Privacy policy
Last updated: October 4, 2026
In short: we only use your data to make Youtopia work (your trips, your group and Yupi). We don't sell your data or show ads based on it. You can ask for a copy or for your account to be deleted at any time by emailing privacidad@getyoutopia.app.
1. Who is responsible
The data controller is the owner of Youtopia (getyoutopia.app), based in Spain. For any privacy question, email privacidad@getyoutopia.app.
2. What data we process
- Account data: name, email, profile photo (if you upload one or sign in with Google) and language.
- Your trips: destinations, dates, itinerary, expenses and how they're split, payments between members, lists, proposals and votes, and any documents you upload (for example tickets or bookings).
- Your group: the people you share a trip with, their invitations and roles.
- Chats with Yupi: the messages you send and the trip information needed to answer.
- Location: only with your permission, to show you on the map and guide you along the day's route. It's used on your device and not stored on our servers.
- Notifications: a device identifier to send you alerts, if you turn them on.
- Technical data: app version, device type and, if something crashes, error details so we can fix it.
We don't ask for special categories of data. Please don't upload documents with more information than needed.
3. Why we use it and on what legal basis
- Providing the service (creating trips, sharing them with your group, splitting expenses, Yupi): performance of the contract you accept when signing up.
- Sending notifications: your consent, which you can withdraw in Profile or in your phone settings.
- Security, abuse prevention and bug fixing: our legitimate interest in keeping the app working and safe.
- Replying to you when you contact us: your request.
4. Who we share it with
With the people in your trip, who see that trip's content. And with providers that help us run the service, only as far as needed:
| Provider | Purpose |
|---|---|
| Supabase | Database, sign-in and storage of documents and photos. |
| Sign in with Google and push notifications (Firebase Cloud Messaging). | |
| Expo | Push notifications and app updates. |
| Groq (or an equivalent AI provider) | Generating Yupi's answers and itineraries from your messages and trip. |
| Mapbox | Maps, routes and offline maps. |
| OpenStreetMap (Nominatim, Overpass) | Searching places and nearby spots. |
| Open-Meteo | Weather forecast for the destination. |
| ExchangeRate-API | Currency exchange rates. |
| Wikipedia / Wikimedia | Photos of destinations and places. |
| Vercel and Cloudflare | Website hosting, intermediate server, domain and email. |
To look up places, weather or photos we only send the place name or coordinates, not your personal data. Some providers are outside the European Economic Area (mainly in the US); those transfers rely on GDPR safeguards such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
We don't sell your data or share it with third parties for advertising. If the app later includes links to third-party bookings (hotels, flights, activities), using them takes you to that third party's site, which has its own privacy policy.
5. How long we keep it
For as long as you have an account. Deleting a trip deletes its content. If you delete your account, we erase your data within 30 days, except what we must keep by law. Backups are rotated regularly and deleted data disappears from them over time. Expenses or plans you added to other people's trips may stay in those trips without your name so their balances don't break.
6. Your rights
You can request access, rectification, erasure, restriction, objection and portability by emailing privacidad@getyoutopia.app from your account's email. We'll reply within one month. If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or your local authority.
To delete your account, see how to delete your account.
7. Children
Youtopia is not meant for children under 14. If you are under that age, don't sign up without your parents' or guardians' consent.
8. Security
We use encrypted connections, access control so only the people in each trip can see it, and private storage for documents. No system is 100% secure, but we work to protect your data and will let you know if anything affects you.
9. Changes
If we change this policy in an important way, we'll tell you in the app or by email before it applies.