TripTogether Privacy Policy

1. Scope and Controller

This Privacy Policy applies to the TripTogether mobile application (package com.maor1.trip_together) and related services. TripTogether is developed and published by KeyQuest Studio / 1ClickSoft ("TripTogether," "we," "us," or "our").

2. Information We Collect

Account and profile information

When you create or use an account, we may process your Firebase user ID, name, email address, optional profile photo, optional phone number, account creation time, and the identifiers of trips associated with your account. If you use Google Sign-In, Google provides your name, email address, profile photo, and authentication credentials. Guest use creates an anonymous Firebase account identifier.

Trip and collaboration content

We store information you or group members add to the service, including trip titles, destinations, descriptions, travel dates, group type, invite codes, membership, planned activities, addresses, schedules, votes, chat messages, reactions, and the name of the person who added content.

Photos and location information

If you choose to share a profile photo or a trip photo, the selected image is uploaded to Firebase Storage. TripTogether uses the system photo picker and does not request broad access to your modern Android photo library. If you grant location permission or attach a place to content, we may process precise or approximate coordinates, a place name, and destination coordinates. Location is used for maps, nearby content, trip planning, weather, safety, and shared trip moments; it is not used for advertising.

Device and service information

If you enable notifications, we store Firebase Cloud Messaging registration tokens linked to your account so trip chat notifications can reach your devices. Firebase App Check and service providers may process device, app, network, integrity, diagnostic, and security information needed to protect and operate the service. Local preferences, generated PDFs, and cached content may remain on your device.

Purchase information

If premium purchases are available and you use them, Google Play and, when configured, RevenueCat process purchase status, product identifiers, receipts, and a service-specific customer identifier. We do not receive or store your full payment-card details.

3. How We Use Information

• create and authenticate accounts, including Google Sign-In and guest access;
• sync trip plans and enable invitations, membership, voting, chat, photo sharing, and collaboration;
• show maps, destination information, weather, travel advisories, events, and recommendations;
• send requested reminders and trip-chat notifications;
• provide premium features, restore purchases, and verify entitlements when billing is enabled;
• secure the app, enforce access rules, prevent abuse, troubleshoot failures, and provide support; and
• comply with applicable legal obligations.

TripTogether does not display third-party advertising, use data for targeted advertising, or sell personal information.

4. Sharing and Service Providers

Trip content is collaborative. Members of a trip may see the profile information you make available to the group and the trip plans, votes, messages, reactions, photos, and locations you choose to share in that trip.

We use service providers only as needed to provide app features. Depending on the features used and which integrations are configured, these may include:

• Google Firebase (Authentication, Firestore, Cloud Functions, Storage, Cloud Messaging, and App Check) for accounts, data hosting, media, notifications, security, and server operations;
• Google Sign-In, Google Maps, Google Play Billing, and Google Play services for sign-in, maps, platform features, and purchases;
• OpenStreetMap services (including Nominatim and Overpass), Wikimedia/Wikipedia, Open-Meteo, and GOV.UK for destination search, place information, images or descriptions, weather, and official travel advice;
• RevenueCat for purchase entitlement management if premium billing is configured; and
• Foursquare and Ticketmaster for place or event results only when those optional integrations are configured.

Requests to an external information provider can include the destination, coordinates, dates, group category, or search terms needed to return the requested result. Each provider processes information under its own terms and privacy policy. We may also disclose information if required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards.

5. Permissions and User Choices

• Location: optional; used for location-based trip features. You can revoke it in Android settings.
• Notifications: optional; used for trip messages and reminders. You can disable them in Android settings.
• Photos: you choose individual images through the system picker. The app does not request camera permission or broad modern photo-library access.
• Profile data: you can update your displayed name or profile photo in the app.

6. Security

We use HTTPS encryption in transit, Firebase Authentication, Firebase Security Rules, App Check, access controls, and private storage for device notification tokens. Access to shared-trip information is restricted to authorized members through application and backend rules. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

7. Retention

We retain account and trip data while your account is active and for as long as needed to provide the service. Content may be deleted earlier when you delete it in the app. After account deletion, active account records are removed as described below. Limited residual copies may remain temporarily in service-provider backups or logs until routine deletion cycles complete, or longer if retention is required for security, fraud prevention, dispute resolution, or legal compliance.

8. Account and Data Deletion

You can permanently delete your account inside TripTogether: open Profile, scroll to Delete Account, and confirm Delete Permanently.

You can also request deletion without reinstalling the app by emailing maor169@gmail.com with the subject “TripTogether account deletion request” and the email address used for your account. We may ask you to verify ownership before acting on the request.

Content created by other members remains in their shared trips. If a legal or security exception requires limited retention, we will retain only what is necessary for the applicable purpose and period.

9. Children's Privacy

TripTogether is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and delete it where required.

10. International Processing

TripTogether and its service providers may process information in countries other than your own. Where required, we rely on appropriate contractual, technical, and organizational safeguards for international processing.

11. Changes to This Policy

We may update this policy when the app, service providers, or legal requirements change. The updated policy and effective date will be posted on this page. Material changes may also be communicated in the app where appropriate.

12. Contact

For privacy questions, data requests, or account deletion, email maor169@gmail.com or use the 1ClickSoft contact page. Please mention “TripTogether” in your request.