Privacy Policy
Effective 21 August 2026
This policy explains how InBuddy handles information when you use the InBuddy app, website and support services.
Information we handle
- Account information: email address, account identifiers, authentication records and profile preferences.
- Trip and app content: onboarding choices, guide progress, translation text, AI-assistant messages and support or concierge messages.
- Photos, audio and location: only when you choose a feature that needs them, such as photo translation, voice translation or map location. Location may also be included in a map search you request.
- Purchase and service information: plan, order, payment status, coupon or referral data, eSIM fulfilment details and concierge request details. Stripe handles card information; InBuddy does not store full card numbers.
- Technical and usage information: device and app version, platform, IP address, request logs, crash or error details and in-app events used to operate and improve the service.
Why we use it
We use information to provide requested features, authenticate accounts, complete purchases and eSIM delivery, answer support requests, prevent abuse, monitor reliability, meet legal obligations and improve the product.
Website travel checklist
Checklist ticks are saved in this browser when local storage is available. If you request an email, we send your email address and current checklist progress to our backend and use Resend to send that one-time message. This does not enroll you in a newsletter or convert your email address into an InBuddy account. A technical guest session and a secure session cookie support authentication and prevent duplicate sends. Cloudflare Turnstile checks for abuse when a new web guest session is needed. Provider acceptance does not guarantee inbox delivery. Retry details stay in page memory, and retries stop after 23 hours because the email provider only retains duplicate protection for 24 hours. Closing or reloading the page loses those retry details.
Service providers
We share only what is needed with providers that help deliver the service. These may include Stripe for payments, Airalo and its network partners for eSIM fulfilment, AutoNavi/AMap for mainland-China map requests, cloud hosting and database providers, email and support providers, and AI or translation providers selected by InBuddy for the requested feature. Those providers process information under their own terms and applicable data-protection obligations.
Choices and permissions
You can decline camera, microphone, photo-library, location and notification permissions. The related feature may not work, but the rest of the app remains available where possible. You can delete a signed-in account from You → Settings → Delete account or follow the account deletion instructions.
Retention and security
We keep information only as long as needed for the purposes above, including fraud prevention, support, accounting, dispute handling and legal requirements. We use access controls, encryption in transit and operational safeguards, but no online service can guarantee absolute security.
International processing and children
Service providers may process information in countries other than your own. InBuddy is a general travel service and is not directed to children under 13. If you believe a child has provided personal information, contact us.
Contact
For privacy questions or requests, email support@inbuddy.ai.