How TravelNeighbors handles your information.

Account and profile data

We process your email, authentication records, date of birth, city and country, profile text, preferences, membership status, and account activity. Date of birth is used to enforce the 18+ rule and is not shown to other members; age may be derived for matching. Profile information, public photos, trips, and activity status are visible only inside the signed-in member area, subject to blocks, account status, and privacy controls.

Photos and verification

Public profile photos are available to signed-in members. Private photos are available only after the owner accepts a request, and access ends after revocation or blocking. A verification selfie is stored in a private bucket and can be viewed only by the submitting member where supported and by authorized administrators reviewing the request. Verification evidence is scheduled for deletion 30 days after a decision; it is also removed during completed account deletion. The verification decision and audit record may remain for safety and accountability.

Messages, reports, and support

Messages are visible to conversation participants and are processed to deliver chat, unread counts, safety controls, and abuse prevention. Reports and related moderation records are available only to the reporter and authorized administrators as permitted by database policy. Authorized support administrators can access the minimum account, verification, report, and audit information needed to answer requests and protect the service.

Analytics and attribution

With your consent, first-party analytics records a random visitor ID, session ID, page path, referrer, UTM source/medium/campaign, language, device class, and viewport. It does not copy private message bodies into product analytics. You can choose Necessary only in the consent prompt. Server-side operational events such as signup, message delivery, moderation, and subscription state may still be recorded for security, billing, and reliable operation. We do not create demo or fabricated analytics.

Payments

Stripe processes checkout, payment methods, invoices, subscription changes, and the customer portal. TravelNeighbors stores Stripe customer/subscription identifiers, plan, billing interval, currency, amount, status, period end, cancellation state, and limited webhook records. We do not store full card numbers. Stripe may retain payment records under its own legal obligations.

Why we use data

• ✓Create and secure accounts
• ✓Show relevant members and overlapping trips
• ✓Deliver messages, photos, and permission controls
• ✓Apply Free, Premium, and VIP entitlements
• ✓Prevent fraud, harassment, spam, and unsafe behavior
• ✓Operate support, moderation, billing, analytics, and service reliability

Service providers

Current processors include Supabase for authentication, database, realtime, and storage; Cloudflare/OpenAI Sites infrastructure for application hosting and delivery; Stripe for billing; and Open-Meteo's geocoding service when you type a city during registration. These providers process data under their own terms and security practices.

Retention and deletion

You can schedule deletion from Account → Data & privacy. Your profile is hidden immediately and a 7-day grace period allows cancellation. Active paid access must first be cancelled and reach the end of its paid period. When cleanup completes, the authentication user, profile-linked database rows, public/private photos, and verification files are removed from the live service. Limited payment, security, audit, webhook, or backup records may be retained where necessary for legal obligations, dispute handling, fraud prevention, or processor backup cycles, then restricted and deleted or anonymized when no longer needed.

Your controls

• ✓Edit profile fields and photo visibility
• ✓Accept, decline, or revoke private-photo access
• ✓Block members and submit safety reports
• ✓Download a JSON account export from Account → Data & privacy
• ✓Schedule or cancel account deletion
• ✓Ask support@travelneighbors.com for access, correction, deletion, or an additional export