Privacy policy

What we collect

• Account: your name, email address, username and a hashed password (or, if you use Google sign-in, the name, email and profile picture Google shares with us). We never see your Google password.
• Profile: anything you add, such as a bio, home city, travel interests, photo and UPI ID. Your UPI ID is private and is shown only to a fellow trip member who owes you a payment.
• Trips and posts: itineraries, journal entries, photos, comments, likes, saved items and who you follow or are friends with.
• Group expenses: amounts, who paid, how they were split, receipt photos and settlements. These are visible only to the active members of that trip.
• Group polls: the questions, options and who voted for what, visible only to the active members of that trip.
• Technical data: sign-in sessions, security logs, and rate-limit counters to prevent abuse. We store limited technical logs and do not use advertising trackers.

Photos

When you upload a photo we re-encode it and remove its hidden data, including GPS location and camera details. Only the cleaned copy is stored. Photos are shown according to the visibility of the trip or post they belong to.

Who can see what

• Each trip is private by default. You choose: public, friends, selected people, or private.
• If your profile is private, people who are not your followers or friends see you only as “A traveller”.
• Blocking someone cuts all connections between you both ways.
• A public trip story can show category totals of what the trip cost if you switch that on. It never shows individual expenses, names or UPI IDs.

Why we use your data

• To run the service: sign you in, show your trips, calculate who owes what, send sign-in codes, trip invitations and notifications.
• To keep the community safe: handle reports, enforce the community guidelines and prevent abuse.
• We do not sell your data and we do not show advertising.

Cookies

We use only the cookies needed to keep you signed in and protect your session. We don't use advertising or analytics cookies, so there is no cookie banner. If that changes, we will ask first.

Services that help us run this

• Hosting and storage: our server provider, with servers located in India.
• Email: an email delivery provider sends sign-in codes and notifications.
• Google sign-in: only if you choose it.
• Sign in with Apple: only if you choose it. Apple shares your name and email (or a private relay address) with us.
• Push notifications (iPhone app): only if you allow them. Your phone's push token is sent to Apple and to Expo, the service that delivers notifications for us, so we can tell you about likes, comments and trip invitations.
• Maps: map pictures are loaded from a map-tile provider, which can see your device's IP address and the area you view, as with any web map.

How long we keep it

We keep your data while your account is open. When you delete your account in Settings, your profile, trips, photos and posts are removed. Balances you share with a group are kept in anonymised form (as a named guest) so other members' accounts stay correct. Security logs are kept for a limited time.

Your rights

Under India's Digital Personal Data Protection Act, 2023 you can ask to access, correct or erase your data, withdraw consent, and raise a grievance. Most of this you can do yourself in Settings (edit profile, change who sees your trips, delete your account). For anything else, write to us.

Grievance contact: Amit Srivastav, support@tomorrowstrip.com

Who it's for

Tomorrow's Trip is for people aged 18 and over. Please don't create an account if you are younger.

Changes

If we change this policy in a meaningful way, we will tell signed-in users before it takes effect.