Privacy Policy

1. Controller

The data controller for TripWithMe is the operator of tripwithme.com.ro. Contact for privacy requests: hello@joinmytrip.app.

If you are in the European Economic Area (EEA) or United Kingdom, you have rights under the GDPR / UK GDPR as described below.

2. Data we collect

Account data: email, name, age (if provided), city/country, password hashes (handled by our auth provider), and social-login identifiers when you use Google sign-in.

Profile & matching data: bio, avatar, languages, travel styles, interests, budget band, nightlife preference, questionnaire answers, reliability/match readiness signals.

Trip & community data: trips you create or join, join requests, votes, chat messages, swipes/likes, notifications preferences, verification requests.

Billing data: plan purchases, Stripe customer/subscription identifiers, payment status. Card details are processed by Stripe — we do not store full card numbers.

Technical data: device/browser type, IP address, approximate location derived from IP, logs needed for security and diagnostics, and cookies/local storage for session and locale.

3. Why we process data

To create and secure your account, and to provide the Service (trips, matching, messaging, notifications).

To personalize discovery and crew-match scores.

To process payments and enforce plan limits.

To prevent fraud, abuse, and security incidents.

To comply with legal obligations and respond to lawful requests.

With your consent where required (for example certain marketing communications).

4. Legal bases (EEA/UK)

Contract: providing the Service you request.

Legitimate interests: securing the platform, improving matching quality, preventing abuse — balanced against your rights.

Consent: where we ask for it.

Legal obligation: where the law requires retention or disclosure.

5. Processors and sharing

We use trusted processors such as Supabase (authentication, database, storage), Vercel (hosting), and Stripe (payments). They process data on our instructions under appropriate agreements.

Public profile information and trip cards may be visible to other users as part of the product.

We do not sell your personal data.

We may disclose data if required by law or to protect users, rights, or safety.

6. International transfers

Some processors may process data outside Romania/the EEA. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) provided by those vendors.

7. Retention

We keep account and trip-related data while your account is active and as needed to operate the Service.

After account deletion requests, we delete or anonymize personal data within a reasonable period, unless we must retain certain records for legal, security, or accounting reasons.

Billing records may be retained as required by tax and financial rules.

8. Your rights

Depending on your location, you may have the right to access, rectify, erase, restrict, or port your data, and to object to certain processing.

You may withdraw consent where processing is based on consent.

To exercise rights, email hello@joinmytrip.app. You may also lodge a complaint with your local supervisory authority (in Romania: ANSPDCP).

9. Cookies and local storage

We use essential cookies/local storage for authentication sessions and language preference.

Analytics or marketing cookies, if introduced later, will be described here and controlled where required by law.

10. Children

The Service is for adults 18+. We do not knowingly collect data from children. If you believe a minor created an account, contact us to remove it.

11. Changes

We may update this Privacy Policy. The effective date at the top of the page will change when we do. Continued use means you acknowledge the updated policy.