Privacy, in plain words

What we store

• Your trip: its name, destination, dates, votes, itinerary, expenses and payments that people in the trip record.
• The names people join with, and the Venmo, Cash App or Zelle handles they choose to add. Only people in the same trip can see these.
• Receipt photos, if you scan one, so the group can look at it later.
• A device key in your browser so you stay signed in to the trip. We store only a scrambled (hashed) version of it.

Who can see a trip

Only people who have the full invite link. The private part of the link stays in your browser and is never sent to our servers in the address, so it doesn’t end up in logs. Trips aren’t listed or searchable.

Who else touches your data

• Our database and file storage run on Supabase. The site runs on Vercel.
• When you scan a receipt, the photo is sent to an AI model through Vercel’s AI Gateway to read the line items. It isn’t used for anything else.
• Exchange rates come from the European Central Bank through the Frankfurter API. We send only the currencies and date.
• If someone buys a Trip Pass, Stripe handles the payment. We never see card numbers.

What we don’t do

We don’t sell data, show ads, or move money between friends. Venmo and Cash App links open those apps with the amount filled in; the payment happens there.

Removing things

Anyone in a trip can delete expenses, votes and payments. To have a whole trip deleted, ask the organizer to contact us through the person who shared Tripmates with them while we’re in preview.

This page covers gotripmates.com and every trip link on it.

Last updated November 2026.