Privacy Policy

Last updated: 1 May 2026

Linki ("we", "us", "our") is a mobile and web application that helps groups coordinate trips together. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the rights you have over it.

The Linki app and its backend are operated by the publisher of the linki.travel website. Contact: privacy@linki.travel.

1. What we collect

When you use Linki we process the following categories of data:

• Account data: name, email address, profile photo URL, and the unique account identifier provided by Google Sign-In or Sign in with Apple. We never see your password.
• Profile data: passport nationality (chosen by you in the app), language preference, optional emoji avatar.
• Trip content: trips you create or join, destinations, dates, expenses, polls, photos you upload, checklist tasks, itineraries generated by AI on your request.
• Device data: Firebase Cloud Messaging push token (so we can deliver notifications to your device), language, OS version, crash diagnostics.

We do not collect precise geolocation, contacts, microphone, camera recordings, calendars, financial account numbers, or any biometric data.

2. Why we use it

• To create your account and authenticate you on every login.
• To run the core features of the app: trip dashboard, expense splitting, polls, shared photo gallery, AI checklist and itineraries.
• To send push notifications about events that involve you (new expense, poll closing, trip update, etc.). You can disable them in your device settings.
• To debug crashes and improve reliability.

We do not use your data for advertising, profiling, or to train AI models outside of the prompts you actively submit (see section 4).

3. Where it is stored

Linki uses Google Firebase as its backend. Your data is stored in Google Cloud regions managed by Firebase (Firestore, Cloud Storage, Cloud Functions). Firebase complies with EU GDPR Standard Contractual Clauses for transfers outside the European Economic Area.

4. AI generation

Trip ideas, experience suggestions, daily itineraries, and pre-trip checklists are generated on demand by Google Gemini through Cloud Functions. The prompts we send include only the trip-related context strictly necessary for generation (destinations, dates, group size, passport nationalities, travel style). We do not send your name, email, or any other personal identifier to the AI provider.

5. Sharing

We share data only with:

• Other members of your trips: when you join a trip, members see your name, profile photo, contributions and the content you upload to that trip.
• Google Firebase (database, storage, push, AI), bound by their Data Processing Addendum.
• Authorities when required by law.

We do not sell or rent your data.

6. Retention

• Trips you have closed are permanently deleted 20 days after closing.
• Account data is retained as long as your account exists.
• You can delete your account at any time from Settings → Account → Delete account in the app, or by following the instructions at linki.travel/delete-account. Deletion removes your profile, profile picture, and your membership from every active trip. Expenses you paid remain visible to other members so the group balance stays correct, but your name is shown as "Deleted user".
• If you are the only organizer of a trip, the trip is deleted with your account. If there are other members, organizer rights are transferred to the member who joined first.

7. Your rights (GDPR / CCPA)

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account (see section 6).
• Export your data in a portable format — write to privacy@linki.travel.
• Object to or restrict processing.
• Lodge a complaint with your data protection authority.

8. Children

Linki is not intended for users under 13 (or under the minimum digital consent age in your jurisdiction). We do not knowingly collect data from children. If you believe a child has used the app, contact us and we will delete the account.

9. Security

All traffic is encrypted in transit with TLS. Firestore and Cloud Storage data are encrypted at rest by Google. Push notification tokens and account identifiers are scoped to your account and never exposed to other users.

10. Changes

We will update this Privacy Policy as the app evolves. Material changes are announced in-app at least 14 days before they take effect.

11. Contact

Questions or requests: privacy@linki.travel.