Privacy Policy

Who is responsible for your data

Tribe Trips is the data controller for the personal data described here. Contact us about anything on this page at privacy@jointribetrips.com.

What we collect

• Account info: email, display name, optional avatar, and how you signed in.
• Trip content you create: destinations, dates, members, chat messages, polls, flights, stays, costs, and settlements.
• Payments: handled by Paddle. We receive the result and transaction identifiers — never your card number.
• Receipts and tax invoices you upload: the file itself plus its name, type and size. These documents often contain other people's details — a supplier's name and address, a booking reference, the last four digits of a card — so please upload only what your group needs to settle the cost, and redact anything else. Everyone on the trip can see a receipt attached to a shared cost. We also record who uploaded, previewed, downloaded or removed each file.
• Technical logs: IP address, browser type and error diagnostics, used for security and debugging.
• Product analytics (only with consent): event names and a small fixed set of non-identifying properties. Free-form text, email addresses and trip content are never recorded in analytics.
• Beta feedback (only with consent): screen recordings, voice narration, written notes, and device/browser info you choose to send.

Why we are allowed to process it

Consent is never bundled. Declining beta recordings or analytics does not reduce your access to Tribe Trips in any way.

How long we keep it

We do not keep anything indefinitely. Where a longer period applies, it is because tax or accounting law requires it, and we strip personal fields from those records on erasure.

Beta feedback & recordings

Sharing recordings, voice narration or written notes is entirely voluntary and requires your separate, explicit consent, which you can withdraw at any time in Settings → Privacy. We use this material only to improve Tribe Trips. We do not share it with advertisers and we do not use it to train third-party models. It is visible to the founder and a small group directly helping analyse beta feedback, stored in a restricted-access folder, and deleted within 6 months.

Please don't include sensitive information in recordings or screenshots — payment card numbers, passport or ID details, real confirmation numbers, private addresses, health information, or anything else you wouldn't want a small product team to review. Use fake or scrambled data where you can.

Who we share it with

Trip data is visible to members of that trip. Your display name and avatar are visible to people you share a trip with. Beyond that, we share data only with the service providers below, each of which processes it on our instructions for the stated purpose. We do not sell personal data.

International transfers

We use Standard Contractual Clauses approved by the European Commission for transfers of personal data to Supabase (US), Paddle (UK/US), Google (US), Microsoft (US), and our other non-EU vendors, together with supplementary technical measures such as encryption in transit and at rest. You can request a copy of the relevant transfer mechanism by emailing privacy@jointribetrips.com.

No automated decision-making

We do not carry out automated decision-making that produces legal or similarly significant effects, and we do not build behavioural profiles of you or use your data for advertising or credit, insurance, or employment-related scoring.

Your rights

If you are in the EU, EEA or UK, you have the following rights. We respond within one month.

• Access: Get a copy of the personal data we hold about you.
• Rectification: Correct anything inaccurate or incomplete.
• Erasure: Delete your account and data — self-serve in Settings, or ask us.
• Restriction: Ask us to pause processing while a dispute is resolved.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on our legitimate interests.
• Withdraw consent: Turn off analytics or beta-recording consent at any time in Settings → Privacy. Withdrawal does not affect processing already carried out.
• Complain: Lodge a complaint with your supervisory authority. We would rather hear from you first, but you do not have to contact us before complaining.

You can find your national supervisory authority on the EDPB list of members. In the UK, that is the Information Commissioner's Office. In Australia, the Office of the Australian Information Commissioner.

Australia

We disclose personal information to overseas recipients in the United States, the United Kingdom, and Ireland. You consent to this disclosure. If you do not consent, do not sign up. This means Australian Privacy Principle 8.1 accountability for those overseas recipients does not apply to that disclosure, and those recipients may not be subject to the Privacy Act 1988. You may complain to the OAIC using the link above.

Cookies and local storage

We use browser storage that is strictly necessary to keep you signed in and remember your privacy choices — this does not require consent. Product analytics uses no third-party trackers and is only active after you opt in.

Deleting your account

You can delete your account at any time from Settings → Profile & account. That removes your profile, the trips you organised (with their itinerary, polls, costs and chat), your votes, comments, and consent records. On trips you only joined, your membership is removed and the trip stays for the other members with your name detached from shared records such as cost entries. Backups are purged on a rolling 30-day cycle.

Security

Data is encrypted in transit and at rest. Access to trip data is enforced at the database level by row-level security, so one trip's members cannot read another's. Administrative access is limited to the founder.

Contact

Questions, requests, or complaints — email privacy@jointribetrips.com.