Musafir Junction

Privacy Policy

Last updated: July 2026

This Privacy Policy explains what data Musafir Junction ("the Service") collects and how it's used. This is a draft template — have a lawyer review and adapt it (entity name, jurisdiction, applicable data protection law such as India's DPDP Act or GDPR) before treating it as legally binding.

1. What we collect

  • Account info: name, email, password (hashed), travel preferences
  • Profile content: bio, photos, places visited, bucket list, verification status
  • Trip & social content: trips, budgets/expenses, stories, group memberships, matches
  • Location data: only when you use location-dependent features (SOS, Community Help, nearby places) — captured at the moment you trigger the feature, not tracked continuously in the background
  • Emergency contact info you choose to add: name, phone, and optionally email, so we can notify them if you trigger an SOS
  • Device push token, if you enable notifications

2. How we use it

To operate core features (matching, trip planning, community feed), to deliver SOS/ safety alerts to the contacts and channels you configure, to personalize AI-generated suggestions, and to keep the Service secure.

3. Third parties we share data with

We use the following processors to deliver specific features — data is shared with them only as needed for that feature:

  • Supabase — database, authentication, file storage
  • Google Gemini — AI-generated trip suggestions and match scoring
  • Firebase Cloud Messaging — push notifications
  • Twilio — SMS delivery for SOS alerts
  • Resend — email delivery for SOS alerts
  • Meta (WhatsApp Cloud API) — WhatsApp delivery for SOS alerts
  • Vercel — application hosting

We do not sell your personal data.

4. Your emergency contacts' data

When you add an emergency contact, you're providing us their name and phone/email so we can alert them on your behalf during an SOS. Please only add contacts who've agreed to be listed.

5. Data retention & deletion

We retain your data while your account is active. You can request account and data deletion at any time by contacting us — this removes your profile, trips, stories, and emergency contacts from our systems, except where we're legally required to retain records.

6. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. Contact us to exercise these rights.

7. Contact

Questions about this policy? Contact us at privacy@musafirjunction.example.