Privacy Policy
Last updated: 16 June 2026
This Privacy Policy explains how BookMyTravelBuddy (“we”, “us”) collects, uses and protects your personal data when you use bookmytravelbuddy.com and related services. We act as the data controller for this processing. We follow the principles of data minimisation and purpose limitation, and we comply with the EU/UK GDPR.
1. Data we collect
- Account data: email address and, if you use Google sign-in, your name and profile picture from Google.
- Profile data: first and last name, home state and city in India, current city/country abroad, languages, profession, bio, gender, photo, phone and emergency contact (the last two are optional and only shared with a connection you accept).
- Activity data: flight posts you create, connection requests, chat messages, ratings, and reports you file.
- Technical data: server logs and essential cookies needed to keep you signed in and to keep the service secure.
2. How and why we use your data
- To create and manage your account (performance of a contract).
- To match travellers, show relevant flights near your home state, and enable chat between connected members (performance of a contract).
- To keep the community safe — moderating chat content, handling reports, blocks, and ratings (legitimate interest and legal obligation).
- To secure the service and prevent abuse (legitimate interest).
3. Sharing and processors
We do not sell your personal data. We share it only with service providers (processors) who help us run BookMyTravelBuddy:
- Supabase — authentication, database, file storage and realtime messaging.
- Google— optional “Sign in with Google” and the in-chat translation feature.
Other members see only the limited profile information described in our service: until you accept a connection, only first name, badges, rating and languages are visible. Full name, photo, bio, location and contact details are shared only after a connection is accepted.
4. Data retention
- Chat history is automatically deleted 24 hours after the flight date.
- Profile and account data are kept while your account is active. You can delete your account at any time from your profile, which removes your profile, flight posts and related data.
- We retain limited records where required for safety, dispute resolution or legal obligations.
5. Your rights
Under the GDPR you have the right to access, correct, delete, restrict or object to processing of your data, and the right to data portability. You can:
- Edit your profile data at any time from your profile page.
- Export your data or delete your account from your profile settings.
- Contact us via the Contact page to exercise any of these rights.
You also have the right to lodge a complaint with your local data protection supervisory authority.
6. Security
All data is transmitted over encrypted HTTPS connections. Access to personal data is restricted, and database access is protected by row-level security so members can only see what they are permitted to.
8. Changes to this policy
We may update this policy to reflect changes to our service or legal requirements. We will post the updated version here with a new “last updated” date.
9. Contact
Questions about your privacy? Reach us through the Contact page and select the “Privacy / data request” topic.
This document is provided for transparency and should be reviewed by qualified legal counsel before relying on it for compliance.