Privacy Policy

Who we are

Randomtrip operates a platform that connects travelers with independent trip curators (Trippers) who design and deliver surprise-travel experiences. This policy describes how we process personal data in that context.

Data we collect

We may collect:

• Account data: name, email, password hash, profile details you choose to provide, and authentication identifiers from providers such as Google when you use social login.
• Trip and journey data: traveler type, preferences, dislikes, budget signals, dates, party size, accessibility notes, and messages you send through the product.
• Transaction data: purchases, payment status, references from Mercado Pago or other processors (we do not store full card numbers on our servers).
• Technical data: IP address, device type, browser, approximate location from IP, logs, and cookies as described in our Cookie Policy.
• Communications: support tickets, emails, and in-app messages.

How we use data

We use personal data to:

• Provide the service: run the journey flow, match you with experiences, and enable Trippers to prepare itineraries.
• Process payments and prevent fraud.
• Improve the product: analytics, debugging, and research in aggregate or de-identified form where possible.
• Communicate with you: confirmations, service messages, and (where allowed) marketing with opt-out.
• Comply with law and enforce our Terms.

Legal bases (where applicable)

Depending on your region, we rely on contractual necessity (providing the service you request), legitimate interests (security, analytics, product improvement balanced against your rights), consent (cookies or marketing where required), and legal obligations.

Sharing with Trippers and partners

To deliver your trip, we share relevant brief details with the Tripper or operators fulfilling the experience. We use infrastructure, payment, email, and analytics vendors as subprocessors under contracts with confidentiality and security requirements. We do not sell your personal data.

International transfers

Your data may be processed in countries where we or our providers operate. Where required, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

Retention

We keep data only as long as needed for the purposes above, including legal, tax, and dispute resolution retention periods. Account data is removed or anonymized when no longer required, subject to applicable law.

Security

We implement technical and organizational measures designed to protect personal data. No method of transmission over the Internet is 100% secure; we encourage strong passwords and protecting your devices.

Your rights

Depending on applicable law, you may have rights to access, rectify, delete, restrict, or port your data, and to object to certain processing. You may also withdraw consent where processing is consent-based. To exercise rights, contact us via the details below.

• You can update parts of your profile in the app where self-service is available.
• You may lodge a complaint with your local data protection authority.

Children

Randomtrip is not directed at children under 16 (or the age required in your jurisdiction). We do not knowingly collect data from children. Contact us if you believe a minor provided data so we can delete it.

Changes

We may update this Privacy Policy from time to time. We will post the revised version on this page and, where appropriate, notify you by email or in-product notice.