Privacy Policy

Your account. When you create an account we collect your email address and a password. We only ever store the password in a scrambled (hashed) form that can’t be read back.

Sign in with Google. If you choose Google, Google shares your name, email address, profile picture, and an account identifier with us. We ask only for this basic profile. We don’t request access to your Gmail, Google Drive, Calendar, Contacts, or any other Google data.

Guest accounts. People used to be able to join a trip from an invite link without an account. For them we created a guest account that only stores the name they gave the group. Joining now needs an account, and a guest can add an email or Google to keep their trips.

What you add to Groupy. Trips and their names, destinations, dates, group size, budget, travel style and interests, plan items, proposals, reactions and the reasons you pick, comments, ideas, expenses and how they’re split, and messages in a trip’s thread.

Messages to the Groupy assistant. What you write to the assistant and what it replies. On the Ask Groupy page we don’t keep the conversation once the reply is sent. In a trip’s thread, messages are saved so everyone on the trip can read them.

Your location, only if you ask. If you tap “Use my location” while planning, your browser shares your position with us. We round it to about a kilometre, use it once to find your town, and don’t store it.

Technical information. Like most websites, our servers receive your IP address, browser type, and the pages you request, and record errors. We use this to keep Groupy running and secure.

We use cookies only to keep you signed in. Groupy also saves a small preference in your browser, such as whether the sidebar is collapsed. We don’t use advertising cookies or third-party tracking, and we don’t follow you across other websites.

• To run Groupy: create your account, sign you in, and show your trips to the people on them.
• To answer you with the Groupy assistant and to search for places, stays, and transport you ask about.
• To send emails about your account, like confirming your address or resetting your password.
• To keep Groupy secure, prevent abuse, and fix problems.
• To meet legal obligations.

We don’t use your information for advertising, and we don’t sell or rent it to anyone.

People on your trip. Everyone on a trip sees its plan and your name, your profile picture if you signed in with Google, proposals, reactions, comments, ideas, expenses, and thread messages, including the reasons you give for a reaction. Anyone with a trip’s invite link can join it, so share the link only with people you want on the trip. The organizer can reset it.

Service providers. We use a small number of companies to run Groupy on our behalf: hosting and database services, sign-in and email delivery, AI model providers that produce the assistant’s replies, and search services for places, maps, stays, and transport. They receive only what they need for their task. For example, a search for stays sends the destination, dates, and number of travelers, not your name or email. They’re bound by contract to use it only to provide their service to us.

When the law requires it. We may disclose information if required by law, or if needed to protect the safety, rights, or property of our users, the public, or Groupy.

If Groupy changes hands. If Groupy is merged or sold, your information may move to the new owner, who must keep honoring this policy.

Groupy’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We use your Google name, email address, and profile picture only to create your account, sign you in, and show your picture next to your name to the people on your trips.
• We don’t sell this data, use it for advertising, or use it to train AI models.
• We share it only with the service providers that run sign-in and hosting for us, and only to provide Groupy.
• No person at Groupy reads it, except with your permission, for security, or where the law requires.

You can remove Groupy’s access at any time from your Google Account permissions.

When you message the assistant, we send your message, the conversation so far, and the details of the trip you’re planning to an AI model provider to produce a reply. We don’t use your content to train AI models, and we use providers whose business terms don’t allow them to train on it. The assistant can be wrong, so check anything important, such as prices, opening hours, and travel rules, before you rely on it.

• Your account information is kept until you delete your account.
• Trips and everything in them are kept until the organizer deletes the trip. When we delete your account, we delete what you added or remove your name from it.
• Ask Groupy conversations aren’t stored once the reply is sent.
• Server logs are kept for a limited time, then deleted.

You can see and change most of your information in Groupy, and an organizer can delete a trip at any time. To get a copy of your information, correct it, or delete your account, contact us at the contact details on this site. We’ll respond within 30 days. Depending on where you live, you may have more rights, such as objecting to or limiting how we use your information, or complaining to your data protection authority.

We protect your information with encryption in transit and access controls that limit each trip to the people on it. No service can be perfectly secure, so please use a strong password and keep your invite links private.

Groupy isn’t for children under 13, or under the minimum age for online services where you live. We don’t knowingly collect information from them. If you think a child has given us information, contact us and we’ll delete it.

Our service providers may store and process your information in countries other than yours. Wherever it is, we protect it as this policy describes.

If we change this policy, we’ll update the date above. If the changes are significant, we’ll tell you in Groupy or by email before they take effect.

Questions or requests about your privacy: the contact details on this site.