Effective date: July 22, 2026
This Privacy Policy explains what information Groopie collects, how we use and share it, the legal bases we rely on, and the rights and choices you have. It applies to the Groopie app and https://groopie.ai.
Groopie ("we," "us," "our") is the controller responsible for the personal information described in this Policy. If you have questions, want our full legal-entity details, or wish to exercise a privacy right, contact us at privacy@groopie.ai.
If you are in the European Economic Area (EEA) or the United Kingdom, you can reach us about data protection at the same address; see "Your rights" and "EEA & UK users" below.
Account & profile: your name, email address, and optionally your date of birth, a profile photo, home city/location, how you found us, how you travel, and your interests. Providing a date of birth is optional.
Trip content: the trips, crews, itineraries, tasks, packing lists, expenses and settle-up handles (e.g., Venmo/Cash App/Zelle usernames), chat messages, comments, votes, photos, reviews, and other content you create or upload.
Support & feedback: messages you send us.
Crash & error data: to keep Groopie stable and secure, our crash-reporting tool (Sentry) records diagnostic information when the app errors — app version, device type and operating system, and a technical stack trace (scrubbed of credentials and personal content). This is essential to running the service.
Product analytics (optional, consent-based): if you agree, our analytics tool (PostHog) records how you interact with the app — screens viewed and actions taken, tied to a random identifier, never to your name or email. This is OFF until you opt in, and you can turn it off again at any time in the app's privacy settings.
Approximate location: if you add a home city or a place, we may look up its coordinates using a mapping/geocoding service to show it on a map. We do not continuously track your device location.
Push tokens: if you enable notifications, a device push token so we can deliver reminders and updates.
We use your information to: create and secure your account; provide and personalize Groopie's features (trips, chat, itineraries, tasks, packing, expenses, recommendations, cost estimates); power AI-assisted features; send reminders and service notifications; provide customer support; keep the service stable and prevent fraud, abuse, and security incidents; with your consent, understand and improve the product through analytics; and comply with legal obligations.
If you are in the EEA or the UK, we process your personal information only where we have a legal basis to do so:
Performance of a contract — to create your account and provide the core planning features you ask for (trips, chat, itinerary, tasks, packing, expense tracking, AI features you invoke).
Legitimate interests — to keep the service secure and stable (including crash and error reporting), prevent abuse and fraud, and communicate service updates, in each case balanced against your rights. You can object to processing based on legitimate interests (see "Your rights").
Consent — for optional product analytics, and for any other processing where we ask for it. You can withdraw consent at any time, without affecting processing done before you withdrew.
Legal obligation — where we must process information to comply with the law.
With your trip/crew members: content you contribute to a trip or crew (including your name, profile photo, and activity there) is visible to the other members of that group. That's how collaborative planning works.
With service providers (sub-processors): we use trusted third parties to run Groopie. They process your information only on our instructions and only to provide services to us, under contract. Our sub-processors are: Supabase (database & storage, United States); Railway (application hosting, United States); OpenAI (AI processing of prompts you submit, United States); Sentry (crash & error reporting, United States); PostHog (product analytics — only if you opt in, United States); Expo (push-notification delivery); Resend (transactional email such as password resets); and a mapping/geocoding provider for place lookups.
For AI features: relevant inputs (your prompt, trip details, and the recent chat context you're acting on) are sent to our AI provider to generate a response, as described below and in our Terms.
For legal reasons: we may disclose information if required by law or to protect the rights, safety, and security of Groopie, our users, or the public.
Business transfers: if Groopie is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction; we will require the recipient to honor this Policy.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
When you use an AI feature, inputs such as your prompt, relevant trip details, and the recent chat context you're acting on are sent to our third-party AI provider (OpenAI) to generate a response. Our provider processes these inputs to return a result and, under our agreement, does not use them to train its general models. AI output can be inaccurate — verify anything important. Don't put sensitive information you wouldn't want processed this way into AI prompts. A trip's organizer/editor can disable AI suggestions for that trip.
Optional product analytics are OFF by default. We ask for your consent before turning them on, and you can withdraw it at any time from the app's privacy settings — it's as easy to turn off as it was to turn on. Turning analytics off does not affect the essential crash and error reporting we rely on to keep the app working and secure; you can object to that processing by contacting privacy@groopie.ai.
Our website does not use advertising cookies or third-party trackers.
Groopie is operated from the United States, and our sub-processors listed above are located in the United States and other countries. If you are in the EEA or the UK, transferring your information to these countries means it may be processed outside your home country.
Where we transfer personal information out of the EEA or the UK, we rely on appropriate safeguards — principally the European Commission's Standard Contractual Clauses (and the UK Addendum / International Data Transfer Agreement where applicable), together with additional technical measures such as encryption in transit and encryption of chat content at rest. You can request more information about these safeguards at privacy@groopie.ai.
We keep your account and profile information for as long as your account is active. When you delete your account, we erase your personal information, except where we must retain limited records to comply with legal obligations, resolve disputes, or enforce our agreements.
Content you shared with a trip or crew may remain visible to those members after you leave or delete your account, unless it is deleted — because it is now part of a shared record other people rely on. Crash/error diagnostics are retained for a limited period and then deleted; analytics data (if you opted in) is retained on a rolling basis.
You can view and edit much of your profile and content directly in the app, and you can delete your account at any time. Depending on where you live, you also have rights over your personal information, including the rights to: access a copy of it; correct it; delete it; export it (data portability); restrict or object to certain processing; and withdraw consent you previously gave.
To exercise any of these rights, use the in-app controls where available, or email privacy@groopie.ai. We will respond within the time required by applicable law (generally within one month for EEA/UK requests). We will not discriminate against you for exercising your rights.
If you are in the EEA or the UK and believe we have not handled your information properly, you have the right to lodge a complaint with your local data-protection supervisory authority. We'd appreciate the chance to address your concern first, so please consider contacting us.
We use technical and organizational measures designed to protect your information, including encryption in transit, encryption of chat content at rest, access controls, and row-level database security. No method of transmission or storage is 100% secure, so we can't guarantee absolute security. Help us by using a strong password and keeping your device secure.
Groopie is for ages 13 and up and is not intended for children under 13; we don't knowingly collect personal information from them. In some EEA countries the minimum age for consent to online services is higher (up to 16); if you are under that age in your country, please use Groopie only with the consent or involvement of a parent or guardian. If you believe a child has provided us information without appropriate consent, contact privacy@groopie.ai and we'll take appropriate steps to delete it.
This section supplements the rest of this Policy for individuals in the EEA and the UK. The controller of your personal information is Groopie (see "Who we are"). The legal bases we rely on are set out in "Legal bases for processing," international transfer safeguards in "International data transfers," and your rights (including the right to complain to a supervisory authority) in "Your rights."
If we are required to appoint an EEA and/or UK representative under Article 27 GDPR, their contact details will be published here; in the meantime you can reach us directly at privacy@groopie.ai.
We may update this Policy from time to time. If we make material changes, we'll take reasonable steps to notify you and update the "Effective date" above. Continuing to use Groopie after changes take effect means you accept the updated Policy.
Questions or requests about your privacy, or to exercise your rights? Email us at privacy@groopie.ai.