Trippenny

1. Who we are

Trippenny (trippenny.com) is a shared trip-expense app run by Jeff Torcato, a sole proprietor in India. Under the Digital Personal Data Protection Act 2023 we are the Data Fiduciary for your personal data: we decide what is collected and why.

This notice explains what we collect, why, who we share it with, how long we keep it, and your rights. It applies to the website and the installed app.

Questions, requests and complaints: [email protected]. Jeff Torcato answers this address and acts as our grievance officer. We reply within 30 days.

By signing in with Google, you confirm you are 18 or older and agree to this notice and our Terms.

2. What we collect and why

We collect only what Trippenny needs to split trip costs. We don't sell your data, show ads, or build profiles of you.

What	Where it comes from	Why we use it
Your name, email address and profile photo link	Google, when you sign in	To create your account, sign you in, and show you to people on your trips
Home currency	You	To total your spending across trips
UPI ID (optional)	You	To show the mates who owe you, so they can pay you back
Trips: name, place, dates, currency, budgets	You and your trip mates	To run the trip
Expenses: amount, currency, category, description, date, time, place, who paid, how it's split	You and your trip mates	To work out who owes whom, budgets and insights
Payments between mates: amount, method, note, date	You and your trip mates	To settle balances
A history of changes to expenses and payments	Created as you use the app	So everyone on an expense can see what changed and who changed it
Names and email addresses of mates you add	You, about other people	To split costs with them and email them an invitation
Receipt photos you scan	You	To read the items and amounts. We don't store the photo
Words in Quick add we don't recognise	You	To suggest a category
Notification subscriptions for your devices	Your browser, if you turn notifications on	To send you notifications
IP address, browser type and request logs	Your device, automatically	To keep the service secure and investigate misuse, and because the law requires us to keep logs

People added by someone else. If a mate added you to a trip, we hold the name and email address they gave us. We use them only for that trip and its invitation. You can ask us to remove them at [email protected].

Cookies. We use only the cookies needed to keep you signed in and protect forms. There are no analytics or advertising cookies. Google's sign-in on our login page may set Google's own cookies, under Google's privacy policy.

3. Who we share it with

Your trip mates see what the app shows on a trip: your name and photo, the expenses and payments you're part of, and your UPI ID if they owe you. They don't see expenses you're not part of.

Service providers process data for us, under contracts that require them to protect it and use it only to provide their service:

Provider	What they do	Where
Amazon Web Services	Hosts the app, database and backups; sends our emails	Mumbai, India
Cloudflare	Carries all traffic to and from the site and protects it from attacks	Worldwide network
OpenAI	Reads receipt photos and suggests categories for Quick add words. It doesn't use this data to train its models	United States
Browser push services (Apple, Google, Mozilla)	Deliver notifications to your devices. The contents are encrypted	Their own networks

Google signs you in and hosts profile photos. It acts under its own privacy policy, not on our behalf. So does Google Forms, if you use "Send feedback".

Data sent outside India. Receipt photos and Quick add words go to OpenAI in the United States, and Cloudflare's network spans many countries. The DPDP Act allows these transfers unless the Government restricts a country, and none is restricted today.

When the law requires it. We disclose data to authorities only when Indian law requires us to.

4. How long we keep it

Data	Kept until
Your account	You ask us to delete it. You can cancel for 14 days after asking, and we delete it within 30 days of your request
Trips and their expenses	The trip's owner deletes the trip. If the owner deletes their account, the trip passes to another member, or is deleted if no one else on it has an account
Your name on other people's trips	Kept after you delete your account, so your mates' records and balances stay correct. Your email address and link to your account are removed
Receipt photos	Not stored by us. OpenAI may keep them for up to 30 days to monitor abuse
Quick add words	Not stored by us. OpenAI may keep them for up to 30 days to monitor abuse
Backups	35 days
Logs, including IP addresses	1 year, as the DPDP Rules require, then deleted

We may keep data longer only where another law requires it.

5. Your rights

Under the DPDP Act you can:

Right	How
Know what we hold. Get a summary of your data, what we do with it, and who we've shared it with	Email [email protected]
Correct or update it	Change your currency and UPI ID in the Account tab. Your name and photo come from Google, so change them there. Email us for anything else
Delete it	Account tab → Delete account, or email us
Withdraw consent	Delete your account. It's as easy as signing up. Withdrawing doesn't undo what we did lawfully before
Nominate someone to use these rights for you if you die or can't act yourself	Email us their name and email address
Complain	Email us first. If you're not satisfied, complain to the Data Protection Board of India

How to ask. Email [email protected] from the address you sign in with, so we can confirm it's you. If you write from another address, we may ask you to confirm through your account first.

How fast. We reply within 30 days. The law allows up to 90.

6. Security, children and changes

Security. Data travels encrypted, and the database, disks and backups are encrypted at rest. Access to servers and secrets is limited and logged. Sign-in goes through Google, so we never hold a password for you.

If there's a breach. If your personal data is exposed, we'll email you without delay. We'll say what happened, what it may mean for you, what we've done, and what you can do. We also report it to the Data Protection Board of India as the law requires.

Children. Trippenny is for people aged 18 or older. If we learn that an account belongs to someone under 18, we delete it. If you think a child has signed up, tell us at [email protected].

Changes to this notice. When we change something important, we'll tell you in the app before it takes effect, and ask you to agree again where the law requires. The version at the top shows which notice applies.