← vibeeverything.co

Privacy Policy

Last updated: July 13, 2026 · Version 11

This Privacy Policy explains what personal information Traveltogether (“the App”, “we”, “us”) collects, why we collect it, who we share it with, and the choices and rights you have.

How to read this policy: Sections 1–9 apply to everyone. Section 10 (“Your regional rights”) adds rights and details that depend on where you live — find your country or region there.

1. Who we are

Traveltogether is operated by Vibe Everything Company Limited, a company incorporated in Hong Kong (registered address: Flat J, 15/F, Maxgrand Plaza, 3 Tai Yau Street, San Po Kong, Hong Kong). For any privacy question or request, contact us at legal@vibeeverything.co.

2. Information we collect

Images are re-encoded to remove embedded location metadata. They may be stored on your device while awaiting upload or for offline access and, when cloud sync or sharing is used, uploaded to Firebase Storage so authorized trip members can access them. The App does not use your device’s GPS location.

3. How we use your information

4. Advertising and analytics

Advertising is not active in the current beta release: the App shows no ads yet and does not request tracking permission. The advertising features described in this section will be introduced in a future update, and you will be asked for tracking permission at that time.

We currently use Google Analytics for Firebase to understand app usage and improve the App. Firebase Crashlytics and related Firebase diagnostic services collect crash reports, performance and operational metadata, and other technical diagnostics so we can fix stability problems and improve reliability. We use Crash Data only to operate and stabilize the App, not to evaluate user behavior. When advertising is introduced, it will use Google AdMob / the Google Mobile Ads SDK to show and measure ads. Learn more about how Google uses information from apps that use its services at policies.google.com/technologies/partner-sites.

What trip information we may use for advertising: your destination (the text you enter), trip dates, the kind of group you travel with, and your stated travel interests, plus your optional profile above. We use this only to show more relevant travel-related ads.

Sensitive categories are never used. We do not use or infer sensitive characteristics — such as health, racial or ethnic origin, religion, sexual orientation, political opinions, trade-union membership, or negative financial status — to target ads.

Personalized vs. non-personalized: we show personalized ads only when you have turned on personalized ads, allowed tracking when prompted, and (in Europe/UK) given consent through the consent screen. Otherwise we show non-personalized ads.

5. Your privacy choices

6. How we share information

We do not sell your personal information for money. Some ad-related sharing may be considered a “sale” or “share” under certain U.S. state laws — see Section 10 for how to opt out.

7. Data retention and deletion

We keep your data while your account is active and as needed for the purposes in this policy, then delete or anonymize it. Specifically: account and trip data are kept while your account is active and deleted within 30 days of account deletion (backup copies are cleared within 90 days); diagnostics and usage data are kept for up to 14 months; and advertising identifiers are kept for up to 14 months or until you revoke tracking permission, whichever is earlier.

Deleting your account: you can delete your account and associated personal data from within the App (Settings → Delete account), or contact legal@vibeeverything.co.

Shared trips: please note that information you contributed to a shared trip (such as expenses you added) may remain visible to the other members of that trip even after you delete your account.

8. Children

The App is intended for users aged 16 and over and is not directed to children. We do not knowingly collect personal information from, or show personalized ads to, anyone under 16. If you believe a child has provided us data, contact legal@vibeeverything.co.

9. International data transfers

Your data may be processed in countries other than where you live, including by Google. Where we transfer data internationally we use appropriate safeguards, such as the EU–U.S. Data Privacy Framework, the European Commission’s Standard Contractual Clauses, and the UK International Data Transfer Agreement. To request a copy of the safeguards, contact legal@vibeeverything.co.

10. Your regional rights

European Economic Area (EEA) & United Kingdom

Our legal bases under the GDPR / UK GDPR are: performance of a contract (to provide the App), consent (for personalized advertising and tracking — you can withdraw it any time), legitimate interests (only for security, fraud prevention, and basic service improvement), and legal obligation. You have the right to access, correct, delete, restrict, object to, and port your data, and to withdraw consent. You may lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner’s Office, ico.org.uk). Our EU and UK representatives are named in Section 1.

United States (California and other states)

Depending on your state, you have rights to know, access, correct, and delete your personal information, and to opt out of its “sale”/“sharing” or use for targeted advertising. Using our trip and device data to show personalized ads is treated as “sharing” (and may be a “sale”) under California law. To exercise these rights, use “Your Privacy Choices” in the App’s Settings (available once advertising launches) or contact us at legal@vibeeverything.co. We honor Global Privacy Control and similar opt-out signals where state law requires it. We do not knowingly sell or share the personal information of consumers under 16.

CategoryCollected“Shared” for targeted ads
Identifiers (user ID, device & advertising IDs)YesYes (with consent)
Account info (name, email)If you sign inNo
Trip content (destination, dates, expenses)YesLimited (destination, dates, trip type, interests — with consent)
Usage & diagnosticsYesYes (with consent)

Hong Kong (Personal Data (Privacy) Ordinance)

We collect the data in Section 2 to operate the App, sync trips, improve the service, and show and measure ads. Providing your data is voluntary, but some features will not work without it. Your data may be transferred to our service providers, including Google, as data processors acting on our instructions. You may request access to and correction of your personal data, and you may opt out of personalized ads at any time, by contacting legal@vibeeverything.co. We will not use your data for direct marketing, or provide it to others for their direct marketing, without first notifying you and obtaining your consent.

Taiwan (Personal Data Protection Act)

Collecting entity: Vibe Everything Company Limited. We collect the data in Section 2 for the purposes in Section 3; we use, retain, and transfer it for the duration of your use and as required by law, within the regions where our service providers operate, and you may decline to provide it (some features will then be unavailable). You may inquire about, request a copy of, correct, stop the processing of, or delete your personal data. Using your data for advertising requires your separate consent, which you give through the personalized-ads choice; you may refuse or withdraw it at any time, free of charge, and we will stop. We do not route Taiwan users’ data through mainland China.

Singapore (Personal Data Protection Act)

We collect, use, and disclose your personal data with your consent and for the purposes notified in this policy. You may withdraw consent, and request access to or correction of your data, by contacting our Data Protection Officer (Section 1). You may also complain to the Personal Data Protection Commission (pdpc.gov.sg). We support data portability where required.

Malaysia (Personal Data Protection Act)

We process your personal data with your consent for the purposes above. You may withdraw consent, opt out of direct marketing, and request access or correction by contacting us (Section 1). Where required, we apply appropriate safeguards to cross-border transfers.

Thailand (Personal Data Protection Act)

We rely on consent and other lawful bases under the PDPA. You may withdraw consent, object to direct marketing, and exercise your rights of access, correction, deletion, and portability by contacting us (Section 1). Our marketing communications include an opt-out.

Indonesia (Personal Data Protection Law)

We process your personal data based on your consent for specified purposes. You may withdraw consent and exercise your rights by contacting us (Section 1). Minors’ data is processed only with verifiable guardian consent.

Philippines (Data Privacy Act)

We process your personal data with your consent and for the purposes above, which include automated processing for advertising and sharing with service providers such as Google. You may exercise your rights of access, correction, objection, and erasure by contacting our Data Protection Officer (Section 1), and may complain to the National Privacy Commission (privacy.gov.ph).

Korea & Japan

If you are in Korea (PIPA) or Japan (APPI), you may access and correct your personal data and withdraw consent, consistent with local law, by contacting us (Section 1).

Canada

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), we collect, use, and disclose your personal data with your consent and for the purposes in this policy. We remain accountable for data we transfer to service providers such as Google, and require them to provide comparable protection by contract. You may access and correct your personal data, withdraw consent, and file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) by contacting us (Section 1). If you are in Quebec, Law 25 gives you additional rights, including the right to request de-indexing of your data and to be informed before any decision is made about you based solely on automated processing.

Switzerland

Under the revised Federal Act on Data Protection (nFADP), our legal bases and your rights are the same as those described for the EEA/UK above. You may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch).

Australia & New Zealand

In Australia, we handle your personal information under the Australian Privacy Principles (APPs) in the Privacy Act 1988; in New Zealand, under the Privacy Act 2020. You may access and correct your personal information and lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au) or the New Zealand Privacy Commissioner (privacy.org.nz), respectively, by contacting us (Section 1).

11. Changes to this policy

We may update this Policy. Material changes will be notified in the App and, where required, will ask for your renewed acceptance.

12. Contact us

Privacy questions or requests: legal@vibeeverything.co. See also our Terms of Service.