Privacy Policy

Version 2.1 — effective 3 August 2026

1. Who we are

TripTogether is a group travel planning app operated by Alex Hall, trading as TripTogether, in Australia. In this policy, "we", "us" and "our" mean that operator, and "you" means anyone who uses the app.

Questions about this policy, requests for access or correction, and privacy complaints all go to our Privacy Officer:

info@triptogetherapp.me

Please put "Privacy" in the subject line so it is not handled as an ordinary support request. You can also reach us through the support contact listed for TripTogether on the App Store, but the address above is the quickest route.

2. What this policy covers

This policy describes how we collect, use, secure and disclose Personal Information. It covers the app and the service behind it, and nothing else — there is no website, newsletter, advertising network or offline business attached to it.

"Personal Information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable. In this app that means things like your email address, your display name, and the trips, messages, expenses and files you create.

3. How we collect your Personal Information

We do not buy Personal Information, obtain it from data brokers or list brokers, collect it from social media, or gather it from any third-party source. If you do not provide an email address and a display name you cannot use the app, because there is no way to sign you in or show you to the people you are travelling with.

4. What kinds of Personal Information we collect

We do not collect your location, your contacts, your date of birth, your postal address, your phone number, your device identifiers, your IP address for profiling, or payment card details.

This section lists what is held. It does not describe who can see it: within the app, your content is visible only to the people you share it with, and the rules governing that are in sections 5 and 7. The limits of that protection are set out in section 11.

5. Sensitive information

Some of what the app lets you store counts as sensitive information under the Privacy Act, which is protected more strictly than ordinary Personal Information. It is set out separately for that reason.

The document vault has categories for Health, Visas & ID and Insurance. If you use them, you may be storing vaccination records, medical notes, passports or visa paperwork — your own, or a fellow traveller's.

6. How we use your Personal Information

To run the app, and for nothing else. Specifically:

We do not use your Personal Information for advertising, profiling, market research, training AI models, or building a picture of you. We do not send marketing messages. It is never sold, and never shared for anyone else's marketing.

7. How we disclose your Personal Information

These are service providers acting on our instructions, not independent users of your information. We choose them carefully, and we will update this policy if the kinds of provider we use change. If you want to know which companies they are at any given time, ask us at the address in section 1 and we will tell you.

Beyond that, we disclose Personal Information only where the law requires it, or to protect someone's safety. We do not disclose it to advertisers, data brokers, analytics companies, credit agencies or insurers. If TripTogether were ever sold or merged, your information would move with it, and we would tell you before that happened.

Published templates are anonymous. If you publish a trip as a template for others to copy, only the plan is published — the name, destination, blurb and itinerary. Your name is not shown, and is not sent to anyone browsing templates.

8. Cookies and tracking

None. This app uses no cookies, no advertising identifiers, no analytics SDK and no tracking technology of any kind. There is no web app to set a cookie in, and the mobile app carries nothing that watches what you do.

This page itself sets no cookies and loads nothing from anywhere else.

The error reporting described in section 7 is not an exception to this. It records faults, not behaviour: it is triggered by something breaking, never by you using a feature, and it cannot be used to see which screens you opened or how often you use the app. We hold no measurement of that anywhere.

9. Anonymity and pseudonymity

You cannot use TripTogether anonymously. An account needs an email address, because that is how you sign in, how you are invited to a trip, and how you get back in if you forget your password.

You can use it pseudonymously. Your display name is free text and is never checked against anything, so a nickname or a first name alone is fine — and that is what other people on your trips will see. There is no profile picture, so a name is the only thing you show them.

A display name cannot be changed within the app after sign-up. Changes are made on request, using the contact details in section 1.

10. Cross-border disclosure

Yes — your information is stored and processed outside Australia. Every provider we use is overseas, so this is the normal running of the app rather than an exception.

These countries have privacy laws that differ from Australia's, and those laws may not give you the same protections. We choose providers that commit to protecting what they hold, but we cannot promise that a foreign court or authority will never compel access to it.

11. Security of your Personal Information

We take reasonable steps to protect your Personal Information from misuse, loss, and unauthorised access, modification or disclosure:

What this does not do. Your files and messages are stored unencrypted on our provider's systems, which means we could read them, and so could anyone who obtained that data. We do not read them, and nothing in the app is set up to — but you should know that the protection above is access control, not encryption that puts your content beyond our reach. This distinction applies to all content, including the document vault.

No method of transmission or storage is completely secure.

12. How long we keep it

Your content is kept while you have an account, and until you delete it. Deleting a trip removes its plans, chat and files for everyone on it.

Deleting something deletes the file behind it, not just its entry in a list, and any link to it stops working. That covers a document you remove, a photo or voice note you unsend from chat, every file on a trip you delete, and the private documents removed when you delete your account.

One limit worth being straight about: unsending a chat message removes its text and any file attached to it, but the fact that a message was there and has been unsent remains visible to the people in that conversation.

Deleting your account is described in section 13. We do not keep backups of deleted accounts for archival purposes, and we have no legal or tax reason to retain what this app holds.

13. Access, correction and deletion

Within the app you can view, edit and delete every trip, plan, expense, message and file you have added.

Two functions are not available in the app: changing your display name or email address, and downloading a copy of your information at once. Both are carried out on request, using the contact details in section 1.

Deleting your account — Profile → Delete Account. Your sign-in, profile, votes, private documents and any trip where you are the only member are deleted outright. Messages, expenses and plans you contributed to trips other people are still using are kept and shown as "Deleted user": an expense whose payer vanished would break the balances everyone else relies on. Those entries are no longer connected to you, and your email address is released immediately so you can sign up again with it.

Asking us — for anything you cannot reach in the app, you can ask for a copy of the Personal Information we hold about you, or ask us to correct it if it is wrong, out of date or misleading. Contact us as described in section 1. We will respond within 30 days, and there is no charge for asking.

If we cannot give you access, or decline to correct something, we will tell you why in writing and how to complain about that decision. We cannot provide a copy of information that is also another person's Personal Information — another traveller's messages, for example — where doing so would unreasonably affect their privacy.

14. Resolving privacy concerns

If you believe your privacy has been mishandled, tell us first. Contact us as described in section 1, saying what happened and what you would like done about it.

We will acknowledge your complaint within 7 days, investigate, and give you a written answer within 30 days. If it will take longer, we will tell you why and agree a new date with you.

If you are not satisfied with our answer, or we do not respond in time, you can take it to the Office of the Australian Information Commissioner, which handles privacy complaints independently and free of charge:

You do not need our permission to go to them, and you will not be treated differently for doing so.

15. Updates

We may change this policy from time to time. The version number and date at the top change with it.

If a change materially affects what happens to information we already hold, we will take reasonable steps to tell you directly — by email to the address on your account — rather than relying on you to re-read this page. Email because it is the one channel we can be sure reaches you; the app has no way to show a notice like that today.

16. Acceptance

By using TripTogether, you acknowledge that you have been informed of the matters in this policy, and you agree to the collection, use and disclosure of your Personal Information as it describes.

In particular, you acknowledge that anything you enter into the app or upload to it — including trips, messages, expenses, photos and documents, and anything visible within a file you upload — is transmitted to and stored on the systems described in sections 7 and 10, and is held there until deleted in accordance with section 12. By adding content, or by sharing it with other people on a trip, you consent to it being stored and processed in that way.

Where content you upload relates to another person, you confirm that you are entitled to provide it and, where their consent is required, that you have obtained it.