Privacy Policy
Last updated: June 16, 2026
This Privacy Policy explains how Grptripz (“Grptripz,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the Grptripz mobile application and website (together, the “Service”). Grptripz helps groups plan trips together — itineraries, shared expenses, group chat, photos, and settling up. By using the Service, you agree to the practices described here.
Contents
1. Information we collect
Information you provide
- Account information: your email address, display name, and (optionally) a profile photo. Authentication is handled by Google Firebase Authentication; we do not store your password.
- Trip content: trips you create or join, itinerary events, expenses (amounts, descriptions, currency, who paid, and how costs are split), settlements, checklists, and your friends list.
- Photos and moments: images and captions you add to a trip’s shared timeline.
- Messages: chat messages, reactions, and polls you send within a trip.
- Receipts: images of receipts you choose to scan (see Receipt scanning).
- Payment handles: usernames you optionally add for settling up (e.g., Venmo, Cash App, PayPal, or Zelle). These are identifiers you enter — not card or bank account numbers — and we do not process payments (see Payment handles).
Information collected automatically
- Device & push tokens: a push notification token and device/platform information so we can deliver notifications you’ve enabled.
- Diagnostics & crash data: we use Sentry to monitor errors and stability. This includes technical event data and, by default, your IP address and approximate location derived from it.
- Usage data: limited counters and events about how features are used (for example, number of receipt scans) to operate, secure, and improve the Service. We use Firebase Analytics to help us understand feature usage.
- App integrity: we use Firebase App Check to help verify requests come from the genuine app.
2. How we use information
We use the information above to:
- Provide and operate the Service — create and sync trips, expenses, balances, itineraries, chat, and photos across the members of a trip;
- Calculate balances and suggested settlements;
- Send notifications you’ve enabled (e.g., itinerary reminders, settlement requests, new activity);
- Extract details from receipts you choose to scan;
- Maintain security, prevent abuse, debug, and improve reliability and features;
- Manage subscriptions and entitlements; and
- Communicate with you about the Service and respond to your requests.
3. Sharing with trip members
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
4. Service providers
We rely on a small number of trusted providers who process data on our behalf, under their own terms and privacy commitments:
- Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Messaging, and App Check) — our core backend, database, file storage, and push delivery.
- Sentry — error monitoring and diagnostics, including the technical data described above.
- Receipt scanning provider — a third-party service used to read details from receipt images you submit. We use TabScanner and Google Cloud Vision for this.
- Currency exchange data — a provider of foreign-exchange rates used to convert expense amounts. We use ExchangeRate-API (exchangerate-api.com).
- Apple App Store and Google Play — app distribution and any in-app purchases. We do not use a third-party subscription platform.
5. Receipt scanning
If you use receipt scanning, the receipt image you capture is sent to our receipt-processing provider to extract details such as the total, merchant, and date, which are then pre-filled into a new expense for your review. You can always enter expenses manually instead. Receipt images are retained only for the duration of the trip they belong to.
6. Payment handles & subscriptions
Grptripz helps you track who owes what, but we do not move money or process payments. When you settle up, you do so directly through your own payment apps (such as Venmo, Cash App, PayPal, or Zelle). The payment handles you add are stored only so they can be shown to other members of your trips for convenience.
Paid subscriptions, if you purchase one, are processed and billed by the Apple App Store or Google Play in accordance with their terms. We receive your subscription status to unlock features, but we do not receive your full payment card details.
7. Retention & deletion
We keep your information for as long as your account is active or as needed to provide the Service. You can delete your account at any time from within the app, or via grptripz.app/delete-account.
When you delete your account, we delete or de-identify your personal account information. Note that content you contributed to a shared trip (for example, an expense you added that affects other members’ balances, or a message you sent) may remain visible to the other members of that trip so their records stay intact, even after your account is removed.
8. Security
We protect your information using industry-standard measures, including encryption in transit (HTTPS/TLS), access controls enforced by server-side security rules, and app-integrity verification. No method of transmission or storage is 100% secure, but we work to protect your information and to promptly address issues we become aware of.
9. International data transfers
Grptripz is operated using infrastructure that stores and processes data primarily in the United States. If you access the Service from outside those countries, you understand your information may be transferred to and processed there. Where required, we rely on appropriate safeguards for such transfers.
10. Children
The Service is not directed to children under 13 (or the minimum age required in your country, such as 16 in parts of the EEA), and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
11. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. You can exercise many of these directly in the app (editing your profile, deleting content, or deleting your account), or by contacting us. We will not discriminate against you for exercising your rights.
You can turn off push notifications at any time in your device settings or in the app.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we’ll revise the “Last updated” date above and, where appropriate, notify you in the app. Your continued use of the Service after changes take effect means you accept the updated policy.
13. Contact us
If you have questions about this Privacy Policy or your information, contact us at hello@grptripz.com, operated by Grptripz LLC.