Privacy policy

Globigo is operated by Verselix, the controller of the personal data described here. For anything in this document, write to [email protected]. A person reads that address.

Three sources: what you give us, what the app records as you use it, and what our advertising and analytics partners collect.

What you give us

• Your account. A stable identifier from Apple or Google, your name, and your email address. Apple lets you withhold your email — if you do, we never receive it and the account works without it.
• Your profile. A username, photo, date of birth, gender, home country, languages you speak, and the travel styles and interests you pick during signup. Date of birth is stored as a date only, and is used to show an age rather than being frozen into a number that goes stale.
• Your trips. Destinations, dates, itineraries, flights, packing lists, to-do lists, documents you attach, and photographs you add.
• Money. What you spent, in what currency, and who owes whom. Globigo records amounts; it never touches money and is not a payment service.
• Messages. What you send in direct and group chats, held so the conversation still exists on your next device.
• Vibes and other public content. Posts you write, comments, and anything you share publicly. See below.

What the app records

• Your current position, if you allow it — one position, overwritten each time. See the location section below.
• Usage and diagnostics. Which screens you open, which actions you take, crashes, and device information such as model, operating system version, language and app version.
• Session recordings. Our analytics provider records how you move through the app. Text you type and content on screen are masked before the recording leaves your device, so the recording shows that a field was filled in, not what was in it.
• Advertising identifiers. A resettable device advertising ID, and approximate location derived from your IP address. Only where you have agreed — see Advertising.

A vibe is a post you write inside Globigo. Vibes, comments, your username and your profile photo are visible to other people, and depending on your privacy settings may be visible to anyone with the app — including people who are not signed in, and search engines, if we later publish them on the web.

Treat anything you post as public and permanent in practice. Deleting a vibe removes it from Globigo, but it does not reach copies other people have already saved, screenshotted or shared.

Your trips, expenses, bags, documents, chats and location are not public and are never posted anywhere by us. Private lists stay private even from the trip organiser.

Globigo keeps one current position for you, overwritten every time it updates. There is no history of where you have been, because none is kept. The travel timeline in the app is built from the places you put in your own itinerary, not from a record of your movements.

Recording a position at all, and whether people on a trip with you can see it, are two separate settings and both are yours. Turning location off deletes the position we hold rather than hiding it. Your phone’s own permission sits above both, and without it there is nothing for us to record.

Globigo shows advertising, supplied by third-party advertising networks including Google AdMob. Where you agree to it, those ads are personalised: the network uses your device advertising ID, approximate location and information about your activity in this and other apps to choose which ads to show, and to measure whether you interacted with them.

Under California law, sharing information with an advertising network for personalised advertising counts as selling or sharing personal information, whether or not money changes hands. You have the right to stop it, and doing so costs you nothing but the relevance of the ads.

How to turn it off

• On iPhone and iPad, we ask before any tracking begins. Decline and no advertising ID is shared. You can change your mind in Settings › Privacy & Security › Tracking.
• In the UK, EU and Switzerland, we ask for consent before personalised advertising or non-essential analytics, and you can withdraw it at any time in the app’s privacy settings.
• In California and other US states with the right, you can opt out of the sale or sharing of your personal information in the app’s privacy settings, or by writing to us. We also honour Global Privacy Control signals where we receive them.
• Anywhere, you can reset or clear your advertising ID in your phone’s own settings.

Decline and you still see ads — they are simply chosen by the screen you are on rather than by who you are.

Everything above is about the app. This website is separate and collects far less, but it is not nothing, so it is written down here too.

With your agreement, this site loads the Meta Pixel, which tells Meta (Facebook and Instagram) that a browser visited a page here. Meta uses that to measure whether an advertisement we placed led somebody to the site, and may match the visit to a Facebook or Instagram account. It sets cookies on facebook.com and reads your IP address and browser details.

It does not load until you say yes. On your first visit you are asked, and until you answer, nothing is requested from Meta at all — not the script, not the tracking image. Decline and the site works exactly as it does otherwise; we simply do not learn which advertisement, if any, brought you here.

To change your mind, clear this site’s data in your browser and you will be asked again. We do not keep the answer anywhere but in your own browser, so there is nothing on our side to change.

For people in the UK and the European Economic Area, the lawful bases are these:

• To provide the app — performing our contract with you. This covers your account, trips, expenses, lists, messages and anything else the app cannot work without.
• Your consent — for location, notifications, personalised advertising, and analytics that are not strictly necessary. You may withdraw it at any time, and withdrawing it does not undo processing that already happened.
• Our legitimate interests — keeping the service secure, preventing abuse, and understanding in aggregate which features are used, balanced against your rights.
• Legal obligation — where we must keep records, for example for tax on subscription payments.

• People you travel with. Members of a trip see its itinerary, expenses and shared lists. Your private lists and your location are not included unless you choose to share them.
• Anyone, for public content. Vibes, comments, your username and profile photo, subject to your privacy settings.
• Our service providers, who process data on our instructions and may not use it for their own purposes: hosting and database (DigitalOcean, Railway), file storage (Amazon Web Services), push notifications (Expo, Apple, Google), sign-in (Apple, Google), place search and maps (Google), subscriptions (RevenueCat, Apple, Google), and product analytics (PostHog).
• Advertising networks, which act for their own purposes as well as ours, and only as described above.
• Nobody else. We do not sell your trips, messages, documents, photographs or location to anyone, and we never will.

Globigo is operated from India and hosted in the United States. If you are in the UK or the European Economic Area, your data is transferred outside it, protected by the UK International Data Transfer Agreement or the European Commission’s Standard Contractual Clauses with each provider.

• While your account exists, your content stays so the app works.
• Session recordings and analytics events are kept for up to twelve months, then deleted.
• After you delete your account, see below.
• Records we must keep by law, such as payment records, for as long as the law requires.

You can delete your account in the app, at Settings › Delete account, or from this page. Everything private to you is removed: your profile, photographs, documents, saved places, notifications, vibes and comments.

Records entangled with other people are not deleted, because they are not yours alone — an expense you paid on a shared trip is part of that trip’s accounts, and a message you sent is part of somebody else’s conversation. Those survive with you scrubbed from them and shown as a deleted traveller. Your username is released for somebody else to use.

Wherever you live, you can ask us to show you what we hold, correct it, delete it, hand it over in a portable form, or stop a particular use. Write to [email protected] and we will answer within 30 days.

In the UK and EEA you may also object to processing based on legitimate interests, and complain to your data protection authority — the ICO in the UK. In California you have the rights to know, delete, correct, and to opt out of sale or sharing, and we will not treat you worse for exercising any of them.

Globigo is not for children under 13, and we do not knowingly collect anything from them. Where local law sets a higher age for consent to data processing — 16 in parts of the European Economic Area — that age applies instead.

We do not knowingly show personalised advertising to anyone under 18. If you believe a child has given us personal data, write to us and we will delete the account.

Traffic is encrypted in transit. Photographs and documents live in private storage reachable only through short-lived signed links. Nobody at Verselix reads your messages or your documents. No system is perfect, and if a breach affects you we will tell you and the relevant regulator as the law requires.

If we change something that materially affects you — a new category of data, a new purpose, a new kind of sharing — we will tell you in the app before it takes effect, and ask again for consent where consent is what allows it.