Privacy Policy for Compis

Account Information

• Name and email address
• Authentication provider information (Google or Apple sign-in)
• Profile photo and short bio, if you choose to add them
• Preferences such as language and preferred currency

Trip Information You and Your Group Provide

Compis is a group trip planning tool. The information entered into a trip may include:

• Trip name, description, dates and type of trip
• Your availability on the trip calendar
• Proposed destinations, votes, polls and comments
• Itinerary items (stays, transfers, activities, notes, confirmation numbers and links)
• Expenses, how they are split, and payments recorded between members
• Checklist items and who they are assigned to
• Your maximum budget for the trip (see section 3)

Device and Technical Information

• Device type, operating system and app version
• A push notification token, if you allow notifications
• Error and crash diagnostics, used to fix problems in the App

• Create and manage your account
• Provide the trip planning features: dates, destinations, itinerary, expenses and checklist
• Send notifications about your trips (new members, votes, expenses, reminders before the trip)
• Process purchases of the Trip Pass and Premium subscription
• Respond to support requests and send account emails such as password reset codes
• Improve the functionality, stability and security of the App

We do not sell personal data to third parties, and we do not use your trip content for advertising.

Compis is collaborative: the content you add to a trip (comments, votes, expenses, itinerary items, checklist items, your availability and your RSVP) is visible to the other members of that trip, together with your name and profile photo.

Your maximum budget is private: other members only see an aggregated range once enough members have answered, never your individual amount.

Anyone with a trip's invite link or code can see a short preview of that trip (its name, dates, destination, number of travelers and the organizer's first name) before joining.

Data is stored using modern cloud infrastructure with encrypted connections and access controls. We take reasonable technical and organizational measures to protect your information from unauthorized access, loss, misuse, or alteration. However, no system can guarantee absolute security.

Compis uses third-party services to operate, including:

• Authentication providers (Google Sign-In, Sign in with Apple)
• Cloud database and backend infrastructure (Convex)
• Push notification services (Expo, Apple Push Notification service, Firebase Cloud Messaging)
• Subscription and in-app purchase management (RevenueCat, Apple App Store, Google Play)
• Transactional email delivery (Resend)
• Error and crash reporting (Sentry), which may receive technical diagnostic information

These providers process only the data necessary to provide their service, under their own privacy policies.

Purchases are processed entirely by Apple or Google. We never receive or store your card details; we only receive confirmation of the purchase, used to unlock the features you paid for.

Your information is kept while your account is active or as needed to provide the service. In-app notifications are deleted automatically after 90 days, and error diagnostics after 30 days.

You can request deletion of your account and associated data at any time through our account deletion request page or by writing to team@heycompis.com. Trips you own are deleted together with their content. Contributions you made to other people's trips may be kept in anonymized form where needed to keep the group's shared records, such as expense balances, correct.

As a company registered in Colombia, Programantum S.A.S. processes personal data in accordance with Colombian Law 1581 of 2012 and its regulatory decrees ("Habeas Data"). Depending on your location, you may have the right to:

• Know, update, and rectify your personal data
• Request proof of the authorization given for its processing
• Be informed about how your data has been used
• Request deletion of your data, subject to legal or contractual limits
• Revoke your authorization for its processing, where applicable

To exercise any of these rights, contact us at team@heycompis.com. If you are located outside Colombia, your local data protection laws may grant you additional rights, which we will honor to the extent they apply.

Compis is not intended for children under the age of 13, and we do not knowingly collect their personal information.

We may update this Privacy Policy from time to time. The updated version will be posted here with a revised date.

Questions about this Privacy Policy: team@heycompis.com