Privacy policy

Effective date: 20 October 2026 · Last updated: 20 October 2026

Discretion is the heart of MAVE. This policy explains, in plain terms, what we collect when you visit maveworld.com, request an invitation, or use the MAVE app; why we collect it; who sees it; and the choices you have. It applies to the website, the app and our concierge services.

1. About MAVE

MAVE is a private membership, lifestyle management and concierge service. It arranges travel, hospitality, reservations, experiences and private opportunities for its members.

• Operator. MAVE is operated by MAVE SAS, a sociedad por acciones simplificada incorporated in the Oriental Republic of Uruguay. In this policy it is "MAVE", "we", "us" or "our". It is a Swiss–Uruguay joint venture, combining operations in Uruguay with Swiss commercial participation.
• Technology. The technology behind MAVE is licensed from Bregway LLC, a company incorporated in Delaware, United States, under a separate software licence.
• Controller. Unless this policy or a service-specific notice says otherwise, the operating company is the controller responsible for personal information processed through the MAVE website, the app and our concierge services.

2. How MAVE is organised

MAVE works through three distinct relationships. Each one has its own role in handling your information.

• MAVE SAS, the operating company in Uruguay. It runs MAVE: membership, concierge services, coordinating partners and suppliers, member relationships, and privacy compliance. It generally decides why and how member information is processed.
• Our Swiss joint-venture partner. It may provide commercial development, business relationships, supplier coordination or other agreed services. Being part of the joint venture does not give it unrestricted access to member information, and it does not automatically make it a joint controller.
  • Where it processes information only on our documented instructions, it acts as our processor.
  • Where it decides the purpose of processing itself, it is an independent controller.
  • Where both companies jointly decide the purposes and means of a particular activity, they put a joint-controller arrangement in place and tell the people affected who is responsible for what.
• Bregway LLC, our technology licensor. It licenses the MAVE software and may provide development, hosting coordination, maintenance, security, integrations and technical support. When it processes member information for us, it does so under a data-processing agreement and our documented instructions. The licence gives it no right to use member information for its own purposes, and its ownership of the software is separate from our responsibility for your information.

3. Information we collect

What we collect depends on how you use MAVE. We ask only for what we need for a clear purpose.

When you request an invitation on maveworld.com

• What you type into the form: your first request, your name and email address and, if you add them, your phone number and the name of the person who introduced you.
• Where needed and lawful, information to verify your identity before membership is granted.

When you use the app as a guest, before signing in

You can make a request and read a proposal without an account.

• What we keep: your typed or spoken request, the proposal we prepare, and a device identifier that links them to your device.
• When you sign in or join: the request moves to your account.
• If you don't: it is deleted after the retention period in section 15.

When you speak a request

• The recording: holding the V records your voice while you hold it.
• The transcript: we convert the audio to text so we can arrange your request, and we keep the transcript with that request.
• The audio itself: not kept. It is sent securely to our speech-recognition provider, turned into text, and then discarded. It is never used to train AI models.
• Not used to identify you: we don't use your voice to recognise who you are.
• If our transcription service is unavailable: the app may use your device's built-in speech recognition instead, which Apple or Google provides under its own privacy terms.
• Permission: the app asks for microphone and speech-recognition permission first, and you can withdraw it at any time in your device settings.

When you sign in, join or hold a membership

• Your name, email address, telephone number and country of residence.
• Sign in with Apple: the name and email address Apple shares with us, which can be a private relay address that Apple forwards to you. We also keep Apple's identifier for your Apple ID and the sign-in token Apple issues. When you delete your account, we ask Apple to revoke that token.
• Joining: the invitation code you use, and who issued it.
• Membership status, member number and the date you joined.

When we arrange things for you

• Your requests, the proposals we prepare and the arrangements you confirm.
• Travel, accommodation, transport, dining and experience preferences.
• Itineraries, reservation details and the names of guests travelling with you.
• What you ask us to remember in your profile, such as seats, rooms, tables and the people you travel with.
• Account settings: your home city, language and notification choices.

When you use Opportunities

• Pieces you show interest in.
• What you offer: details of anything you offer for sale, such as a car or a watch.
• What you're looking for: details of anything you ask us to find.
• Your alert choices by category.

Payments and transactions

The app does not take payment in this version. Confirming a proposal sends the details to us and the relevant partners; nothing is charged in the app. Where you later pay for services we arrange, we keep the transaction references, invoices, payment status and refund records. We receive only limited payment information from authorised payment providers.

Communications

Messages you send through the app, the website, email or other channels we use with you; requests to our team; and feedback.

Technical information

• Device and connection: device type, operating system, app version, IP address and sign-in records.
• Notifications: a push-notification token, if you allow notifications.
• Approximate location: the city you're in when you make a request, so a trip with no starting point named leaves from where you are. In the app it comes from your device's location if you allow it, rounded to about 10 km before it leaves your phone; otherwise from your internet connection. We keep the city, not your position.
• Security: security logs and error reports.
• Usage: basic information about how the website and app are used.

We collect information from you directly and, where appropriate, from people acting for you, the member who introduced you, our partners and service providers.

4. Why we use it, and on what grounds

We use personal information to:

1. review invitation requests and invitation codes, and grant membership;
2. set up and run your account, including sign-in;
3. understand your requests, including spoken ones, and prepare proposals;
4. arrange the travel, reservations, transport, hospitality and experiences you confirm;
5. remember your preferences, so each request asks a little less of you;
6. run Opportunities: show you pieces, pass on your interest, handle what you offer or ask us to find, and send the alerts you choose;
7. communicate with you, the people acting for you, and our partners and suppliers;
8. send service notifications, such as confirmations and wheels-up reminders, if you allow them;
9. administer transactions, invoices and refunds where they apply;
10. keep MAVE secure, and prevent fraud, misuse and unauthorised access;
11. maintain and improve the quality of our service;
12. meet our legal and regulatory obligations;
13. send membership news and, where the law allows, promotional messages you can opt out of at any time.

Legal grounds. Which ground applies depends on the activity and the law where you are. It may be:

• Contract: to provide the membership and services you ask for.
• Consent: for example for voice processing, push notifications, optional cookies or marketing. You can withdraw consent at any time.
• Legal obligation: for example tax and accounting records.
• Legitimate interests: for example security and service quality, where the law allows.

5. Discretion: what partners see

Partners see only what they need to deliver. When you confirm an arrangement, we send each partner only what it needs for its part.

• Example: an airline or aircraft operator receives the passenger names and travel documents it is legally required to hold.
• Example: a restaurant receives the name on the booking and any dietary note you give us.
• What partners don't receive: your membership, your other requests or your wider profile.

We do not sell personal information. We do not publish member lists. We do not share your requests with anyone for their own marketing. Within MAVE, only people and providers who need your information to serve you can access it.

6. Sharing within the joint venture

We may share information between our Uruguay operations and our Swiss partner where it is reasonably needed to deliver agreed services, run the commercial relationship or meet legal obligations. These arrangements are governed by confidentiality, data-protection and contractual safeguards. Taking part in the joint venture does not give anyone unrestricted access to member information.

7. Bregway LLC and our technology providers

Bregway LLC may access personal information where needed to run, secure, maintain, troubleshoot or integrate the platform.

• Rules on that access: contractual restrictions, access controls and confidentiality.
• What Bregway may not do: sell member information, or use identifiable member requests to build unrelated profiles or products. Any use beyond supporting MAVE would need its own lawful basis and notice.

We also rely on carefully chosen providers, who process information on our instructions:

The current list is always available from members@maveworld.com.

8. Partner houses and suppliers

To fulfil what you ask for, we share the relevant details with the people who deliver it. These may include:

• hotels, villas and other places to stay;
• airlines, private aviation operators and ground transport;
• restaurants, venues and event organisers;
• yacht charter companies, travel agencies and destination specialists;
• wellness and experience providers;
• in Opportunities, the house holding a piece you show interest in, or the buyer or seller we introduce you to.

These partners usually act as independent controllers under their own privacy notices. Some may ask for more information, such as passport details for a flight, where the law requires it.

9. Payments

The app does not take payment in this version.

• How you pay: for services we arrange, payment may be made to us, through an authorised payment provider, or directly to the supplier. The terms of each arrangement say who you are paying.
• Card details: card payments are handled by the payment provider under its own security and regulatory obligations. We do not store full card numbers or security codes.
• What we keep: confirmations, references, payment status, invoices and refund records, for operational and legal reasons.

10. Our intelligence systems, and your voice

MAVE uses artificial intelligence to help our team understand and arrange requests. In the app these systems appear by name:

• Aoide listens to your request and turns it into text.
• Medusa turns it into one plan.
• Metis finds the right partners.
• Mneme remembers your preferences.

The principles behind them:

• You decide. Our systems compose proposals, but nothing is booked, sent to a partner or paid for until you confirm. A person on our team oversees every arrangement.
• Model providers. When we use outside AI providers, they process your information under contract and only to provide the service to us. We do not let them use identifiable member requests or recordings to train their general-purpose models.
• Your profile. What Mneme remembers is shown in Account → Your profile. You can correct or delete it there, or ask us to.
• No automated decisions. We do not make decisions with legal or similarly significant effects about you by automated means alone. If that ever changes, we will tell you and offer the rights the law gives you.

11. Sensitive information

Some requests involve sensitive information. Examples are an accessibility or medical need, or a dietary requirement that reveals health or religion. We use it only where needed for your request and where the law allows, and we apply any extra consent or safeguards the law requires. Please share sensitive details only when they matter to what you ask for.

12. Other travellers and guests

When you tell us about family members, guests or travel companions, please make sure you are entitled to share their details. We use them only to arrange the service, protect them as we protect yours, and inform them directly where the law requires.

13. International transfers

MAVE works across borders, so your information may be stored in or accessed from countries other than your own.

• Where it is stored: our app and our database run in the European Union, in Frankfurt, Germany.
• Where it is accessed from: MAVE SAS manages it from Uruguay, and our Swiss partner works with it in Switzerland. Technology support and some providers are in the United States. Partners are wherever your arrangements take place.
• Safeguards: when information moves across borders, we follow the law that applies, through adequacy decisions, standard contractual clauses, required registrations or notifications, and other recognised safeguards.
• Uruguay: for transfers subject to Uruguay's data-protection law, we provide the information that law requires: the destination, the recipient's role, the purpose, the legal basis and how long the transfer lasts.
• Switzerland and Europe: for transfers subject to Swiss or European rules, we use the adequacy frameworks or contractual safeguards those rules recognise.

Ask members@maveworld.com for details of a particular transfer.

International transfer register

For each transfer, the register shows:

• where your information goes;
• who receives it, and in what role;
• what is sent, and why;
• the legal basis under the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP);
• how long it lasts.

Safeguards for the United States.

• Certified recipients. Where a recipient is certified under the EU–US Data Privacy Framework, we rely on the European Commission's adequacy decision of 10 July 2023. For Swiss data, we rely on the Swiss–US Data Privacy Framework.
• Other recipients. We use the European Commission's Standard Contractual Clauses (Decision (EU) 2021/914), with the changes the FDPIC requires for Swiss data. We assess each transfer before it starts.
• US providers holding data in Europe. Vercel, Supabase and Resend are US companies. If their staff access your information from the United States, the same safeguards apply.

14. Cookies and similar technologies

• Website: maveworld.com uses only what it needs to work and stay secure. Our fonts are hosted by us, so a visit does not send your information to a font service. We do not use advertising or analytics cookies.
• App: the app keeps your sign-in session and settings on your device. It sends notifications only if you allow them.

15. How long we keep information

We keep information only as long as it serves the purposes in this policy, or as long as the law requires. Then we delete or anonymise it securely.

These periods follow common practice under the GDPR and the Swiss FADP. Where a law requires us to keep something longer, or we need it to establish or defend a legal claim, we keep it only for that purpose.

16. Security

We protect personal information with technical and organisational measures suited to its sensitivity. These include encryption in transit, access limited to those who need it, strong authentication, confidentiality obligations and system monitoring. Our providers must apply safeguards that match their role. No system is entirely without risk. If a security incident affects your information, we act promptly and notify you and the authorities where the law requires.

17. Your rights and choices

Depending on where you live, you may have the right to:

• know how your information is used;
• access it;
• correct it;
• delete it where the law allows;
• object to or restrict some processing;
• withdraw consent;
• receive your information in a portable form;
• exercise rights about profiling or automated decisions;
• complain to a data-protection authority.

Choices in the app

• Delete account. In Account, this deletes your account and personal information, apart from what the law requires us to keep.
• Your profile. Edit or clear what we remember in Account → Your profile.
• Notifications. Turn them on or off in Account or in your device settings, and choose your opportunity alerts by category.
• Microphone. Revoke access in your device settings at any time; you can still type your requests.

Other requests. Write to members@maveworld.com. We may need to confirm your identity first, and we reply within the time limits the law sets.

Authorities. You can also contact Uruguay's Unidad Reguladora y de Control de Datos Personales (URCDP), the Swiss Federal Data Protection and Information Commissioner (FDPIC), or the supervisory authority where you live in the European Union.

18. Children

MAVE is for adults. Members must be at least 18, and we do not knowingly accept membership requests from anyone younger. We handle information about children only where needed to arrange family travel or services, with appropriate care.

19. Other platforms

MAVE may link to partners' websites, payment pages, messaging services and booking systems. They run independently under their own privacy policies, so please read them before giving those services information directly.

20. Changes to this policy

We may update this policy as our services, structure, technology or the law change. The current version always lives at https://maveworld.com/privacy, with its date at the top. If a change is significant we will tell you in the app or by email, and ask for consent where the law requires.

21. Contact and legal information

For privacy questions about MAVE membership and concierge services, contact the operating company first, unless this policy names a different controller for a specific activity.

MAVE — a private world, intelligently arranged.