TripPocket Privacy Policy

Effective date: 24 October 2026

TripPocket: Split Travel Costs is operated by LAKESIDE VILLAGE COMPANY LIMITED, Thailand. Contact: sales@lakesidevillageproduction.com.

Information we use

Account: Google sign-in supplies your name, email address, profile information and a Firebase account identifier. We use these to sign you in, secure your account and sync trips. Apple sign-in is not available in this Android release.

Trips: trip names, traveler names, invitations, expenses, currencies, amounts, repayment preferences, receipt photos, optional places/Maps links, and creation/edit history are stored to provide the service. Other accepted members can view shared trip data. Trip owners manage access; administrators can manage expenses; members can manage their own entries.

Location: you can optionally add a location or Maps link. Using your current location requires device permission. A saved location may include precise coordinates. We do not track your location in the background.

Receipts: selecting a photo sends a reduced image to Cloudflare Workers AI to suggest its total and currency. Review the result before using it. Saving an expense stores the receipt in the trip. You can enter amounts without uploading a receipt. Do not upload information you do not want other trip members to see.

Purchases: Google Play processes payment. RevenueCat and our server use your account identifier, purchase history and entitlement status to enable and restore Remove Ads. We do not receive full payment card or bank details.

Notifications: if enabled, Firebase Cloud Messaging and our server use an app/device identifier and push token to deliver trip updates, such as a new expense amount. Notifications may appear on your lock screen; you can control them in phone settings.

Ads: the free Android app uses Google AdMob. When ads are requested, Google's SDK may collect/share IP-derived approximate location, device/ad identifiers, app interactions and diagnostics for advertising, measurement and fraud prevention. Available consent/privacy choices depend on your region and Google's requirements. Remove Ads stops banner advertising for the signed-in account; account, purchase and security processing still applies.

Website advertising: our public TripPocket guides may use Google AdSense banner ads. The private account workspace, sign-in, invitation and account-help pages do not request these guide advertisements. On guide pages we first restore account sign-in state. For signed-in users we verify the account’s Remove Ads entitlement before requesting advertising; if verification is unavailable, the banner stays hidden. Anonymous readers may see advertising after account restoration finishes. A verified Remove Ads entitlement stops these banners when you are signed in to that TripPocket account. Google and its advertising partners may use cookies, similar identifiers, IP address, browser/device information and ad interactions for advertising, measurement and fraud prevention, subject to applicable consent choices. Google’s consent message offers regional choices where required. Use Privacy and cookie settings near an active banner to revisit available choices. We do not add trip contents or receipt images to ad requests or offer private account access to advertising crawlers. Learn how Google uses information at Google’s partner-site privacy information. The public equal-split calculator works locally in your browser; its inputs are not submitted to our server.

Website statistics: direct website visits use a random first-party browser identifier, country and device type for visitor counts. These statistics are not linked to your Google identity, trips or receipts. You can turn visitor counting off on the website. This custom visitor counter is disabled in the native app. Infrastructure providers and ad/payment SDKs may separately process technical information to deliver and protect their services.

Safety and moderation

Safety: we store Community Rules acceptance, blocked-user settings, abuse reports and moderation decisions. Reports include the reporter’s account identifier, relevant trip/user references, reason and explanation and, for an expense report, a copy of the reported text and available receipt photo. The TripPocket safety administrator can review these reports; they are not shown to the reported user. Blocking is private to your account. We use this information to prevent abuse, investigate reports, handle appeals and protect the service. Safety records are retained as needed for those purposes, subject to applicable deletion requests and legal obligations. Contact sales@lakesidevillageproduction.com for support or appeals.

Community Rules

Providers and sharing

We use Google Firebase/Firestore and Firebase Cloud Messaging, Cloudflare Workers/D1/Workers AI, RevenueCat, Google Play, Google AdMob and Google AdSense. These providers process relevant information to deliver their services and may process it outside Thailand. Trip information is shared with people who accept an invitation to that trip. We do not provide expense contents or receipt images to AdMob for ad targeting. External Maps links open Google's service under its own policy. Necessary information may also be disclosed when required by law or to protect the service.

Storage and security

Cloud storage is the source of truth. Authentication and access rules restrict trip access. Network requests use HTTPS/TLS. The app/browser keeps sign-in state and a cache of trip/form/history information to open quickly; receipts are fetched when needed. Sign out on shared devices. No method of storage or transmission is completely secure.

Retention and deletion

Account and trip records remain while needed to provide the service, unless deletion is requested. Deleting an expense in the app may retain its edit/audit history; removing it from view is not an account/data deletion request. You may request deletion of your TripPocket account and associated data using Account → Delete account and data, or https://tptravelexpense.com/account-deletion. Email sales@lakesidevillageproduction.com from your sign-in email where possible. We verify account ownership before deleting data and aim to complete verified requests within 30 days.

Deletion covers the Firebase sign-in record, owned trips/expenses/receipts and related access records, membership/invitation references, device registrations and our purchase-entitlement records. Where your entries are in another person's shared trip, we will remove your personal identifiers and personal attachments; non-identifying amounts needed for the remaining members' accounting may remain. Store/provider transaction records may be retained as required for accounting, fraud prevention or law. Deletion does not automatically refund a purchase or delete your Google account. Provider retention and backup cycles may differ; any required retention or delay will be explained in our response.

Receipt-scan rate-limit records contain hashed account identifiers and timestamps, not the receipt itself; old entries are pruned during subsequent scans. Purchase-webhook deduplication records older than 30 days are pruned during subsequent events. Website visitor statistics may be retained for all-time reporting.

Your choices

You can edit your trip data within your role, remove optional receipts/locations, manage shared access as owner, disable notifications, manage available ad privacy choices, and request access, correction or deletion by email. You can reset/delete your advertising ID in Android settings. Google Play handles purchase/refund requests under its policies.

Adults and updates

This release is intended for adults aged 18 and older and is not directed at children. Contact us if a child's data has been submitted. We may update this policy and will display the updated date and notify users of material changes where required.