Privacy Policy

1. Who we are

AmigoSquad ("we", "us") provides a collaborative trip planning service available at amigosquad.com. We are the data controller for personal data processed through this service. For questions, contact us at hello@amigosquad.com.

2. Data we collect

• Account data: email, display name, optional avatar.
• Trip content: trips, itineraries, places, photos, documents, expenses, chat messages, packing lists you create or share.
• Usage data: anonymous analytics events (page views, feature usage) to improve the product.
• Technical data: IP address, device, browser (kept short-term for security and abuse prevention).

3. Why we use it (legal basis)

• Performance of contract: running your account and trips.
• Legitimate interest: security, abuse prevention, product improvement.
• Consent: optional analytics and marketing communications (you can withdraw any time).

4. Sharing

We never sell your data. Trip content is visible to people you invite to your trip. We use trusted infrastructure providers to host data (Supabase / EU region), send authentication emails, and provide AI features (Google, OpenAI via Lovable AI Gateway). These providers act as data processors under contract.

5. International transfers

Some processors are based outside the EU/EEA. Where this happens, transfers are protected by Standard Contractual Clauses or equivalent safeguards.

6. Retention

We keep your account data while your account exists. When you delete your account, we remove your personal data within 30 days, except where we must keep records for legal reasons (e.g. accounting).

7. Your rights (GDPR)

You have the right to:

• Access a copy of your data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Export your data in a portable format
• Object to or restrict processing
• Lodge a complaint with your local data protection authority

To exercise any right, email hello@amigosquad.com.

8. Cookies & analytics

We use essential cookies to keep you signed in. Analytics is opt-in — you control it via the cookie banner. We do not use third-party advertising trackers.

9. Security

Data is encrypted in transit (HTTPS) and at rest. Access is restricted by row-level security so only members of a trip can see its content. We monitor for abuse and breaches.

10. Children

AmigoSquad is not intended for children under 16. We do not knowingly collect their data.

11. Changes

We may update this policy. Material changes will be announced in the app or by email at least 14 days before they take effect.