Privacy Policy
Effective date: 07/14/2026
This Privacy Policy explains how BuddyTrip ("BuddyTrip," "we," "us," or "our") collects, uses, and shares information when you use the BuddyTrip application and website at bbmi.app (the "Service").
We built BuddyTrip to help groups plan trips and run friendly competitions. We collect only what we need to make that work, we don't sell your data, and we don't serve ads.
Note: This is a plain-language policy for a small group-trip application. If you have questions, contact us at zgrether@gmail.com.
1. Information We Collect
Information you provide
- Account information. When you create an account, we collect your name and email address. If you sign in with Google, we receive your name, email address, and profile picture from Google (via your Google account's basic profile — "email," "profile," and "openid").
- Trip and planning information. Content you create or contribute in the app, including trips, crew/roster details, destination ideas and votes, date poll responses, schedule and lodging details, quick-info notes, and expense entries and splits.
- Competition and scoring information. Team assignments, game and match setup, and scores you enter (golf scores, match/hole outcomes, and related results).
- Messages. Trip and team chat messages you send within the app.
Information about people you invite
When you invite someone to a trip, we create a placeholder ("guest") record using the name and/or email you provide, so they can be added to the trip before they create their own account. If that person later signs up with the matching email, their guest record is merged into their new account.
Information collected automatically
- Basic technical information needed to operate the Service, such as authentication tokens and session information.
- We use standard infrastructure logging from our hosting and database providers (see "Service Providers" below). We do not use advertising trackers.
2. How We Use Information
We use the information we collect to:
- Provide and operate the Service (create accounts, manage trips, run competitions, deliver chat and notifications);
- Authenticate you and keep your account secure;
- Send you Service-related email, such as trip invitations;
- Maintain, troubleshoot, and improve the Service;
- Respond to your requests and provide support.
We do not sell your personal information, and we do not use it for third-party advertising.
3. How We Share Information
With other users of your trip
BuddyTrip is a group application. Information you contribute to a trip — your name, RSVP and voting responses, scores, expenses, and trip-channel chat messages — is visible to other members of that trip. Team-channel chat messages are visible only to members of your team.
With service providers (sub-processors)
We rely on a small number of third-party services to run BuddyTrip. These providers process data on our behalf:
- Supabase — database, authentication, and file/data storage (hosts your account and trip data).
- Google — sign-in, if you choose to sign in with Google (Google provides us your basic profile information; your use of Google sign-in is also subject to Google's own privacy policy).
- Resend — sending transactional email such as invitations.
- Vercel — application hosting and delivery.
We also retrieve golf course information (such as hole pars and yardages) from a third-party course-data provider ([golfapi.io]) to populate scorecards. We request course data from this provider; we do not send your personal information to it.
For legal reasons
We may disclose information if required to do so by law, or if we believe in good faith that disclosure is necessary to comply with a legal obligation, protect our rights or the safety of others, or investigate potential violations of our terms.
If BuddyTrip changes hands
If BuddyTrip is involved in a merger, acquisition, or transfer of assets, your information may be transferred as part of that transaction. We will note any such change here.
4. Data Storage and Security
Your data is stored with our database and hosting providers (primarily Supabase). We take reasonable measures to protect your information, including access controls and row-level security policies that restrict data access to the appropriate trip members. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
5. Data Retention and Deletion
We retain your information for as long as your account is active or as needed to provide the Service. When you or a trip owner deletes content (such as a trip, expense, message, or competition), that content is removed from our active database. You may request deletion of your account and associated personal information by contacting us at zgrether@gmail.com.
Some information may remain in routine backups for a limited period, and we may retain information where necessary to comply with legal obligations or resolve disputes.
6. Your Rights and Choices
Depending on where you live, you may have rights to:
- Access the personal information we hold about you;
- Correct inaccurate information (you can edit much of your profile and trip content directly in the app);
- Delete your personal information;
- Object to or restrict certain processing.
To exercise any of these, contact us at zgrether@gmail.com. You may also manage or revoke Google sign-in access from your Google account settings.
7. Children's Privacy
BuddyTrip is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
8. International Users
BuddyTrip is operated from the United States. If you access the Service from elsewhere, your information may be transferred to, stored, and processed in a country with different data-protection laws than your own.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" above and, where appropriate, notify you within the app. We encourage you to review this page periodically.
10. Contact Us
If you have questions about this Privacy Policy or your information, contact us at:
zgrether@gmail.com
This document is a good-faith description of BuddyTrip's data practices. It is not legal advice. Review it against your actual practices before publishing, and consider a legal review if the Service grows beyond private, invitation-based use.