Privacy Policy

Information we collect

We collect information you provide and information produced when you use the service:

• Account and profile information: name, username, verified phone number, Firebase identity ID, optional email address, profile photo, bio, location, website, date of birth, gender, languages, and travel preferences when you choose to provide them.
• Trips and community content: trip locations, dates, meeting details, budgets, preferences, posts, photos, comments, follows, join requests, and other content you submit.
• Messages and notifications: chat messages, message status, notification activity, and device tokens used for push notifications when that feature is enabled.
• Expense information: group names, participants, expense descriptions, amounts, payers, shares, settlements, and payment-mode labels you enter.
• Technical information: authentication cookies, request and error logs, IP address, browser or device information, and timestamps used to operate and protect the service.

How we use information

We use personal information to:

• Create accounts, authenticate users, and maintain secure sessions.
• Provide profiles, trips, posts, messaging, notifications, and expense-splitting features.
• Send service emails such as trip, account, or expense notifications.
• Respond to support, privacy, safety, and abuse reports.
• Monitor reliability, troubleshoot problems, prevent misuse, and protect users.
• Meet legal obligations and enforce applicable service rules.

Depending on the applicable law and context, processing may be based on providing the service you request, your consent, legitimate service and security interests, or a legal obligation.

How information is shared

Information may be shared in these limited situations:

• With other users: profile details and content are shown according to their visibility settings. Approved trip members may see private trip details needed for coordination.
• With service providers: hosting, database, reverse proxy, Firebase authentication and SMS delivery, email delivery, storage, and push-notification providers may process information only to provide their configured services.
• For safety or legal reasons: information may be disclosed when reasonably necessary to comply with law, protect the service, investigate misuse, or protect a person's rights and safety.
• During an organizational change: information may be transferred as part of a merger, financing, acquisition, or sale, subject to appropriate notice and safeguards.

Cookies and sessions

Etripoo uses strictly necessary authentication cookies to keep you signed in, refresh your session, and protect account access. The current application does not use advertising cookies. If analytics or other optional cookies are introduced, this policy and any required consent controls will be updated before they are used.

Retention and security

We retain information while it is needed to provide the service and for legitimate security, dispute-resolution, backup, and legal purposes. Retention depends on the type of information, why it is needed, and applicable requirements. Content you delete may remain temporarily in backups or logs before routine deletion.

We use administrative and technical safeguards designed to protect information, including verified one-time-code authentication, access controls, secure session cookies in production, HTTPS, and restricted database access. No online service can guarantee absolute security.

Account and data deletion

Etripoo provides a transparent and straightforward way for you to delete your account and associated personal data at any time.

1. How to request deletion

You can initiate a deletion request through either of the following methods:

• In-app deletion: Navigate to Profile > Delete Account. From your authenticated session, type "DELETE" to confirm the request.
• Email request: Contact our support team at admin@etripoo.com from your registered email address with the subject line "Account Deletion Request". Please include your registered phone number for verification.

2. Types of data deleted

Upon your request, the following data will be permanently removed from our active databases:

• Identity information: your name, username, phone number, email address, bio, and profile picture.
• Social content: all trips you have organized, posts you have shared, and photos uploaded to the platform.
• Community interactions: your comments on other users' posts and your join requests for various trips.
• Group activities: your membership and balance records in expense-splitting groups.

3. Data retention and recovery period

• The 30-day window: To prevent accidental deletion, your account is first placed in a "Pending Deletion" state for 30 days. During this time, your profile and content are hidden from all other users. You can cancel the deletion request at any time during these 30 days by logging back into the app and selecting "Restore".
• Permanent removal: After the 30-day period expires, your data is permanently purged from our servers.
• Legal and audit exceptions: We may retain minimal, non-identifiable transaction logs or basic audit trails as required by law or for legitimate security purposes, such as fraud prevention, but this data will no longer be associated with your identity.

Your choices and privacy rights

You can update many profile and visibility settings in the service and delete supported posts or trips. Depending on where you live, you may also have rights to request access, correction, deletion, a copy of your information, restriction or objection to some processing, or withdrawal of consent. Some requests may be limited where retention is required by law or needed to protect other users.

To make a request, contact us using the details below. We may need to verify your identity before completing it.

International processing

Service providers may process information in countries other than your own. Where required, the service operator will use appropriate safeguards for international transfers.

Changes to this policy

This policy may be updated when the service, providers, or legal requirements change. The updated date will be revised, and material changes will be communicated through the service or another appropriate channel.