contributed content include prompts, messages, attachments, reviews, photographs, feedback, action approvals and confirmations. If voice or recorded support is offered, audio and transcripts are processed with the notice and consent required for that feature. A device's biometric unlock permission does not itself give Journey its underlying biometric template.
Technical and usage information includes IP address, browser/app and device characteristics, approximate location, pages and features used, referring domain, sign-in events, timestamps, cookies or similar identifiers, diagnostic logs and security events. Precise location, contacts, camera, microphone or photo access is limited to enabled features and applicable device and legal permissions. We do not assume that a device permission authorizes advertising use.
Connected-service information may include selected email, calendar, files, contacts or other account data only if you connect the source and grant the relevant scope. Trusted Contact information includes invitation details, identity/contact information, permissions, acceptance, revocation and permitted activity. We do not acquire an entire address book merely because you type a contact's name.
Sensitive information, such as allergies, accessibility needs or other health-related preferences, may be provided voluntarily for a specific service. We use and share it only with an appropriate legal basis and, where required, your explicit consent. We do not use sensitive information, private connected-account contents or private conversation contents as a default source for advertising audiences or partner marketing. Avoid providing information about children or other people beyond what a legitimate booking or service needs and what you may lawfully provide.
3. Why we use information
We use necessary information to create and secure accounts; verify eligibility; provide membership, bookings, payments, points and awards; administer partner relationships; respond to requests; provide enabled Concierge functions; and send appropriate account, transaction and legal notices.
We also use appropriate information to prevent fraud and abuse, investigate errors, enforce lawful agreements, comply with legal obligations, maintain records, protect people and systems, measure service performance, and improve features. Improvement can include analysis of deidentified or aggregated activity and controlled review of service interactions; it does not authorize unrestricted model training or disclosure of private content.
With the applicable legal basis and choices, Journey personalizes the experience and selects relevant offers, recommendations and communications based on preferences, membership, activity and permitted inferences. Partner-specific personalization and marketing sharing are described below. We do not use these purposes to bypass a consent requirement, a sale/sharing opt-out or an objection to direct marketing.
4. Partner-domain sign-in and active engagement
When you choose "Sign in with Journey" or a similar Journey account feature on an identified partner's domain, Journey processes the sign-in, partner/domain identifier, security events and permissions involved. Before sharing member information, the flow identifies the receiving partner and relevant purposes. Successful sign-in may provide the partner with the account identifiers, basic contact details, status and eligibility needed for the feature you requested, as disclosed at that point.
An "active engagement" means a deliberate action such as accepting a named partner-program enrollment, booking or transacting with that partner, redeeming its benefit, starting its service conversation, or approving a sign-in/sharing request for it. Merely appearing in an audience, browsing anonymously or being a Journey member is not active engagement with every partner.
Your active engagement directs the transaction and program information exchange necessary to that relationship. We may share relevant broader Journey profile fields to enhance your experience where explained in the interaction and supported by your settings and the applicable legal basis. For example, an engaged property may receive your disclosed room preference or an approved arrival request. Optional broader preference sharing is not required merely to maintain an account, and you can decline it without losing unrelated membership access.
An engaged partner may also receive permitted interests or audience indicators to tailor offers and messaging when that purpose is disclosed and allowed by your choices and law. This is not unrestricted access to other partners' purchases or your complete Journey history. Service-sharing direction is not automatic consent for the partner's email, SMS or other marketing. Separate marketing choices name the sender where required. A partner cannot rely on your Journey membership to obtain unrelated private information.
Journey and partners are expected to restrict authorized information to the disclosed purposes, apply appropriate security and honor applicable rights. A partner may retain its own lawful booking, tax or program records after you disconnect or it leaves the network. Disconnecting stops new optional sharing within our control; it does not erase a completed transaction or automatically delete independent records held by the partner. You may contact either controller about its processing.
5. Concierge, AI providers and Trusted Contacts
When you enable Concierge or Threads, we process the instructions, selected context, memories/preferences where enabled, outputs and action records needed to provide it. Authorized Journey personnel and service providers may review limited material for requested assistance, quality, safety, security, troubleshooting and compliance. We apply access restrictions rather than treating all conversations as visible to all partners or staff.
AI and hosting providers may process relevant inputs and outputs under service arrangements that restrict their use. We do not permit private member conversations, connected-account content or sensitive profile data to be used to train third-party general-purpose AI models without a separate, informed opt-in where offered. Optional model-training consent is not a condition of ordinary membership. Any material expansion of an optional training purpose requires an appropriate new notice and consent, not reliance on the general improvement clause.
Connected sources are accessed within granted scopes. An external assistant you choose to connect receives data within its approved Journey permissions and then handles it under its own policy. Review that provider's settings. Revoking a connection stops future authorized access but does not necessarily delete previously indexed information or records; deletion is a separate request, subject to lawful retention.
If Trusted Contacts is enabled, the member chooses the contact, information and permissions; the contact must accept the invitation and applicable terms. We share only within that recorded grant. Membership, a family relationship, or a name in an address book does not automatically confer access. Revocation limits future access but cannot recall information already received. Adding a partner or contact to a thread does not expose unrelated historical messages unless the member expressly authorizes the identified history. These features are not emergency monitoring services.
6. Other recipients and disclosures
Service providers may receive relevant information for hosting, identity, payments, communications, analytics, support, AI processing, security and other contracted functions, under applicable confidentiality, purpose and security restrictions. We disclose information to the supplier or recipient necessary to complete your approved transaction, message or delegated task. For a Viator- or Blacklane-sourced service, this includes the identified intermediary and operator, for booking, fulfillment, traveler communications, safety, refunds and dispute handling under the applicable notices. An Epicurate account is linked to a Journey account only through an identified, verified transition or linking process with appropriate notice and any required consent; the use of a shared brand does not silently expand old permissions.
We may disclose information where reasonably necessary to comply with law, a valid legal request, protect rights or safety, investigate fraud or enforce lawful agreements. In a merger, financing, reorganization or transfer of a business, information may be shared with appropriate safeguards and notices. We may share genuinely deidentified or aggregated information that is not reasonably linkable to you, and maintain safeguards against reidentification where required.
Advertising or analytics recipients may receive identifiers, device/use data and permitted audience information when the relevant feature is enabled and its legal prerequisites are satisfied. Such disclosure may constitute a "sale," "sharing" for cross-context behavioral advertising, or targeted advertising under some laws even without a cash payment. Member-directed fulfillment and restricted service-provider processing are distinct; labeling an activity "member-directed" does not make an otherwise regulated advertising disclosure exempt.
7. Your marketing, tracking and profiling choices
You can manage optional profile sharing, marketing channels and connections through available account/privacy controls or by contacting privacy@journey.com. Unsubscribe links stop the identified email marketing; reply STOP or use another reasonable revocation method for texts. We honor required broader suppression effects. Marketing withdrawal does not itself cancel membership or a booking. Necessary nonmarketing communications may continue through a permitted channel.
Use Cookie Preferences for optional tracking and the "Your Privacy Choices" or "Do Not Sell or Share My Personal Information" control where applicable. You can also email privacy@journey.com with that request. We honor legally recognized opt-out preference signals, including Global Privacy Control, for the browser/device and, where required and reasonably linkable, the account. Signing in, purchasing membership or using a partner site does not silently override your opt-out. Device advertising and app tracking permissions are additional controls, not substitutes for statutory choices.
We obtain consent before optional cookies, marketing or sensitive-data processing where required. You may withdraw consent without affecting prior lawful processing. Objections to direct marketing include related profiling. We do not make decisions with legal or similarly significant effects solely through automated processing without the safeguards and rights required by applicable law. You may request information, human review, correction or contest a decision where those rights apply.
8. Regional legal bases and privacy rights
Where EEA or UK law applies, we rely on contract necessity for requested account, subscription, booking and program services; legal obligations for required records and compliance; consent for processing requiring it; and legitimate interests, balanced against your rights, for proportionate security, fraud prevention, service improvement and permitted personalization. A marketing or cookie consent requirement is not replaced by calling the activity a legitimate interest. Sensitive information requires a separate applicable condition, such as explicit consent.
Depending on your location, you may request access/knowledge of personal information and categories of recipients, correction, deletion, portability, restriction, objection, withdrawal of consent, and opt-out of sale, sharing, targeted advertising or certain profiling. You may have a right to limit specified sensitive-information uses and to appeal a denied request. We will not unlawfully discriminate or retaliate for exercising privacy rights; a feature may be unavailable if it genuinely needs information you decline to provide.
Submit requests to privacy@journey.com, through the available privacy controls, or by calling +1 (888) 990-4712. We verify identity proportionately for requests requiring verification, not by demanding unnecessary sensitive documents. Authorized agents may act with the proof required by law. We respond within applicable deadlines and explain any lawful extension or denial. To appeal, reply to our decision or email privacy@journey.com with "Privacy appeal." You may also complain to your relevant privacy regulator, including an EEA supervisory authority or the UK Information Commissioner's Office, or contact your state attorney general where applicable.
For California residents, the categories described in Section 2 cover identifiers, customer/transaction records, commercial information, internet/electronic activity, geolocation, audio/visual content when provided, inferences and sensitive personal information where relevant. Sections 2–6 describe sources, purposes and recipient categories. We do not knowingly sell or share personal information of people under 16. The service is intended for adults. Applicable notices at collection and privacy-choice disclosures provide any more specific processing, retention and advertising details required for the particular feature.
Loyalty membership does not require blanket consent to sell or share personal information. Where a specific optional offer legally constitutes a financial incentive or price/service difference related to personal information, we provide the required separate notice before enrollment, including material terms, information involved, how to withdraw and a good-faith explanation of value. General acceptance of this policy is not enrollment in such an offer.
9. Retention, deletion and security
We retain information for as long as reasonably necessary for the stated purpose, considering account activity, the service or booking lifecycle, consent records, legal accounting and tax duties, limitation periods, security investigations and legitimate dispute needs. Different categories have different periods; retaining a transaction record does not justify retaining every conversation indefinitely. We delete or deidentify information when its purpose and lawful retention basis end. Backups may be removed on their normal cycle and isolated from ordinary use while awaiting deletion.
You can request account or content deletion. Account closure, conversation deletion, memory deletion, connector disconnection and subscription cancellation have different effects, explained in the relevant flow. We may keep limited records to comply with law, resolve disputes, prevent fraud and honor opt-outs. We do not promise deletion from independent recipients' systems; we forward requests or notify recipients when law requires.
We use reasonable technical and organizational safeguards appropriate to the information and risk. No system is completely secure. Protect credentials, check recipients and report suspected account misuse promptly. We will provide breach notifications when required by law.
10. International processing and children
Journey is based in the United States, and information may be processed there and in other countries where authorized service providers or engaged partners operate. Local laws may differ. Where required, transfers use an applicable lawful mechanism, such as approved contractual safeguards or another legally available basis. Ask privacy@journey.com for information about the applicable safeguards and a copy where available, subject to appropriate redaction.
Journey account membership and Concierge are intended for adults at least 18 and of legal majority. We do not knowingly allow children to create member accounts. An authorized adult may provide limited child guest information needed for an eligible family booking, with required authority and safeguards; this does not enroll the child in marketing or create a child account. If you believe a child has created an account or supplied information unlawfully, contact privacy@journey.com so we can investigate and take appropriate action.
11. Changes and contact
We provide advance notice of material privacy changes where required and obtain consent for new purposes where required. A new policy will not retroactively override existing consent restrictions or grant an engaged partner access to previously private data. Continued use is not treated as consent where affirmative consent is required.
Contact: privacy@journey.com or +1 (888) 990-4712. Mail: Journey Rewards Inc., Attn: Privacy, 447 Broadway, Suite 2661, New York, NY 10013, United States. Legal notices: legal@journey.com.