Privacy Policy

The short version

• Your trip lives on your phone first and works offline.
• To share a trip between its members, Tabi keeps a copy on our server: the name you enter, an anonymous device identifier (stored only as a keyed hash) and the trip content members add.
• Vault items marked Only on this phone and your location never reach our server.
• We don’t collect your email or phone number, show ads, use analytics or tracking SDKs, or sell or share anything for marketing.

What stays on your phone

Everything you add to Tabi is stored in the app on your device, so it is available with no connection. Some things are never sent anywhere:

• Private vault entries. Items marked “Only on this phone”, and their files, never leave your device. Our server refuses them even if they were sent.
• Your location. If you allow it, your position is used only on the device to show where you are on the map and to sort places “Near me”. It is never sent to our server.
• Preferences such as theme, currency choices, favourite phrases and kana practice progress.

What we store on our server

Tabi syncs each trip through our server so that everyone on it sees the same plan and changes reach the other phones. Our server is hosted by DigitalOcean in the United States (San Francisco region). For that we store:

• The display name you enter (for example “Hector”), shown to the other members of your trips, and the avatar colour Tabi assigns you.
• An anonymous device identifier. The app creates a random identifier on your phone. Our server stores it only as a keyed hash, together with hashed sign-in tokens, so it can recognise your device. It is never shown to other members.
• Trip content that members add: the trip’s name and dates, bookings, places, day plans, expenses, checklists, notes, and vault entries and files that aren’t marked “Only on this phone”.
• Membership and sharing records: who belongs to which trip, invite codes (single-use, expiring after seven days), and timestamps of changes so both phones end up with the latest version.

There is no email address, phone number, password or account. Trip content is visible only to the members of that trip. Data is sent over HTTPS.

Services the app talks to directly

To draw maps, find places and fetch rates, the app on your phone contacts these services directly. Each one receives your device’s IP address as part of the request, plus only what is listed here. None of them receives your name, your trip or anything identifying you as a Tabi user.

• OpenFreeMap (map tiles): the map tiles for the area you are viewing.
• Photon by komoot (place search): the text you type into search and the centre of the map, to rank nearby results first; and the coordinates of a pin you drop, to suggest its name and address.
• OSRM on routing.openstreetmap.de (walking routes): the coordinates of the places in a day’s plan, including where the day starts and ends.
• Open-Meteo (weather): the coordinates and time zone of a day’s location.
• Frankfurter (exchange rates): the two currency codes you convert between.

When you tap Directions or Open in Maps, the place is handed to Apple Maps or Google Maps, and their own privacy policies apply.

Services our server talks to

When you paste a Google Maps or Apple Maps link, the app sends it to our server, which opens it on Google’s or Apple’s map pages to find the place’s name and coordinates. If a link carries only a name and address, the server may look that text up with Photon as a last resort. The link is not stored or logged; only the place you then save becomes part of the trip. A link to a Google Maps saved list works the same way: the server reads the places in the list, which must be shared by link, and only the ones you choose to import are saved to the trip.

IP addresses and logs

Your IP address is used transiently, in memory, to rate-limit requests such as joining a trip with a code. It is not stored with your trip data. Our logs mask invite codes and pasted links. Our hosting provider may keep standard short-lived request logs to operate its network.

What we don’t do

• No advertising, and no advertising or analytics SDKs.
• No tracking across apps or websites, and no fingerprinting.
• No selling of data, and no sharing of it for marketing.
• No access to your contacts, calendar or photo library beyond the photos and files you choose to import.

Retention and deletion

• On your phone: deleting the app erases everything stored on the device.
• Deleted items: a deletion syncs to every member of the trip. A deleted vault entry is stripped of its content on our server and its files are removed within an hour (the delay allows Undo). Other deleted items are kept as a deletion record until the trip itself is deleted, so an old copy on another phone can’t bring them back.
• Making a vault item private later (“Only on this phone”) removes it from the other members’ phones and strips its content from our server; its files are removed within an hour.
• Leaving a trip removes you from it. When the last member leaves, the trip, everything in it and its files are deleted from our server.
• Delete my data. “Delete my data” in More › Trip settings erases your member identity from our server, leaves all your trips (a trip whose last member leaves is deleted with its files) and erases everything on your phone. “Leave trip” in the same screen removes you from one trip.
• By email: at any time, write to [email protected] and we will delete your server-side data. We answer within 30 days.

Children

Tabi is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has used Tabi, contact us and we will delete the data.

Your rights

Wherever you live, you can ask us what we hold about you, have it corrected or deleted, or object to its use by emailing [email protected]. Because we hold no email or account, we may ask you for your trip’s name or the name you used so we can find the right records.

Changes

If this policy changes, we will update the effective date above and, for material changes, tell you in the app.

Contact

Questions about privacy: [email protected].