1. Introduction
At TravelRoom, this Privacy Policy explains how we collect, use, store and protect your personal information when you use the TravelRoom mobile application.
By using the App, you agree to the collection and use of information as described in this policy.
2. Developer Information
TravelRoom is developed and operated by an individual developer.
Contact: travelroom26@gmail.com
3. Information We Collect
3.1 Information You Provide Directly
- Profile Data: Full name, username, email address, bio (optional)
- Security: Password (stored securely with Firebase Authentication — never kept as plain text)
- Media & Location: Profile photo and hometown/location (optional, text-based)
3.2 Content You Create (Core Features)
- Travel Room Data: Trip name, destination, start/end dates, cover image
- Memory Content: Photos, captions, location names, GPS coordinates (latitude & longitude), date/time
- Plans and Checklists: Plan titles, descriptions and assignees
- Membership Data: Invite codes and your role in the travel room (owner, admin, member)
3.3 Automatically Collected Information
- Device Information: Device model, operating system version, unique device identifiers
- Usage Data: Features used, screens visited, session duration, anonymous in-app behavior
- Technical Logs: Crash reports and error logs
4. How We Use Information
- Create and manage your TravelRoom account
- Enable travel room creation, membership and real-time collaboration
- Show your profile, memories and travel history to your permitted group
- Send notifications about trip activity, new memories, invites and map updates
- Display your trip memories as pins on an interactive map
- Monitor app performance, fix errors and respond to support requests
5. Third-Party Services We Use
| Service | Purpose | Privacy Policy |
|---|---|---|
| Firebase Authentication | Secure sign-in (Email, Google, Apple) | Firebase Privacy |
| Firebase Firestore | Cloud database storing app data | Firebase Privacy |
| Firebase Storage | Storage of uploaded photos and media | Firebase Privacy |
| Firebase Cloud Functions | Secure server-side operations | Firebase Privacy |
| Firebase Cloud Messaging | Push notifications | Firebase Privacy |
| Firebase Crashlytics | Crash reports and stability diagnostics | Firebase Privacy |
| Google Sign-In | Social authentication option | Google Privacy |
| Apple Sign-In | Social authentication option (iOS) | Apple Privacy |
Data Sale Policy: We do not use any third-party advertising SDK (such as AdMob). We never sell, rent or trade your personal or behavioral data.
6. Device Permissions We Request
| Permission | Why |
|---|---|
| Photo Library / Gallery | To let you pick and add photos to your travel memories |
| Camera | To take photos directly within the app |
| Location (GPS) | To automatically add a location name to your travel memories (optional) |
| Push Notifications | For trip updates, new memories, invites and map pin updates |
You can revoke all permissions at any time from your device's system settings.
7. Data Sharing and Visibility
- With Room Members: Memories, photos, plans and profile info you add to a shared room are visible only to authorized members of that room
- With Service Providers: Google Firebase processes data under strict privacy terms
- Legal Requirements: Data may be disclosed where explicitly required by law or by a valid court order
8. Data Storage, Security and Retention
- Infrastructure: All data is hosted on secure Google Firebase cloud servers
- Encryption: Passwords are encrypted; authentication tokens are managed entirely by Firebase
- Retention Period: Your data is stored as long as your account is active. If you delete your account, all data is cleared immediately; full removal from backups is completed within 30 days
9. Account and Data Deletion (Critical Right)
Apple and modern privacy regulations safeguard your "right to be forgotten."
In-App Path: Profile → Settings → Delete Account
To prevent accidental deletion, you will be asked to type your username. Once confirmed:
- Your profile, the travel rooms you own, memories and photos are permanently and irreversibly deleted
- Your authentication record in Firebase is completely erased
Alternative Method: You can also request data deletion by emailing travelroom26@gmail.com or filling out the account deletion form. Email requests are verified and processed within 7 business days.
10. Children's Privacy
TravelRoom is for users aged 13 and over. We do not knowingly collect data from children under 13. If such a case is detected, the data is deleted immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When changes occur, we will update the "Last Updated" date at the top of the page and notify you via in-app notification or push notification.
12. Contact Us
For privacy questions or data access requests:
Email: travelroom26@gmail.com