Our Group TripsPrivacy Policy
Last updated: October 5, 2026
Our Group Trips (“we”, “us”) is a web app at ourgrouptrips.com for planning group trips: creating trips, inviting people, RSVPs, polls, splitting expenses, and an AI trip assistant. This policy explains what information we collect, why, who we share it with, how long we keep it, and the choices you have. Questions: hello@ourgrouptrips.com.
1. Information we collect
Information you give us
- Account: your name and email address. If you sign up with email, a password (stored only as a salted hash by our authentication provider; we never see it).
- Profile (optional): profile photo, phone number, short bio, family members and their travel details, and your travel availability. You choose whether other trip members can see your email and phone number.
- Address book (optional): names, email addresses, and phone numbers of people you save so you can invite them to trips.
- Trip content: trips you create or join, RSVPs and headcounts, suggestions, polls and votes, expenses and who paid, images you upload, links you share, and messages you send to the AI assistant.
- Payments: if you subscribe to Premium, Stripe processes the payment. We receive your subscription status and a Stripe customer ID. We never receive or store your card number.
Information from Google Sign-In
If you choose “Sign in with Google”, Google shares with us only the basic profile information covered by the openid, email, and profile permissions: your name, email address, and profile picture (and a Google account identifier). We do not request access to your Gmail, Google Calendar, Google Drive, Contacts, or any other Google data. See section 3.
Information collected automatically
- Sign-in session: a session token stored in your browser's local storage so you stay signed in. We do not use advertising or analytics cookies, and we do not use third-party tracking.
- Server logs: IP address, browser type, and timestamps recorded by our hosting and database providers for security, abuse prevention, and troubleshooting.
2. How we use information
- To create and run your account and sign you in.
- To provide the app's features: showing trips to their members, tallying polls, calculating expense balances, and sending invitations, reminders, and expense notifications you or your trip organizers trigger.
- To generate AI suggestions when you use the AI assistant, itinerary, or deals features (see section 5).
- To process Premium subscriptions.
- To keep the service secure, prevent abuse (for example, rate limiting), and fix problems.
We do not sell your personal information, use it for advertising, or build advertising profiles.
3. Google user data
What we access: only your name, email address, profile picture, and Google account identifier, through Google Sign-In.
How we use it: solely to create your Our Group Trips account, sign you in, and show your name and picture to the members of trips you join. Your email address is also used to send you trip invitations and notifications.
How we share it: your name and picture are visible to the members of your trips; your email is visible to them only if you turn that on in your profile. The data is stored by our database provider, Supabase (see section 4). We do not share Google user data with anyone else, and we do not sell it, use it for advertising, or use it to train AI models.
Storage and deletion: it is kept in your account record until you delete your account, after which it is deleted as described in section 7. You can also remove our access at any time from your Google Account’s third-party connections page.
Our Group Trips’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. Who we share information with
Other trip members. Content you add to a trip (RSVPs, votes, suggestions, expenses, images) is visible to the members of that trip. Expense settlements are visible only to the two people involved. Anonymous polls hide who voted for what.
Service providers that process data for us, only as needed to run the app:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database, sign-in, file storage, server functions (hosted in Canada) | All account and trip data |
| Vercel | Hosting the website | IP address and request logs |
| Sign-in (if you choose it) | As described in section 3 | |
| Anthropic | AI assistant, itineraries, deal suggestions | Your AI messages and the trip details needed to answer them |
| Resend | Sending email (invites, reminders, notifications) | Recipient name and email, message content |
| Stripe | Premium subscription payments | Payment details you enter on Stripe’s page, your email |
We may also disclose information if required by law, or to protect the rights, safety, and security of our users or the service.
5. AI features
When you use the AI assistant, itinerary, or deals features, your message and the relevant trip details (such as destination, dates, and headcount) are sent to Anthropic to generate a response. Under Anthropic’s commercial terms, this data is not used to train their models. Avoid entering sensitive information you don’t want processed for this purpose.
6. Where data is stored and how it’s protected
Our database and file storage are hosted by Supabase in Canada. Some providers listed above may process data in other countries, including the United States. Data is encrypted in transit (HTTPS). Database access is restricted with row-level security so members can only read the trips they belong to. No method of storage or transmission is completely secure, but we work to protect your information.
7. Retention and deletion
We keep your information while your account is active. You can edit your profile at any time in the app. To delete your account, email hello@ourgrouptrips.com from the address on your account; we will delete your account, profile, address book, and Google profile data within 30 days. Content you contributed to trips other people own (such as expenses that others need to settle) may be kept in de-identified form. Server logs are kept by our providers for a limited period for security purposes.
8. Your rights and choices
Depending on where you live (for example under Canada’s PIPEDA, the EU/UK GDPR, or California’s CCPA), you may have the right to access, correct, export, or delete your personal information, and to withdraw consent. Email hello@ourgrouptrips.com and we will respond within 30 days.
9. Children
Our Group Trips is not intended for anyone under 16, and we do not knowingly collect personal information from children under 16. Trip details about children (such as a child’s travel schedule) may be entered by a parent or guardian, who is responsible for that information. If you believe a child has given us personal information, contact us and we will delete it.
10. Changes to this policy
If we change this policy we will update the “Last updated” date above, and for significant changes we will notify you in the app or by email.
11. Contact
Our Group Trips — hello@ourgrouptrips.com