Privacy Policy

Trabee (the "Company", "we") operates the TrabeePocket app and related services (the "Service"). This Privacy Policy explains what personal information we collect, why, how long we keep it, and the choices you have.

1. Information We Collect

We collect only what we need to provide the Service.

When you create an account (depending on how you sign up)

• Email sign-up: email address and password
• Sign in with Google: the email address, name, and account identifier of your Google account
• Sign in with Apple: email address (or the relay address Apple creates if you choose "Hide My Email"), name (if you share it on first sign-in), and account identifier
• Start as a guest: only a randomly generated account identifier; no email or name

We do not store passwords ourselves. They are stored in encrypted form by our authentication provider (Google Firebase Authentication).

Information you enter while using the Service

• Profile (optional): name, profile photo
• Trips: trip name, dates, destination, currencies, names of people you travel with
• Expenses: amount, description, notes, date, time and time zone, payment method, category, exchange rate
• Photos and receipt images, travel notes
• Feedback you send from the app (stored with the app version and OS name and version)

Location (optional)

• We collect your device location (latitude and longitude) and the place name and address only when you turn on automatic expense location, pick a place yourself, or add a footprint to your travel notes.
• We do not collect location in the background.
• You can turn off location permission in your device settings and keep using the Service without location.

Information collected automatically

• Device information: device model, OS name and version, language and region settings, app version
• IP address and usage data (screens and features used, via Google Analytics for Firebase)
• Crash and error reports (Firebase Crashlytics)
• Purchase records: product purchased; purchase, renewal, expiry and refund dates; store transaction identifiers. Payment card details are handled by the app stores and are never shared with us.

Usage data and crash reports do not include your email or name. They are linked only to the account identifier we assign.

Customer support

• Your email address and the content of your inquiry

2. How We Use Your Information and Legal Bases

We do not show ads. We do not collect advertising identifiers or use your information for targeted advertising. We do not sell your personal information.

3. Google User Data

If you use Sign in with Google, we receive only your email address, name, and account identifier from Google (the basic openid, email and profile scopes). We use this information only to sign you in, identify your account, and show your name in the app. We do not use it for advertising, do not sell it, and do not share it with third parties except the service providers listed in Section 6 that run the Service for us. We do not access any other Google account data (such as Gmail, Drive, or Contacts). This information is deleted when your account is deleted (Section 8).

4. What Others See in Shared Trips

• When you share a trip or join one by invitation, other members of that trip can see your name (or the part of your email before the @ if you have no name), your profile photo, and the expenses, photos and notes you add to that trip. Your full email address is not shown.
• If you leave a trip, your name may remain in its member list marked as "left". When your account is deleted, your name is removed.

5. Sharing with Third Parties

We do not provide your personal information to third parties, except where required by law or requested by authorities following legal procedures. When you export or share your trip records (PDF, Excel, CSV), you do so by your own choice.

6. Service Providers (Processors)

We use the following service providers to run the Service. They process personal information only on our behalf.

7. International Transfers

The Company is based in the Republic of Korea, and the providers above store and process data in other countries, including the United States. Your information is transferred over encrypted connections when you use the Service. Where required by law (for example under the GDPR), we rely on appropriate safeguards offered by these providers, such as standard contractual clauses. Transfers needed only for optional features (location, receipt recognition) do not occur if you do not use those features.

8. Retention and Deletion

Deleting your account

• When you request deletion in the app (Settings > Delete Account), you are signed out immediately, and your account and all its data are deleted 30 days after your request.
• If you sign in again within those 30 days, you can cancel the deletion. This window lets you recover from an accidental deletion.
• What is deleted: your account information; trips you created and their expenses, photos, receipts and notes; your categories and folders; your pass records. Shared trips that you created are deleted too, and their members can no longer see them. If you joined other people's trips, you are removed from them.
• Deleted data may remain in backups kept for disaster recovery for up to 7 days before it is erased.
• Deleting your account does not cancel an app store subscription. Please cancel it in your app store's subscription settings.

Guest accounts

• A guest account and its data are deleted 90 days after the account was created. We let you know in the app beforehand. If you sign up before then, your data is kept.

Records we must keep

• Records of contracts, cancellations, payments, and the supply of goods: 5 years; records of consumer complaints and disputes: 3 years (Korean Act on Consumer Protection in Electronic Commerce)
• Account deletion records (date of deletion, email address, sign-in method, account identifier): kept for 1 year to handle disputes

Other information

• Usage data and crash reports are deleted when the retention periods of Google Analytics and Crashlytics expire.
• Support records are deleted after the inquiry is resolved, unless the law requires us to keep them longer.

9. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to restrict or object to its processing, and to withdraw consent at any time.

• In the app you can edit or delete your profile and records, export trip records (PDF, Excel, CSV), and delete your account (Settings > Delete Account).
• For any other request, email our Privacy Officer below. We will respond without undue delay.
• The Service is not intended for children under 14, and they may not create an account. Where local law sets a higher age for consent, that age applies.

10. Security

• Passwords are stored encrypted by our authentication provider
• All network traffic is encrypted (TLS)
• Access to data is controlled by security rules, and the number of staff handling personal information is kept to a minimum
• App integrity checks (Firebase App Check) block abnormal access
• Ongoing security checks and monitoring

11. Cookies and Automatic Collection

The app does not use cookies. The usage data and crash reports described in Section 1 are collected automatically by the Firebase SDK. Crash reports are necessary to keep the Service stable. For questions about usage data, contact our Privacy Officer.

12. Contact

You also have the right to lodge a complaint with a data protection authority:

• European Union: your local Data Protection Authority (list of authorities)
• United Kingdom: Information Commissioner's Office (ico.org.uk)
• Other regions: the supervisory authority in your jurisdiction

13. Changes to This Policy

This Privacy Policy is effective as of November 13, 2026. We will announce changes in the app or on our website at least 7 days before they take effect, or 30 days before for changes that significantly affect your rights.

Previous versions:

Privacy Policy (August 19, 2025 to November 12, 2026)

Privacy Policy (June 30, 2020 to August 18, 2025)