Privacy policy
Viatica is a travel-order and expense-reporting application that companies install for their own staff. This policy explains what data the app handles, where it stays, and who to ask about it.
Who answers for your data
Your employer. Every Viatica installation belongs to a single company and runs on the server that company chose. Your trips, your expenses and the photos of your receipts are stored there and go nowhere else. The data controller is the company you work for, under the privacy notice it gave you as an employee.
TXM Global develops and publishes the application. Where it also operates the server on a company's behalf, it acts as a processor and only on that company's instructions. TXM receives no copy of the data held in an installation it does not operate.
What the app handles
- Your work identity: name, work email, and the role your administrator assigned. You do not create the account — it is created for you.
- Your trips and expenses: destination, dates, amounts, categories, notes, and the receipt photos you take.
- The server address you typed when connecting.
All of it travels encrypted (HTTPS) to your company's server and to no other. The app sends nothing to TXM, to an analytics service, or to an advertising network.
What stays on your phone
- Session credentials, in the system keystore (Keychain on iOS, Keystore on Android) rather than ordinary storage.
- Expenses and photos captured with no signal, until they are sent. The app deletes its local copy of a photo once the server confirms it arrived.
Uninstalling the app takes all of it with it.
Permissions it asks for, and why
Camera — to photograph a receipt while you are still holding it.
Photos — to attach a receipt you had already saved.
Photos are taken without EXIF metadata: the app neither stores nor sends where they were taken. Viatica asks for no location, contacts or microphone permission, and does not read your calendar or your messages.
Signing in with Google
If your company enables it, you can sign in with your Google account. The app then opens the phone's browser against your company's own server, and it is that server which talks to Google: the app never contacts Google directly and never sees your password. What happens inside that browser session is governed by Google's policies.
What we do not do
- We do not sell or share personal data with third parties.
- No advertising, no profiling, no tracking across apps or websites.
- No analytics or attribution SDK inside the app.
- We do not use your data to train models.
How long data is kept
Your company decides, and it is usually required to keep expense substantiation for tax periods. Viatica does not delete the record of a trip on its own.
Your rights, and how to exercise them
You have the right to access, correct, delete or object to the processing of your data, and to withdraw consent. Because the information lives on your employer's server, the route is your company's HR or administration team, or the contact named in the privacy notice it gave you. Your Viatica account is likewise created and closed by your company; accounts are not created or deleted from within the app.
Children
Viatica is a work tool and is not directed at children. We do not knowingly collect data from anyone under 18.
Security
Traffic is encrypted with TLS, passwords are hashed and never stored in the clear, and sessions expire and can be revoked. No measure is absolute: if something looks wrong with your account, tell your administrator.
Changes to this policy
If it changes, the date above changes with it, and the version in force is always the one on this page.