Privacy Policy

Last updated: February 03, 2026

This Privacy Policy describes how Boystrip ("we", "us", or "our") collects, uses, and discloses your information when you use our mobile application (the "App").

1. Permissions and Data Access

Our App requires certain permissions to provide its core functionality:

• Camera & Photo Library (android.permission.CAMERA): We use camera access to allow you to capture and upload photos for receipts, profile avatars, and trip galleries directly within the App. Images are stored securely and shared only with members of your specific trip.
• Location: We may use location data to help you tag itinerary items or find places.

2. Data Collection and Usage

We collect the following types of information:

• Account Information: Name, email address, and profile picture (via Google Sign-In or manual entry).
• Trip Data: Itineraries, expenses, and related content you create or share.
• User Content: Photos and files you upload.

This data is used solely for the purpose of facilitating shared trip planning, expense tracking, and collaboration among your group.

3. Data Sharing & Service Providers

We do not sell your personal data. We share data only in the following technical contexts:

• Trip Members: Content you upload is shared with the specific users you invite to your trip.
• Service Providers: We use third-party processors (such as Supabase for database hosting and Cloudflare for content delivery, caching, and security) to operate the App. These providers access data solely to provide necessary technical infrastructure.
• Legal Compliance: We have a zero-tolerance policy for illegal content (including CSAM). We will disclose information to law enforcement or relevant authorities (such as NCMEC) if we detect or are alerted to illegal activity or content on our platform.

4. Data Deletion & Account Removal

We provide two ways to manage your data deletion:

• In-App Deletion: You can manually delete your trips, expenses, and photos directly within the App at any time. Deleting a trip will permanently remove all associated data (itinerary, budget, photos).
• Account Removal: To delete your entire account and all associated personal records, please email us from your registered email address at hluvu.app@gmail.com with the subject "Account Deletion Request". We will process your request and permanently purge your data within 7 business days.

5. Data Retention

We retain your data as long as your account is active. Once an account or specific trip is deleted, the data is removed from our active databases. Cached versions of images may persist on Cloudflare for a short period (typically less than 30 days) before being completely purged.

6. Contact Us

If you have questions about this Privacy Policy or wish to request data removal, please contact us at hluvu.app@gmail.com