Privacy Policy

Last updated: October 12, 2026

What we collect

When you use Vamozy, we collect the minimum data needed to run the app:

• Account: email, name, profile photo (from Google OAuth or magic link).
• Trip data: trip names, destinations, dates, member lists, votes, expenses, payments, bookings, and activity. Visible only to people invited to the specific trip.
• Payment data: handled by Stripe. We store payment intent IDs and amounts, never card numbers.
• Diagnostic data: error reports and a sample of page performance data sent to Sentry. These can include technical details such as the page address, your browser and device type, and your IP address. We do not use session replay or screen recording.
• Browser storage: a sign-in token saved in your browser's local storage so you stay signed in, plus a flag that you dismissed the storage notice. No advertising cookies.
• Cookieless analytics: aggregate page views via Cloudflare Web Analytics. No tracking cookies, no fingerprinting.

What we don't do

• We don't sell your data. Ever.
• We don't run ad targeting.
• We don't track you across the web.
• We don't share trip data outside your trip members.

Where data lives

All data is stored on Cloudflare infrastructure (D1 SQLite for trip data, KV for sessions, R2 for files). Servers run in multiple US regions. Stripe handles payment processing per their own privacy policy.

Your rights

You can export, modify, or delete your data anytime from your account settings. To delete your account entirely, email [email protected]. We respond within 7 days. CCPA and GDPR rights honored.

Contact

Questions? [email protected].