Privacy Policy

Who we are

Tripz Expenses is made and run by Randa Victor, an individual developer based in Egypt. For data protection law, Randa Victor is the "controller" of your personal data. This policy covers the website (app.tripzexpenses.com and tripzexpenses.com) and the Android app. They share the same account and the same data.

Contact for anything in this policy: hello@tripzexpenses.com

What we collect

Account details. If you create an account: your display name, email address and password. You sign in with your email address and password. The password is stored only as a secure hash by our sign-in provider. We never see it.

Last use. If you have an account, we keep the date you last opened the app while signed in: one date, not a history of your visits. We use it to see whether accounts are in use. It is deleted with your account.

Guest use ("preview mode"). You can try the app without an account. A guest has no email address or password, only a random ID and the trips made in that session.

What you put in the app. Trips (name, currency, country), expenses (description, amount, currency, date, time, category, notes, who paid, who shares), settlements, and the names of people you add to a trip. If you invite someone by email, we use that email address to send the invite.

Receipt photos. If you attach or scan a receipt, the photo is stored with that expense. Only members of the trip can open it.

Voice notes. If you add an expense by voice, the app records a short clip with your microphone. The clip is sent to be turned into text. We do not store it.

Notification details. If you allow notifications in the Android app, we store a push token for your device (a technical address that lets us send it a notification) and your notification choices.

Messages you send us. If you write to us through the Contact us form or by email: your message, the email address and phone number if you give them, any pictures you attach, and, if you are signed in, your account name, email address and ID so we can find your account.

Security and technical data. Your IP address, browser type and device type are used to keep you signed in, to tell people from robots, and to limit abuse (for example too many wrong passwords). Server logs record requests to the site.

Usage statistics. We count which pages are opened and which buttons are tapped, so we can see what works and fix problems. This is not linked to your name, email address or account, and it stores nothing on your device: no cookie and no ID. Page addresses are sent without your username or trip name, and the text on your screen is not sent. Your approximate location (country and city) is worked out from your IP address. We do not record your screen.

Error reports. When something goes wrong in the app or on the website, a report is sent to us so we can fix it. It contains the error itself, the page you were on, the last few pages you opened and buttons you tapped (by name only), your device model, system and browser version, screen size, text size, language, light or dark mode, whether you were online, the app version, and the time. If you are signed in, it also contains your account's internal ID, so we can find the problem in your account. It never contains your name, your email address, anything you typed, amounts, or the names of your trips and expenses.

We do not collect your precise location, your contacts list or your advertising ID. The app has no ads.

AI processing of photos and voice

Scanning is optional and only happens when you choose Upload, Capture or Voice. It is available to signed-in accounts, not to guests.

• Receipt photo. Sent to Cloudflare Workers AI, where AI models (Llama 4 Scout and Gemma 4) read the shop name, amount, date and category.
• Voice clip. Sent to Groq, where an AI model (Whisper) turns speech into text and a second model picks out the expense details from that text.

The result fills in the expense form and you check it before saving. We keep a log that a scan took place (who, when, whether it worked) but never the photo, the recording or anything read from them.

We do not use your data to train AI models. Cloudflare and Groq state that they do not use this content to train AI models either. Groq processes the audio to create the text and does not keep it.

Why we use it, and our legal basis (UK and EU)

• Running your account, trips, expenses, photos and settle-up: performance of our contract with you.
• Emails about your account and trips (verification, password reset, invites, and activity notices you have switched on): contract. You can switch activity notices off in Settings.
• Scanning a receipt or a voice note when you ask for it: contract. Using the microphone or camera also needs your permission on the device.
• Push notifications: your consent (the Android permission). You can withdraw it at any time in your phone's settings or in the app's Settings.
• Security (sign-in protection, the robot check, abuse limits, backups): our legitimate interest in keeping the service and your data safe.
• Usage statistics: our legitimate interest in understanding and improving the app, in a form that is not linked to you and stores nothing on your device.
• Error reports: our legitimate interest in finding and fixing faults in the service.
• Replying to your messages: our legitimate interest in answering you.
• Legal duties: legal obligation.

We do not sell your personal data and we do not use it for advertising.

Who receives your data

We use these companies to run Tripz Expenses. Each one receives only what it needs for its job.

• Supabase (database, sign-in, file storage, scan functions): all account and trip data, receipt photos, push tokens, and your IP address and browser type when you sign in. Stored in the United Kingdom (London).
• Vercel (hosts the website and the app): every request to the site, including your IP address. Our app servers run in the United Kingdom (London); Vercel also processes data in the United States and delivers pages through a global network.
• Resend (sends our emails): the recipient's email address and the content of the email, which can include names and trip names, and messages sent through the Contact form with their attachments. United States.
• PostHog (usage statistics and error reports): pages opened, buttons tapped, browser and device type, error reports as described above, and your IP address, from which an approximate location is worked out. European Union (Frankfurt).
• Cloudflare Workers AI (reads receipt photos): the receipt photo. Cloudflare's global network.
• Cloudflare Turnstile (tells people from robots when you sign in, sign up or ask for a password email): your IP address and technical signals from your browser and device. Cloudflare's global network.
• Groq (turns voice notes into expense details): the voice clip and its text. United States.
• Google Firebase Cloud Messaging (delivers push notifications): your push token and the text of the notification, for example a name and a trip name. Google's global network.
• Google Play (distributes the Android app): Google's own install and device information, under Google's privacy policy.
• Hostinger (hosts our email inbox): messages you send to hello@tripzexpenses.com are stored there.
• GitHub (holds our weekly database backup): an encrypted copy of the database that GitHub cannot read. United States.

Other members of a trip can see what you add to that trip, including your display name. We may also disclose data if the law requires it, or to protect the rights or safety of Tripz Expenses or its users.

International transfers

Your main data is stored in the United Kingdom. Some of the companies above process data in the European Union, the United States or on global networks, and the service is operated from Egypt. Where data leaves the UK or the European Economic Area, we rely on the safeguards those companies provide, such as standard contractual clauses or the EU-US and UK-US data privacy frameworks.

How long we keep it

• Account, trips, expenses and receipt photos: until you delete them or delete your account.
• Guest ("preview mode") data: deleted automatically after 7 days without activity.
• Voice clips: not stored by us.
• Scan log (no content): 90 days.
• Wrong-password counter (your email address): 1 hour.
• Abuse limit records (your IP address): 2 days.
• Push token: until it stops working or you delete your account.
• Emails the app sends to you (verification, password reset, invites, activity notices): the service that sends them keeps a copy for up to 30 days.
• Encrypted backups: up to 90 days, then deleted. Deleted data can remain in a backup until then.
• Usage statistics: up to 1 year.
• Error reports: up to 1 year.
• Messages you send us (kept in our email inbox): up to 2 years.

Deleting your account and your data

In the app or on the website: open Settings, then Manage account, then Delete account, and confirm with your password. Your login and personal details are removed straight away.

Without the app: email hello@tripzexpenses.com from your account's email address, or use the Contact us form. We answer and delete the account within 30 days.

Trips that only you are in are deleted with your account. A trip you own that has other people in it must be deleted first, or you can ask us for help. In shared trips owned by someone else, the expenses and settlements you were part of stay visible to the other members, under your display name, with no email address and no login.

You can also delete a single expense, a receipt photo or a trip yourself at any time. The full steps, and what is kept and for how long, are at https://www.tripzexpenses.com/how-to#delete-account

Your rights

Depending on where you live, you can ask to see your data, correct it, delete it, receive a copy, restrict or object to how we use it, and withdraw a consent you gave. Email hello@tripzexpenses.com. If you are in the UK you can also complain to the Information Commissioner's Office (ico.org.uk). If you are in the EU you can complain to your local data protection authority.

Children's privacy

Tripz Expenses is not for children under 13 and we do not knowingly collect their data. If you believe a child has given us personal data, please email us so we can remove it.

Cookies and storage on your device

We use cookies and similar storage only where they are needed for the app to work: to keep you signed in, to remember your light or dark theme, to hold an expense you saved while offline until it can be sent, and for the robot check. We do not use advertising or tracking cookies.

Security

All connections are encrypted (HTTPS). Database rules keep each trip, and its receipt photos, visible only to that trip's members. Sign-in is protected against robots and repeated guessing. No method of sending or storing data is perfectly secure, so we cannot promise absolute security.

Changes to this policy

If we change this policy we will change the "Last updated" date above. For important changes we will also tell you in the app or by email.

Contact us

Questions about this policy or your data? Email hello@tripzexpenses.com or use the Contact us page.