Tripbundle

Privacy Policy

Effective October 9, 2026

Tripbundle is operated by Qusai Eilouti. This policy explains how the Tripbundle mobile app and website handle information. You can reach us at support@tripbundle.app.

Information we use

  • Account: your name, email address, sign-in method, the device model and app version you sign in from, and the information needed to authenticate your account. If you sign in with Apple or Google, that provider supplies the account details you authorize, which can include a profile photo address; we store it with your account but do not show it. After a Sign in with Apple, we also keep a token from Apple so we can revoke the app's access when you delete your account.
  • Trips: names, dates, places, invitations, member roles, supplies, schedules, meeting details, costs, and recorded repayments that you and other members add.
  • Purchases: product, transaction, subscription, and entitlement details supplied by Apple, Google Play, and RevenueCat. We do not receive your full payment card number.
  • Device and service data: push tokens when you enable notifications, search text or location when you choose a place, app usage events, and error or crash diagnostics.
  • Feedback: when you send feedback from the app, your message with your name, email address, platform, app version and language, so we can understand it and reply.

How we use it

We use this information to provide shared trip planning, sign-in, invitations, cost splits, purchases, reminders, place search, weather, support, and service security. Limited usage events and diagnostics help us understand whether features work and fix failures. Tripbundle does not move money between members or sell your personal information.

Who can see it

People in a trip can see the information shared with that trip. Items you mark Only me are private to you. We use service providers to run the app: Convex and Better Auth for app data and sign-in, Resend for account email, Apple and Google for sign-in and store purchases, RevenueCat for purchase verification, Expo for push delivery, Apple WeatherKit for forecasts, Google Maps for maps and place lookup, Sentry for error reporting, PostHog for limited analytics, and Cloudflare for the website. Those providers process information needed for their respective services, potentially in other countries.

Location, notifications, and analytics

Tripbundle uses location only when you choose to center the place picker on your position. It does not request background location. Trip places and search queries may be sent to map and weather providers to answer your request. You can turn off notification permission in your device settings. App analytics uses your account ID, or a random ID before you sign in, and a small set of feature events; website analytics records page views without invite codes or query strings. Session replay and automatic interaction capture are disabled.

Why we use it

We use account, trip, purchase and feedback information to provide the service you asked for. We use diagnostics and limited analytics because we have a legitimate interest in keeping the app working and secure. Location and notifications are used only after you allow them, and you can withdraw that permission at any time in your device settings.

Retention and your choices

We keep account and trip information while you have an account. When you delete your account, your account, private items, saved lists, devices, join requests and feedback are deleted, and you leave every trip. Shared trip records can include contributions from several people, so costs, repayments and items you added to a trip’s shared list stay in those trips with your name, so other members’ totals stay correct. Records of store purchases stay for accounting. The details are onDelete your account. Error reports and analytics events are kept by Sentry and PostHog for their standard retention periods and then deleted.

You can see and edit your profile, leave trips, and delete your account from the app’s Account tab. You can also email us to ask for a copy of your information, to correct it, to delete it, or to object to how we use it. If you are in the European Economic Area or the United Kingdom, you may also complain to your data protection authority.

Children

Tripbundle is for people aged 13 and over. We do not knowingly collect information from children under 13. If you believe a child under 13 has an account, email us and we will delete it.

Changes

We may update this policy as the service changes. The effective date above shows when this version began.