Privacy policy
Last updated : 1 October 2026
tabi is published by Clément Dacquay. This policy describes what the app collects, why, and what you can do about it. Contact: clement.dacquay1@gmail.com.
What tabi collects
- Your email address and the identifier of the service you sign in with (Apple or Google), your first name if you provide it or if that service passes it on, and your profile photo if you add one. Only you can see that photo.
- The content you create: trips (with their optional cover image), stops, spots, expenses.
- The TikTok or Instagram links you share to the app.
- Your answers to the trip-style questions, when you ask tabi to compose an itinerary, along with the resulting proposal.
- Your location, only if you turn sharing on yourself for your friends, and only for the duration you choose (1, 4 or 8 hours; 12 hours maximum). It is read only while the app is open on screen: as soon as you close it or switch away, tabi stops reading it. No history is kept - a single position, overwritten on each update, then deleted when it expires.
- Your bookings, only if you connect your inbox or forward an email to your tabi address (a tabi+ feature): the type of booking, its name, dates, places, reference and price. See “Your inbox” below.
- The state of your tabi+ subscription, if you have one: whether it is active and when it ends. tabi never sees your payment method, your card number or your billing address - the purchase is handled end to end by the App Store.
Until you turn that sharing on, no location data from your phone is collected. There is no advertising, no tracker, and no audience measurement.
Alerts near your spots, if you turn them on, ask iOS for the “Always” location permission. They still collect nothing: during a trip’s dates, your phone itself watches an area a few dozen metres wide around that trip’s spots, and it is your phone that shows the notification when you walk in. Neither your location nor the fact that you entered an area is sent to tabi or to anyone. You can turn these alerts off at any time in the app’s settings, or withdraw the permission in iOS Settings.
tabi does receive a report when the app crashes or stalls: the stack trace, the device model, the system version, and a technical account identifier, so it can tell whether the same bug hits the same person twice. That is repair, not measurement - nothing in it describes what you do with the app.
What we do with it
Only run the app:
| Service | Role | What it receives |
|---|---|---|
| Supabase | Data hosting and authentication | Account and content |
| Apple, Google | Signing in to your account (Sign in with Apple, Sign in with Google), whichever you choose | Nothing from tabi: they confirm your identity to tabi |
| OpenAI | Extracting places mentioned in a shared video’s caption | The public text of the video, never your identity |
| OpenAI | Composing an itinerary when you ask for one | The destination, the dates and your answers to the trip-style questions, never your identity |
| Google (Gmail API) | Reading booking emails, if you connect Gmail | Your consent, which you can withdraw; tabi reads, Google learns nothing more |
| Postmark | Receiving the emails you forward to your tabi address | The emails you choose to forward |
| OpenAI | Reading a booking email tabi could not read on its own | The text of that email, which may contain your name; nothing is kept |
| Apify | Reading the caption when it is not otherwise reachable | The public URL of the video |
| Google Places | Address, opening hours and photo of places, including those of a proposed itinerary | The name and approximate position of the place |
| Mapbox / OpenStreetMap | Maps and geocoding | The positions of the places displayed |
| Frankfurter (ECB) | Exchange rates | Currency codes |
| Apple (App Store) | Collecting payment for the tabi+ subscription | The payment - tabi never sees it |
| RevenueCat | Managing the state of the tabi+ subscription | A technical account identifier and the subscription state, never your email |
| Sentry (European Union) | Crash and performance reports for the app and the server functions, so what breaks gets fixed | A technical account identifier, the nature of the error and the device model, never your email or your content |
These services receive strictly what they need - never your email, unless it appears in a booking email you chose to hand to tabi.
Your inbox
This is a tabi+ feature, and it only turns on if you decide so.
- Gmail connected: tabi asks Google for read-only access. It only looks for emails that look like a booking (known travel senders, subjects such as “confirmation” or “ticket”), over the last twelve months and then as they arrive. Email content is never kept: tabi only keeps the booking it draws from it. The access token is encrypted, and “Disconnect Gmail” revokes it at Google.
- Forwarding address: emails you forward to your tabi address are read the same way, then forgotten. You can change the address at any time; the old one stops working immediately.
- Your bookings are visible to you alone. When only one of your trips covers its dates and you are its only traveler, tabi files it on its own; you can remove it at any time. In a shared trip, nothing is filed without your action: once filed, the booking adds a place and an expense to it, which your companions see like any other.
tabi’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. This information is only used to show your bookings in tabi: it is not sold, not used for advertising, not read by a human, and not used to train an artificial intelligence model.
What your friends can see
If you add friends (through an invitation link), they see your name and your spots - never your trips, your dates or your budget. The "Share my spots" switch in settings cuts off that sharing at any time, and removing a friend cuts access in both directions.
They also see your location, and only if you turned it on. That sharing is off by default, stops on its own at the deadline you chose, and can be cut in one tap from the Friends screen or from the indicator shown at the bottom of the screen while it is active. An expired position is no longer readable by anyone.
What your travel companions can see
You can open one specific trip to someone, through a separate invitation link. That person then sees that trip: its name, its dates, its itinerary, the spots placed on it, and its expenses - to which they can add their own. They see nothing else: not your other trips, not your spots outside a trip, not your passport. Accepting a trip invitation creates no friendship. Either side can end it at any time ("Compagnons" → trash icon), and access closes immediately.
What we do not do
No selling of data, no sharing for advertising purposes, no profiling. Your trips are visible to you alone and to the people you explicitly invited to them.
Retention
Your data stays for as long as your account exists. Deleting the account (Settings → Delete my account) immediately and permanently erases the account and everything attached to it. A connected Gmail inbox is revoked at Google at the same time.
Your rights
Access, rectification, erasure, portability: write to clement.dacquay1@gmail.com, or simply delete your account in the app.