Different privacy controls do different things. Agreeing to the Terms or acknowledging the Privacy Policy does not opt you into optional cloud AI, improvement, personalised advertising or all future providers. A store purchase and camera/photo access are also separate permissions.
Advertising and tracking
Manage advertising choices through the app's personalised-ad setting and Google's privacy-options or consent screen where available. Which controls are shown depends on the platform, region and advertising configuration. On iOS, manage Apple's App Tracking Transparency (ATT) permission for tracking across other companies' apps and websites in the device's Settings. These choices are separate: withdrawing an app choice does not necessarily change a device permission, and an ATT permission does not replace regional advertising consent.
Non-personalised or limited advertising can still process identifiers, IP-derived approximate location, advertising interactions and security/measurement information. If required consent is absent, an ad request may be prevented. The public information websites do not serve AdMob ads. A browser signal does not itself change your device's ATT permission or Google consent settings. These device permissions are separate from any legally required opt-out.
Some permitted Google AdMob requests include up to two standardised city or country names from your selected trip destination, using a standard spelling, as context for advertising. Turning off personalised ads or declining ATT does not by itself remove those keywords. We omit unrecognised free text and do not include the trip title, dates, participant roster, receipt contents, expense amounts or account/trip identifiers in that keyword field. This does not mean all information processed by the advertising software development kit (SDK) is anonymous or exempt from consent and opt-out rules.
If an applicable US state law gives you an opt-out of sale, sharing or targeted advertising, email legal@vibeeverything.co with the request and enough information to apply it to the relevant account, browser or device. We do not sell personal information for money, but advertising disclosures can fall within those legal definitions. Rights to use a legally recognised universal opt-out signal, such as Global Privacy Control, remain applicable where the law requires them; an email route does not replace a required signal or other request mechanism. These rights do not change your operating system's ATT permission. Tell us if an authorised agent is making the request. We ask only for information needed to apply the opt-out and do not require identity verification where law prohibits it. Do not send passwords or sign-in codes.
AI receipt scanning and improvement
AI receipt scanning uses artificial intelligence (AI) to read a receipt photo and fill editable expense fields. You check and save the expense yourself.
AI receipt scanning, for the scan you request, sends the receipt image you select and processing instructions to Apple Private Cloud Compute on supported iPhones, together with the receipt text read on your device and the trip's destination and dates; otherwise, or if that route fails, it sends the image, instructions and requested output language to Gemini through Google Cloud Vertex AI. Extracted fields and completion records still go to Firebase, even without an expense save. Cloud permissions apply to the disclosed providers and purpose. To withdraw a previously recorded cloud-processing permission, contact legal@vibeeverything.co. Use manual expense entry and do not start another cloud scan while your request is being handled.
Voluntary improvement is the separate Help improve Travel Together choice involving the device model, iOS version and app version of scans made while you take part and, when you change something the AI filled in, eligible receipt references (records that locate receipt images) and available images, what AI suggested, what was placed into the editable expense form and the first changes you save, including amounts and text. A save without changes leaves only a record that no change was needed. Authorised reviewers may use private analysis copies. It does not currently authorise model training or fine-tuning. Turn participation off in Settings to stop new optional collection and use, including further optional use of identifiable earlier samples. We delete or irreversibly anonymise those improvement samples and private copies without undue delay, unless a separate lawful retention obligation applies. Backend/private-copy cleanup and restricted backup expiry are separate steps. Withdrawal does not instantly erase every copy or delete your normal trip expense. The retention limit is not a waiting period after withdrawal and does not permit continued optional improvement. Contact us to ask about cleanup progress. See AI receipt scanning and your data.
For feedback comparing your first saved corrections, an eligible sample must come from a completed scan made under your valid improvement choice and still be covered by that choice when feedback is collected. It is matched to the first saved expense. An image is included only when it is available and can be matched to that sample.
Optional app-usage analytics is off by default and operates only when the feature is enabled and you have opted in. It sends basic usage information and upgrade-screen outcomes to Google Firebase Analytics, which keeps detailed data for two months under our setting; turning it off does not delete data already sent. Crash reporting and account-linked subscription analytics are separate; disabling optional improvement does not switch off every essential operation or provider service.
Browser storage, cookies and notifications
The portal uses session storage for retry coordination and local storage for manual exchange-rate preferences. Clearing those values does not remove an expense already submitted to a trip. Google reCAPTCHA Enterprise/App Check protects requests and can set a necessary security cookie when it runs. Cloudflare delivers and secures the websites and measures visits/performance through its Web Analytics measurement request (a beacon). These are explained in the Privacy Policy; they are not a blanket marketing consent.
You can manage browser storage and device notification permissions. Blocking necessary storage or security services can affect the feature that uses them. Keep portal links and deletion-status files private. Do not share them with someone who should not have the corresponding access.
Access, correction or deletion
Use Account Deletion and Data Requests or contact legal@vibeeverything.co for an applicable privacy right, consent withdrawal or complaint. State what you want to request. We assess it under the law that applies to you and explain the response and any permitted retention. You can request an applicable review or appeal and complain to your privacy authority.
You do not need an account, a particular form or legal terminology to complain. Explain your concern in your own words; if you need help making a complaint, tell us what accessible way of communicating you need. Where UK data-protection law applies, we acknowledge a data-protection complaint within 30 days, make appropriate enquiries, keep you informed of progress and communicate the outcome without undue delay. The acknowledgement deadline is separate from resolving the complaint. Your right to complain to the UK Information Commissioner's Office (ICO) or another competent authority remains available.