Privacy
Plain EnglishGroup Trips helps friends plan trips and pay for them together. This page explains what we collect to do that, who can see it, and how to have it removed. The short version: we collect as little as we can, we never sell it, and there are no ads or trackers.
01
What we collect
- Your account: your email address and the name you choose. Your name is what your groups see.
- Login codes: we email you a 6-digit code instead of using passwords. We store only a scrambled (hashed) version of it, and it expires after 10 minutes.
- Code requests: the email address and IP address of each request for a code, so we can stop anyone flooding an inbox or guessing codes.
- What you add to a group: group and trip names, suggestions and votes, the itinerary and the budget.
- Money records: the amount, date and status of each payment you make, and each spend the organiser records (amount, what it was for, and who recorded it).
02
Who can see it
- Members of your group see your name, what you've paid towards each trip, and everything the group has planned and spent. That openness is the point of the app.
- Nobody outside your group. Someone holding an invite link sees only the group's name and how many members it has, not who they are.
- The services that run the app, only as needed to run it: Vercel (this website), Render (our server), Neon (our database), and the service that delivers login-code emails.
03
Payments
Payments are processed by Bachs. You enter your card or bank details on Bachs' own payment page: we never see or store them. Bachs tells us whether a payment succeeded and how much it was for, and handles the details you give it under its own privacy policy.
04
Cookies
We use exactly two cookies, both to keep you logged in: a short-lived one (14 minutes) and a longer one (30 days) that renews it. Page scripts can't read them. There are no analytics, advertising or tracking cookies.
05
How long we keep it
Your account and your groups' plans are kept until you ask us to delete them. Logging out ends that login straight away: its cookies are cleared and the server stops accepting them.
Money records are permanent. A group's accounts have to keep adding up, so payments and spends can't be edited or erased, only corrected by a new, visible entry. If you delete your account, we remove everything else and keep only those records.
06
Your choices
To get a copy of your data, correct it, or delete your account, email kelvinochubili@gmail.com. We'll reply within 30 days, usually much sooner.
07
Changes
If we change what we collect or who we share it with, we'll update this page and the date at the top.