Privacy Policy

Last updated: September 2, 2026

1. Introduction

Welcome to Tabico ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your name, email address, username, display name, and profile information.
• Profile Information: You may optionally provide your gender, birthday, and country of residence.
• Trip Data: Information about trips you create, including destinations, dates, itineraries, places, notes, and schedules.
• Financial Information: Expense amounts and categories you enter for the expense splitting feature. We do not process payments directly.
• Communications: Messages and content shared within trip groups.
• Photos: Images you upload to trip albums.

2.2 Information Collected Automatically

• Device Information: Device type, operating system, app version, language setting, unique device identifiers, and mobile network information.
• Usage Data: How you interact with the Service, including screens viewed, features used, actions taken such as creating a trip or a task, push notifications opened, and search terms entered, together with your user ID. Your name and email address are not included in usage data.
• Crash Information: Diagnostic information when the app terminates unexpectedly.
• Location Data: With your permission, we may collect location data to provide location-based features such as nearby place recommendations.

2.3 Third-Party Services

• Authentication: If you sign in with Google or Apple, we receive basic profile information from these providers.
• Maps: We use Mapbox for map functionality, which may collect usage data according to their privacy policy.
• Usage Analytics: We use PostHog, Inc. (United States) to analyze how the Service is used. PostHog processes the usage data, device information, and user ID described above on our behalf under a data processing agreement. Data held by PostHog is retained for up to one year and is deleted when your account is deleted.
• Crash Reporting and Notifications: We use Firebase (Crashlytics and Cloud Messaging) by Google LLC to collect crash information and deliver push notifications.

These providers are located in the United States. We have confirmed that each provider maintains appropriate safeguards for personal information, and we allow them to process information only to the extent necessary to operate the Service.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Enable trip planning and collaboration features
• Facilitate expense tracking and splitting among trip members
• Provide travel recommendations and suggestions
• Send notifications about trip updates, bookings, and social interactions
• Analyze usage patterns to improve user experience
• Ensure the security and integrity of the Service

4. Sharing of Information

We may share your information in the following circumstances:

• With Trip Members: Trip data is shared with other members of the same trip according to the trip's visibility settings (Private, Friends, or Public).
• Public Profiles: If your profile is set to public, your display name, username, and public trips may be visible to other users.
• Tour Guides: When you book a tour, relevant booking information is shared with the guide.
• Service Providers: We work with third-party providers for hosting, analytics, and other services necessary to operate the Service.
• Legal Requirements: We may disclose information if required by law or to protect our rights and the safety of users.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is completely secure.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. To request deletion of your account and associated data, please send an email to support@tabico.me. After verifying your identity, we will proceed with the deletion of your account and related data.

7. Your Rights

Depending on your location, you may have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability

8. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at support@tabico.me.