GroupTripper Privacy Policy

1. Scope

This Policy covers information we collect when you:

• use the GroupTripper iOS/Android apps or website;
• create or access an account;
• plan trips, create itineraries, add suggestions, upload content, or otherwise interact with features; or
• contact us for support.

This Policy does not apply to third-party websites, apps, or services that you may access through links from the Service.

2. Information We Collect

We collect the minimum information needed to operate GroupTripper.

2.1 Account & Identity

• Identifiers: name, email address.
• Profile: avatar/photo (optional).
• Authentication: when you sign in with email/password or Google OAuth, we receive basic account information from your identity provider (e.g., name, email, profile photo). We do not receive your Google password.

2.2 App Content & Activity ("Trip Data")

• Trip & itinerary data: trip titles, dates, destinations, itinerary items (e.g., flights, meals, activities), notes, uploads, and any metadata you add.
• Suggestions & votes: places you add, edit, or vote on; scheduling choices; approvals.
• Collaboration: membership info and invited participants' emails (as provided by you).
• Uploads: photos/files you choose to upload.

2.3 Technical & Usage

• Device & log data: IP address, device type, OS version, app version, timestamps, error/crash logs, and basic usage diagnostics to keep the Service reliable and secure.
• Cookies/local storage (web): used for session management and preferences.

2.4 Location & Places

Searches & context: when you search for or enrich places, we may send queries (and, if provided, a location string) to Google Places API to return details like names, ratings, and photos. We do not continuously track GPS location; any location you provide is used only to power that feature.

We do not intentionally collect government IDs, financial account numbers, or other sensitive categories unless you explicitly provide them (which the app does not request).

3. How We Use Information

We use your information to:

• provide, maintain, and improve the Service and its features;
• personalize trip recommendations and organize your plans;
• enable collaboration across invited trip members;
• debug, prevent abuse, and secure the Service;
• communicate about important changes, security alerts, or support responses; and
• comply with legal obligations.

We do not use your data for targeted advertising.

4. Legal Bases (if applicable outside the U.S.)

Where required (e.g., EEA/UK), we process personal data based on one or more of the following: performance of a contract (providing the Service), legitimate interests (security, improvement), consent (where obtained), and compliance with legal obligations.

5. Sharing & Disclosure

We do not sell or share personal information as those terms are defined under California law (i.e., no cross‑context behavioral advertising).

We disclose information only to:

• Service Providers that help us operate the Service (hosting/runtime and backend platforms Rork and Base44, and Google Places API for place details). These providers are contractually bound to use the data only to provide services to us.
• Other users you invite to your trips (they can see content you choose to share within that trip).
• Legal/Compliance: if required by law, regulation, or to protect rights, safety, or integrity of the Service.

6. Data Retention

We retain personal information only as long as needed to provide the Service and for legitimate business or legal purposes. When you delete your account, we generally delete or anonymize account-linked content within ~30 days; limited backups and logs may persist for up to ~90 days after deletion and then roll off routine cycles.

7. Security

We use industry-standard safeguards, including encryption in transit and at rest where supported by our infrastructure and providers. No system is 100% secure; we encourage you to use strong, unique credentials and keep your devices updated. If you believe your account has been compromised, contact us immediately at support@grouptripper.app.

8. Your Choices & Rights

Access, Correction, Deletion

• In-app deletion: You can delete your account in the app (e.g., Profile/Settings → Account → Delete Account). Deleting an account removes your personal data from active systems within the retention windows above.
• Requests by email: You may request a copy of your data, correction, or deletion by emailing support@grouptripper.app.

California Privacy Rights (CCPA/CPRA)

California residents have rights to know/access, correct, delete, and to opt‑out of sale or sharing (not applicable here), and to limit use of sensitive personal information (not applicable as we don't use such categories). To exercise rights, use in‑app deletion or email us.

We provide the following categories at collection, for the purposes described in Sections 2–3: Identifiers (name, email), Profile (avatar), Internet/Technical data (logs/usage), and User content (trip data). We disclose these to Service Providers (Rork, Base44, Google Places API) solely to operate the Service.

9. Children's Privacy

GroupTripper is for users 13+. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us and we will delete it.

10. International Users

The Service is currently launched for the U.S. App Store. If you access the Service from outside the U.S., you understand that your information may be transferred to and processed in the United States (and by our U.S.-based processors). Where required, we use appropriate safeguards for such transfers.

11. Do Not Track

We do not respond to "Do Not Track" signals. We do not serve targeted advertising.

12. Changes to this Policy

We may update this Policy to reflect changes to the Service or laws. We will post the updated version with a new "Last Updated" date and, where required, provide additional notice. Please review this Policy periodically.

13. Contact Us

GroupTripper
Email: support@grouptripper.app