Privacy Policy

Kumotrip helps you plan trips, keep travel documents and split costs with friends. This policy explains what personal data we keep, why, who helps us run Kumotrip, and the choices you have. We don’t sell your data and we don’t show ads.

Who is responsible

Kumotrip is run by its founder, based in Malaysia, who decides how your personal data is used. For anything about your data, including the requests below, reply to any email from Kumotrip.

What we collect

• Your account: your email address, and when you sign in with Google or Facebook, the name and profile picture they share. We never see your password, contacts or friends, and we never post for you.
• Your trips: destinations, dates, traveller names, plans, notes and budgets that you and the people on your trips add.
• Expenses: amounts, who paid, how they’re split and the balances that follow.
• Wallet documents: boarding passes, bookings, tickets, insurance and passports, with their photos or PDFs. Passport and ID scans are sensitive: only add them if you are comfortable, and mark them “Only me”.
• Map use: the places and routes you search, and your location if you allow it. Location is used in your browser to show you on the map and is sent only as the start point of a walking route.
• Visit counts: a random cookie lets us count daily visitors. It isn’t linked to your account.
• Error reports and usage records: the error message and page address when something breaks, and the size and cost of AI requests, so we can fix bugs and control cost and abuse.
• Technical data: IP address, browser and device type in our hosting providers’ logs, kept briefly for security.
• Payments, when paid plans start: what you bought, when, and the billing details our payment provider passes us. We never see your full card number.

Why we use it

• To provide Kumotrip as our Terms describe: your account, trips, sharing, plans and split bills.
• To keep Kumotrip secure, prevent abuse, fix errors and understand usage in total, which is in our and our users’ legitimate interest.
• To keep the records the law requires, such as tax records.
• For anything optional, such as product news by email, we ask first, and you can withdraw consent at any time.

We don’t sell personal data, don’t show ads, and don’t make decisions with legal effects about you by automated means.

AI trip planning

When you ask for a plan, our server sends the trip details you entered (destination, dates, number of travellers, budget, preferences and notes) to the AI provider named in the app, such as Anthropic, OpenAI or Google. We don’t send your email address or your wallet documents. We use these providers’ paid business services, whose terms say your requests are not used to train their models and are kept only for a limited time to check for abuse.

Who sees it

• Friends you invite to a trip see that trip’s plan, expenses and shared documents. Documents marked “Only me” stay yours.
• A trip you publish as a public guide shows its plan only: never traveller names, calendar dates, expenses or wallet documents.
• Our administrator can see account details to support you and stop abuse. Admin actions are logged.

Services that help run Kumotrip

These companies process data for us under contract, only to provide their service:

• Supabase (data stored in Singapore): database, sign-in and file storage.
• Vercel (global, United States): hosting the website and its servers.
• Google and Meta (Facebook): sign-in, only if you choose them.
• An AI provider (United States): writing trip plans.
• OpenFreeMap, Photon by Komoot and FOSSGIS OSRM (European Union): map tiles, place search and walking routes, using OpenStreetMap data.
• An email provider for sign-in emails, and a payment provider once paid plans start. We’ll name them here before we use them.

We may also share data when the law requires it, to protect someone’s safety, or with a buyer if Kumotrip is sold, who must keep the promises in this policy.

International transfers

Your data is stored in Singapore, and some of the services above process it in other countries, including the United States. We choose providers that protect data under contract (data processing agreements and, where needed, standard contractual clauses) and send each one only what it needs.

How long we keep it

• Account and trip data: until you delete it or your account.
• Deleted accounts: removed from the live service at once, and from backups within 30 days.
• In trips you only joined, your traveller name and shared expenses stay so the group’s balances still add up.
• Visit counts: daily totals per page for up to 400 days; the random visitor ids behind them are cleared after 90 days.
• Error reports: 30 days.
• Billing records, once paid plans start: 7 years, as tax law requires.

Security

Data is encrypted in transit and at rest. Database rules let each person reach only their own trips. Wallet files are kept in private storage and opened only through short-lived links. If a data breach puts you at risk, we’ll tell you and the regulators as the law requires.

Your rights

Depending on where you live, you can ask to see, correct, export or delete your data, withdraw consent, object to or limit some uses, and complain to your data protection authority (for example the Personal Data Protection Department in Malaysia or the PDPC in Singapore). We reply within 21 days, or sooner where your local law requires, and we may need to confirm it’s you first.

Deleting your data

Open Account and choose Delete account. That removes your account, every trip you own and its files, and your private documents in friends’ trips. In trips you only joined, your traveller name and shared expenses stay so the group’s balances still add up.

If you signed in with Facebook, you can also remove Kumotrip in Facebook under Settings > Apps and websites. To ask us to delete your data instead, reply to any email from Kumotrip and we’ll do it within 30 days.

Children

Kumotrip accounts are for people aged 18 and over. Adults may add children as traveller names on their own trips. If you think a child has made an account, tell us and we’ll delete it.

Cookies and browser storage

• Sign-in cookies (names starting with sb-): necessary to keep you signed in. They last until you sign out and refresh while you use Kumotrip.
• NEXT_LOCALE: remembers the language you picked. It lasts one year.
• wp_vid: a random id used only to count unique visitors per day. It lasts 400 days.
• Browser storage: your settings, cached map searches and exchange rates, and trips kept on your device when you aren’t signed in. It stays until you clear it.

We don’t use advertising or cross-site tracking cookies. Blocking cookies in your browser will sign you out.

Changes

We’ll post changes here with a new date. Before a change that matters applies, we’ll tell you in the app or by email.

Questions

For anything about your data, reply to any email from Kumotrip.