SafarSetu
Back to Home
Legal & Trust Center

Privacy Policy

Effective date: July 17, 2026 • Published & updated

This Privacy Policy explains how SafarSetu ("the App", "we", "us") collects, uses, and protects your information when you use our mobile application. SafarSetu is developed and operated by SafarSetu Technologies Private Limited. If you have questions about this policy, contact us at safarsetu.dev@gmail.com.

1. Information We Collect

1.1 Account Information

When you sign in, we collect:

  • Email address — used to send you a one-time sign-in link (magic link), or provided by Google if you sign in with Google.
  • Name and profile photo — if you sign in with Google, we receive your Google account name and, where available, profile photo, to display your identity within the app.
  • Display name — a name you may set inside the app, shown to other trip members.

We do not use passwords. Authentication is handled by our backend provider (Supabase) and, optionally, Google Sign-In.

1.2 Trip and Travel Data

To provide the app's core functionality, we collect and store:

  • Trips you create (destinations, dates, itineraries, notes)
  • Expenses you log and how they're split
  • Names of travelers on a trip (co-travelers do not need an account or provide their own information beyond a name you enter)
  • Email addresses of people you invite to a trip
  • Text extracted from itinerary documents (e.g. flight/hotel confirmation PDFs, or text shared to the app from other apps like WhatsApp) that you choose to import — only the extracted text is sent to our servers; the original file stays on your device.

1.3 Vault (Secure Document Storage)

The in-app Vault feature lets you store photos and documents (e.g. passports, tickets) locally on your device, encrypted and protected by a PIN or your device's biometric lock. Vault contents are never uploaded to our servers or any third party — they remain on your device only, and are deleted if you delete the app or clear its data.

1.4 Push Notification Token

If you enable notifications, we store a device push token so we can send you trip-related updates and reminders.

1.5 Automatically Collected Information

We use the following third-party services, which may automatically collect technical data:

  • Firebase Analytics — app usage events and screen views, to understand how the app is used and improve it.
  • Firebase Crashlytics — crash and error reports, including device model, OS version, and app state at the time of the crash, to help us fix bugs.
  • Firebase Cloud Messaging — used to deliver push notifications.

We do notcollect your device's location (GPS). Maps shown in the app use place names/coordinates you or other users enter — not your device's real-time location.

2. How We Use Your Information

We use the information described above to:

  • Create and manage your account
  • Provide trip planning, itinerary, and expense-splitting features
  • Send trip invitations on your behalf when you invite someone
  • Send push notifications about your trips (if enabled)
  • Diagnose and fix crashes and bugs
  • Understand feature usage to improve the app

We do not sell your personal information. We do not use your data for third-party advertising.

3. How We Share Your Information

  • With other trip members: your display name and content you add to a shared trip (itinerary items, expenses, etc.) are visible to other members of that trip.
  • With service providers: we use Supabase (authentication) and Google Firebase (analytics, crash reporting, push notifications) to operate the app. These providers process data on our behalf and are bound by their own data processing terms.
  • Legal reasons: we may disclose information if required by law, or to protect the rights, property, or safety of SafarSetu, our users, or others.

We do not share your personal data with third parties for their own marketing purposes.

4. Data Retention

We retain your account and trip data for as long as your account is active. Vault contents are stored only on your device and are never transmitted to us. If you delete your account (see Section 6), we delete your account and associated trip data from our servers within 30 Days, except where retention is required for legal or security purposes.

5. Your Choices

  • You can edit your display name at any time from your profile.
  • You can disable push notifications from your device settings.
  • You can request access to, correction of, or deletion of your personal data by contacting us at safarsetu.dev@gmail.com.

6. Account and Data Deletion

To request deletion of your account and associated data, email safarsetu.dev@gmail.comfrom your registered email address with the subject "Delete my account."

Timeframe & Process

We will delete your account, profile, and trip data associated with your account within 30 days. Vault data stored locally on your device is deleted automatically when you uninstall the app or clear app data.

7. Children's Privacy

SafarSetu is not directed at children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from children.

8. Security

We use industry-standard measures to protect your data, including encrypted local storage for Vault contents (AES-256) and secure token storage on your device. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Effective date" above when changes are made. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

Email: safarsetu.dev@gmail.com

Developer/Company: SafarSetu Technologies Private Limited, Bengaluru, India.