Privacy policy

Who we are

Tabito is published by Mohammed Faris K, an individual developer ("we", "us"). We decide how and why the personal data described here is handled. You can reach us at support@tabitoapp.com.

What we handle and why

We handle only what the app needs to work. The table lists each kind of data, why it is needed, where it lives and how you can remove it.

Data we handle

Data	Why	Where	How to remove
Sign-in details. Your name and email address from Apple or Google, or the email address you type for an email code, plus an account ID. If you use Apple's Hide My Email, we receive Apple's relay address instead of your real one.	To sign you in, recognise your account and show your name in the app.	Firebase Authentication and your profile in Firestore (Google Cloud).	Delete your account in the app.
What you enter. Trips, itineraries, expenses and splits, refunds, bookings, wallet and card entries you create, checklists, journal entries, notes, places, and profile settings such as home country, home currency, home airport and passport expiry date. The app asks for a passport expiry date for reminders, not a passport number.	To provide the app and sync it across your devices and after a phone change.	Your account in Firestore, Cloud Firestore region Mumbai (asia-south1). A copy is kept on your phone so the app works offline.	Edit or delete items in the app, or delete your account.
Documents. Tickets, visas, insurance and ID files you add.	To keep them with the trip.	The file itself is stored where you choose: your own Google Drive, or only on your phone. Our servers keep only a record of the file (its name, which trip it belongs to and where it is stored), not the file.	Delete the document in the app; files in your own Google Drive are yours to delete there.
Sign-in code emails. If you sign in with an email code, the address you type.	To send you a one-time code and stop abuse.	The address goes to our email provider, Resend, to deliver the message. We store a one-way hash of the address and of the code (expires after 10 minutes), plus counters, keyed by one-way hashes of your email address and of your network address (IP), that limit repeated requests.	Codes expire on their own. Ask us to erase the rest (see Deleting your data).
Usage and crash reports. A few anonymous events (for example that a first-run step was reached, a trip was created, or an import was used) and crash reports, with device model, iOS and app version, and approximate country. Event details are fixed words, never names, amounts, places or document contents.	To find bugs and see which parts of the app are used.	Firebase Analytics and Crashlytics (Google). Ad personalisation and Google signals are switched off and the advertising ID is not collected.	Turn off "Share anonymous usage and crash data" in Settings. It is on until you switch it off.
Exchange rates. The app asks public rate services for the rate between two currencies on a date.	To convert totals and show "converted at today's rates".	Public services: a currency API served through jsDelivr and Cloudflare Pages, and Frankfurter (European Central Bank reference rates). The request contains only currency codes and a date, but like any web request it reveals your IP address to the service.	Nothing about you is stored by us. Rates are cached on your phone.
Reminders. Booking deadlines, check-in, budget alerts, passport validity and similar.	To remind you at the right time.	Scheduled on your phone as local notifications. Nothing is sent from a server.	Switch them off in Settings, or in iOS Settings.
Face ID lock.	To keep the app private on your phone.	Handled by iOS on the device. We never receive Face ID data.	Switch it off in Settings.
Review SMS and tickets. Card messages you paste or forward, and ticket files you choose to read.	To turn them into expenses and bookings that you approve.	Read on your phone only. Review SMS looks only at text you give it, never at your messages.	Delete the resulting expense or booking in the app.
Voice notes. Recordings and their text, if you use them.	To attach notes to a trip day.	Recorded on your phone. Turning speech into text uses Apple's speech recognition on iOS, under Apple's terms.	Delete the note in the app, or delete your account.
Messages to support. Whatever you send to support@tabitoapp.com.	To answer you.	Our email inbox.	Ask us to delete the conversation.

What we do not do

• We do not show ads or sell your data.
• We do not track you across other apps or websites.
• We do not read your contacts, your photo library (beyond a file you pick), your messages or your location history, and we have no access to your bank or card accounts.
• We do not ask for passport, card or ID numbers as separate fields. If you type such numbers into a note or document, they are part of what you chose to store.

Google user data

Tabito can use two kinds of Google user data:

• Google sign-in. If you sign in with Google, we receive your name and email address. We use them only to create and recognise your account and to show your name in the app.
• Google Drive, the drive.file scope. If you choose Google Drive for document storage, Tabito asks for the drive.file permission. It lets the app see and manage only the files and folders that Tabito itself created in your Drive, never the rest of your Drive. We use it only to save, open, move and delete the documents you add to your trips.

Limited Use. Tabito's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Google user data only to provide and improve the features you see in the app; we do not transfer it to others except as needed to provide those features, to comply with the law, or as part of a merger or sale with notice to you; we do not use it for advertising; and no person reads it except with your consent, for security or abuse investigation, or where the law requires.

You can stop Tabito's access at any time in your Google Account under Security, then third-party access, and by switching document storage in the app.

Where your data is kept

Your account data is stored in Google's Firebase services. Our database (Firestore) and the functions that send sign-in codes run in the Mumbai region (asia-south1). Some Firebase services, such as Authentication, Analytics and Crashlytics, can process data in other countries, which means your data may be handled outside the country where you live. Documents live in the place you choose (see the table). Data on your phone is protected by iOS.

Who else is involved

We use these providers to run Tabito. We do not sell or rent your data to anyone.

• Google (Firebase, and Google Drive if you choose it) for sign-in, storage, usage and crash reports.
• Apple for Sign in with Apple, the App Store and TestFlight.
• Resend to deliver sign-in code emails.
• Cloudflare to host this website, and one of the public exchange-rate services is also served from Cloudflare.

We may disclose data if the law requires it.

How long we keep data

• Your account data stays until you delete it or delete your account.
• Sign-in codes expire after 10 minutes.
• Usage and crash reports are kept by Google under the retention period set in Firebase.
• After you delete your account, remaining copies can take some time to clear from Google's backup systems.

Deleting your data

In the app, open Settings, tap your name, choose Account, then Delete account. This removes your trips, tickets, spending and profile from our servers and clears everything stored by Tabito on that phone. Step-by-step instructions, and what happens to files in your own Google Drive, are on the Delete your account and data page.

The in-app deletion does not remove a few small server-side records that the phone cannot delete: the one-way hashed sign-in code records described above and, if purchases are ever switched on, the trip allowance and purchase records. They hold no trip content. Email support@tabitoapp.com and we will erase them. If you cannot open the app, you can also ask us by email to delete your account.

Your rights

Depending on where you live, for example under the EU and UK GDPR or India's Digital Personal Data Protection Act, 2023, you may have the right to know what data we hold about you, to have it corrected or erased, to receive a copy, to object to or limit some uses, to withdraw consent, and to complain to your data protection authority. Most of this you can do yourself in the app: edit anything you entered, use Export my data (Settings, Import and export) to get Excel, CSV or PDF copies, and delete your account. For anything else, email us and we will help. We may need to confirm that the request comes from the account owner.

Children

Tabito is not directed at children under 13, and we do not knowingly collect their data. In the European Union and some other places, people under 16 need a parent's or guardian's consent to use an online service like this. In India, the law treats anyone under 18 as a child for consent purposes, so please use Tabito with a parent's or guardian's agreement if you are under 18. If you believe a child has given us data, email us and we will delete it.

Security

Data is encrypted in transit with HTTPS. Database rules let each signed-in account read and write only its own data. The app can lock with Face ID and can hide every amount on screen. Access to the database is limited to the publisher, who uses it only to run and fix the service. No online service is perfectly secure, so please keep your sign-in and phone safe.

This website

tabitoapp.com sets no cookies, uses no analytics or advertising tools, and loads no fonts, scripts or images from other sites. Like any website, it is served by a hosting provider (Cloudflare), which handles your IP address and request details to deliver pages and to protect against abuse. If you email us, we receive your email address and message.

Optional features, not yet available

These features are built but switched off. They are not available in the app today. This section says how data would be handled when they are turned on, and this policy will be updated first.

AI add-on

If you choose to use it, an AI feature would send only the text you pick (for example a booking confirmation or a note you type) for one trip at a time. Personal numbers such as passport and card numbers are masked on your phone before anything is sent. The text goes through our server to Anthropic, which processes it to produce a result, and each feature would have its own switch in Settings. We do not store the text or the result on our servers.

Trip packs and purchases

Purchases would be handled by Apple through the App Store. Tabito never sees your card details. We would keep a record of how many trips you have bought and used, and the Apple transaction identifiers, so that your purchases are restored on a new phone and refunds are handled correctly.

Changes to this policy

If we change this policy, we will update the date at the top. For significant changes we will tell you in the app before they take effect.

Contact

Questions, requests or complaints about privacy: support@tabitoapp.com.