Traveller Privacy Policy
Last updated: September 13, 2026
This Policy explains how we collect, use, disclose, and protect personal data. By using the Service you acknowledge this Policy; if you disagree, please do not use the Service.
1. Scope
1.1 This Policy applies to the Traveller apps (Android package: com.marshalltseng.traveller), website (https://www.a-traveller.com), and related services.
1.2 Data controller / operator: Traveller team. Privacy contact: dai19890703@gmail.com.
1.3 Third-party login, payments, maps, ads, push, or AI features are also governed by those providers’ policies.
2. Categories of data
2.1 Account and identity: email, display name, username, avatar, login method (Email / Google / Facebook, etc.), device identifiers, internal user IDs, and optional profile fields such as gender, birthday, or bio.
2.2 Security: email verification, password reset tokens, login history, fraud signals.
2.3 Content and activity: posts, comments, likes, shares, views/clicks, photos and albums, short videos, trip data, UGC place edits, reports, and support conversations.
2.4 Communications and matching: messages, stranger-match lobby presence/preferences, match session records, block lists, notification settings, and push tokens (e.g., Expo Push Token).
2.5 Location: if you enable location for posts, maps, stranger-match area preference, or member/trip location sharing, we may collect precise or coarse location; with background permission, location may upload while the app is closed or locked (you can turn this off in-app).
2.6 Technical data and cookies: IP address, browser, OS, timestamps, error logs, cookies/local storage (for session, security, preferences, analytics; on web, also ad delivery and measurement).
2.7 Payments and creators: wallet balance, orders/subscriptions, gifts; if you receive payouts, we may process identity data, bank/payment account fragments, tax or Stripe Connect fields.
2.8 AI features: prompts you send to features like the trip assistant and related logs may be transmitted to our AI vendors to generate responses.
2.9 Hotel privacy scan: when you use this feature, camera, sensor, and Wi‑Fi/nearby-device scan results may be processed for that session only—not for ads.
2.10 Live streaming: titles, stream metadata, and chat interactions if you use live features.
3. Sources
Directly from you; automatically from logs and analytics; and from third parties (OAuth profiles, payment status, public business listings from map/place APIs).
4. Purposes and legal bases
Providing and personalizing the Service; consent where required (e.g., marketing, non-essential cookies); legitimate interests (security, fraud prevention, analytics, dispute handling); and legal compliance.
4.1 Personalized feeds: to show more relevant content, we may combine follow relationships, like history, content categories, browsing and interaction behavior, device location or regional preferences, and popularity or recency to personalize ranking in home feeds, following recommendations, Plaza, and video feeds. This is mainly based on contract performance and legitimate interests. We do not currently offer an in-app setting to turn off personalized feed ranking.
5. Sharing
5.1 Processors and partners: cloud hosting, database, email, analytics, support, payments, maps/places, AI, ad networks, and travel affiliates—under confidentiality and security obligations. Examples include Supabase, Google (login, Maps, Places, translation, ads), Meta (Facebook login), Stripe, OpenAI or other AI providers, Resend or other email providers.
5.2 Legal and enforcement: disclosures required by law or to protect rights and safety.
5.3 Business transfers: your data may transfer as part of a merger or asset sale; we will require successors to honor this Policy or notify you.
5.4 We do not sell personal data as a commodity; where "sale" under law relates to personalized ads, we will honor opt-out mechanisms we provide where applicable.
6. Cross-border processing
Data may be processed or backed up outside Taiwan (e.g., cloud regions). We apply appropriate safeguards as required by applicable law.
7. Retention
We retain data as long as needed for the purposes above or as required for legal, tax, or dispute retention. After account deletion we delete or anonymize within a reasonable time, except where retention is required.
8. Security
We use reasonable technical and organizational measures; no online service is perfectly secure—please protect your password and devices.
9. Your rights
Depending on applicable law (e.g., Taiwan Personal Data Protection Act), you may request access, copies, correction, restriction, deletion, objection to marketing, and portability where feasible. Contact us via Settings; we may verify identity.
10. Cookies and ads (web)
We use cookies for login, preferences, analytics, and fraud prevention. Third-party ad partners (e.g., Google AdSense) may set their own cookies or read ad identifiers; you can adjust browsers or Google’s ad settings.
11. Children
The Service is not directed at children. If you are a parent and believe a child provided data without consent, contact us.
12. Changes
We may update this Policy and will post changes in the app or on the website; material changes will be highlighted.
13. Contact
Privacy questions or requests: email dai19890703@gmail.com or use in-app Settings → Contact admin.
14. App permissions (Android / iOS)
Camera/media (posts, messages, hotel privacy scan); location including background if you enable member location sharing; notifications; Wi‑Fi/nearby devices on Android for privacy scan; network access for servers, maps, payments, AI, and push.
15. Stranger matching and guests
Guests may receive anonymous accounts for limited matching. Do not share passwords or financial data in chats; use block/report for abuse.
16. Account and data deletion
Delete your account in Settings by typing the confirmation phrase, or email dai19890703@gmail.com. We may verify identity. Backups may persist for a reasonable technical period.
17. Google Play Data safety
Our Google Play Data safety form should match this Policy. We do not sell your personal data.