Privacy notice

Scope and operator

This notice applies to the Travade web application and any installable progressive-web-app version. Travade is currently an independent beta project, not a bank, travel agency, payment processor, or data broker. Travade does not currently sell personal data, display advertising, or use third-party behavioral analytics.

Data Travade handles

Account and profile. Email address, first and last name, Supabase authentication identifiers, and an optional private profile photo. Passwords are handled by Supabase Auth; Travade does not store readable passwords. A current password is processed transiently when you change or delete an account and is never written to the application database.

Shared trip records. Trip names, destinations, dates, descriptions, status, currency and group estimate; membership and invitation records; shared expense titles, categories, notes, dates, payers, amounts, splits, balances, settlements, and generated plans or recipes. These records are visible to authorized members of that trip.

Private member records. Your personal trip budget and personal expenses are available only to you. Other trip members do not receive them, and they are not included in AI prompts.

Authentication and technical data. Supabase-managed session cookies are necessary to keep you signed in and protect private routes. Infrastructure providers may process standard connection information such as timestamps, requested routes, IP address, browser or device details, status codes, and security events to deliver, protect, and troubleshoot the service. Travade does not currently use advertising cookies.

Support communications. Information you choose to submit through the linked GitHub support channel is processed by GitHub and may be public. Never include passwords, authentication or invitation links, private trip data, payment details, government identifiers, or other sensitive information in a public issue.

Why Travade uses this data

• Provide accounts, private trips, invitations, and account recovery.
• Record expenses, calculate balances, and generate requested exports.
• Display profile names and optional photos to shared trip members.
• Generate trip plans and recipes when a member requests an AI feature.
• Protect the service, prevent abuse, diagnose failures, and provide support.
• Comply with valid legal obligations and enforce Travade’s terms.

AI features and Google Gemini

AI generation is optional. When requested, Travade sends Google Gemini only the shared context needed for that feature. Trip planning may include the destination, dates, group size, trip currency, remaining group estimate, selected interests and pace, submitted notes, and a prior shared plan during re-planning. Recipe generation may include destination, group size, trip currency, meal type, dietary selections, and submitted notes. Travade does not send profile names, email addresses, user IDs, personal budgets, or personal expenses.

Service providers and international processing

• Vercel: application hosting and delivery.
• Supabase: authentication, PostgreSQL database, private profile-photo storage, and related platform security and operational services.
• Resend: delivery of account emails.
• Google Gemini API: requested itinerary and recipe generation using the limited shared context described above.
• GitHub: the current public support-request channel.

These providers may process information in countries other than the one where you live, under their own terms and privacy commitments. Travade will update this list before introducing another production processor or client-side analytics service.

Visibility and responsibility for shared data

Trip owners and members can see shared trip content. Trip owners can invite or add members and manage trip settings. A user adding another person’s name, expenses, dietary information, or other details must have permission to share them. Avoid entering sensitive information in shared titles, notes, or AI fields. CSV exports are created on request and downloaded to your device; you are responsible for protecting copies after download.

Retention

• Account, profile, and active trip data remain while needed to provide the account and trips, unless deleted as described below.
• Archiving or completing a trip changes its status; it does not delete its records.
• AI plan and recipe generations are saved as trip history and remain with the trip. Regeneration creates another saved result.
• Invitation links expire after seven days or one use. The invitation record may remain with the trip for integrity and abuse investigation.
• Only the current bounded profile-photo derivative is needed; replacement overwrites it and removal deletes it.
• Operational and support records follow the active provider settings and may be retained longer where reasonably necessary for security, legal obligations, dispute resolution, or enforcement.

Account deletion and retained shared history

You can permanently delete your account from Account settings. Travade deletes your authentication account, profile, photo, private budgets, personal expenses, and every trip you own. In a trip owned by someone else, shared expenses, splits, plans, recipes, and settlement history remain so other members’ records and arithmetic stay accurate, but your account link, profile, and name are removed and the membership becomes “Deleted traveler.” Review the account-deletion instructions before proceeding.

Your choices and requests

Account settings lets you correct your name, replace or remove your photo, change your password, and delete your account. Trip exports provide shared expense and settlement data in CSV form. Depending on where you live, you may also have legal rights to request access, correction, deletion, restriction, objection, or portability. Travade may need to verify account ownership before acting on a request. Use the support page to begin a request without posting private account information publicly.

Security and changes

Travade uses authentication, row-level database policies, server-side validation, private storage, short-lived signed photo links, and access-controlled routes. No internet service can promise absolute security. This notice will be versioned when practices materially change. The effective date at the top shows the current version. The terms of use and acceptable use policy apply alongside this notice.