Legal
Privacy policy
Placeholder — not publishable. Both the App Store and Google Play
require a live privacy policy URL before you can submit, and this page must be
written against what the app actually collects and reviewed by someone qualified.
The headings below are the sections you need to cover.
Who we are
Data controller identity and contact address.
What we collect
- Account data — email address, authentication credentials
- Trip content — trips, expenses, participant names, amounts, and any contact details you enter for other people
- Payment data — handled by Stripe; card details never reach our servers
- Technical data — device and diagnostic information
Why we can use it
Lawful basis for each purpose (contract, legitimate interests, consent).
Contact details you enter about other people
Adding a friend by email or phone means processing someone else's personal data. State what happens to it, whether it is used to send an invitation, and how that person can have it removed.
Where the data lives and for how long
Hosting region, sub-processors, retention periods.
Your rights
Access, correction, erasure, portability, objection, and how to complain to a supervisory authority. Link to account deletion.
Changes to this policy
How changes are notified, and the date this version took effect.