Privacy policy

Who We Are

Saathi (“we”, “us”, “our”) is operated by Avighna Digital Private Limited. Saathi is a group trip coordination platform that helps friends plan trips, track shared expenses, and manage trip documents.

Data We Collect

Account data: When you create an account, we collect your name and email address. If you sign in with Google or Apple, we receive your name and email from those providers. Apple users who choose “Hide My Email” provide a private relay address, which we store but never display publicly.

Trip data: Trip names, destinations, dates, and member lists that you create or are invited to.

Expense data: Expense descriptions, amounts, currencies, split information, and settlement records within your trips.

Documents: Files you upload to trips (tickets, bookings, ID documents). These are stored encrypted at rest in our cloud storage (Supabase/AWS).

Usage data: We collect anonymous analytics about how you use the app (screen views, feature usage) to improve the product. We use PostHog for analytics.

Device data: Device type, operating system version, and app version for crash reporting and compatibility.

How We Use Your Data

• To provide the trip coordination service (dashboard, expenses, documents)
• To identify you to other trip members (your name and avatar)
• To send you notifications about trip activity (expense updates, nudges, settlements)
• To improve the app through anonymous analytics
• To provide customer support

We do NOT use your data for advertising. We do NOT sell your data to third parties. We do NOT share your data with AI services without your explicit consent.

Data Sharing

Your trip data (name, expenses, documents) is visible to other members of the same trip. This is the core functionality of the product.

We use the following third-party services to operate Saathi:

• Supabase (database, authentication, file storage) — your data is stored on their infrastructure
• Vercel (web hosting) — serves the web dashboard
• PostHog (analytics) — receives anonymous usage events
• Google/Apple (authentication) — if you use social sign-in

We do not share your personal data with any other third parties.

Data Retention

Your account data is retained as long as your account is active. Trip data is retained as long as any member of the trip has an active account.

When you delete your account, your personal data is removed within 30 days. Your expenses are kept for other trip members but your name is replaced with “Deleted member.”

When a trip is deleted by the organizer, all trip data (expenses, documents, photos) is permanently removed after a 30-day grace period.

Your Rights

You have the right to:

• Access your data (visible in the app)
• Delete your account (in-app: Profile > Delete My Account)
• Export your data (ask via the support page)
• Correct inaccurate data (edit your profile in the app)
• Object to processing (ask via the support page)

For EU residents: these rights are provided under GDPR. For California residents: under CCPA.

Security

All data is transmitted over HTTPS. Files are encrypted at rest. Database access is controlled by row-level security policies. We do not store passwords in plain text (handled by Supabase Auth with bcrypt hashing).

Children

Saathi is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, write to us via the support page.

Changes

We may update this policy from time to time. We will notify you of significant changes via the app or email.

Contact

For privacy questions or data requests: the support page

Avighna Digital Private Limited