Privacy Policy

Effective September 25, 2026

This Privacy Policy explains how Arrivo (“Arrivo”, “we”, “us”) collects, uses and shares information about you when you use arrivoya.com and the services offered on it (the “Service”). By using the Service you agree to the practices described here. If you do not agree, please do not use the Service.

1. Information we collect

Information you give us

Account information: your name, email address, username, mobile phone number and password. We store passwords only in hashed form.
Optional profile information: profile photo, gender, date of birth, address, home city, country and airport, preferred currency, favorite countries, WhatsApp number and time zone.
Travel information: trips, destinations and wishlists, plus the details you add to them: flights, lodging, car rentals, other transport, events, itinerary items, places, photos, cover images, links (for example to a shared photo album or group chat) and comments.
Expense information: shared expenses, how they are split, and settlements between trip members.
Social information: friends, friend groups, invitations you send (including the email addresses you invite) and people you block.
Communications: messages you send us, for example support requests.

Information other users give us about you

Other users can invite you by email, add you to a trip, or record an expense that you shared. That information becomes part of the trip it was added to.

Information collected automatically

Log data: when you use the Service, our servers record technical information such as your IP address, browser type, the pages you request and when you request them. We use it to run, secure and fix the Service.
Cookies: see Cookies below.

2. How we use information

To provide the Service: create and manage your account, and let you plan trips, share them and split expenses with the people you travel with.
To show you relevant matches, such as friends who plan to be where you are at the same time.
To send you service emails, such as address verification, password resets, invitations and notifications about your trips. You can turn most notifications off.
To keep the Service and its users safe: prevent abuse, fraud and unauthorized access, and enforce our Terms of Service.
To give support, answer your requests, and diagnose and improve the Service.
To comply with the law and respond to lawful requests.

We do not use your information for advertising, and we do not build advertising profiles about you.

3. How information is shared

With other Arrivo users

Arrivo is built for sharing travel plans, so some of your information is visible to other users:

Trips are always visible to their members. You choose whether a trip is also visible to your friends, to selected friend groups, or to every signed-in user.
Your name, username and profile photo are shown next to what you post and to the people you travel with. Unless you turn off “Let people find me by name”, other users can find you by name.
Expenses you record, or that include you, are visible to the members of that trip.

Please think about this before you add information that you do not want others to see.

With service providers

We use companies that host the Service, store its data and deliver its email. They process information only for us and only as needed to provide their services.

Third-party content and links

Some destination photographs are loaded directly from Unsplash, so your browser contacts Unsplash’s servers when it shows them. Links to services such as Google Maps, Google Photos and WhatsApp open those services, and their own privacy policies apply once you follow the link. We do not control these third parties.

For legal reasons and business transfers

We may disclose information if we believe in good faith that the law requires it, or to protect the rights, property or safety of Arrivo, our users or the public. If Arrivo is involved in a merger, acquisition or sale of assets, your information may be transferred as part of that deal. Any successor will remain bound by this policy.

No sale of personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act.

4. Cookies

We use only the cookies the Service needs to work: one keeps you signed in during a visit, one protects forms against cross-site request forgery, and, if you choose “remember me” when you sign in, one keeps you signed in for up to 30 days. We do not use analytics or advertising cookies, and we do not track you across other websites. Because we do not track you, there is nothing for “Do Not Track” or Global Privacy Control signals to turn off, but we treat them as opt-out requests all the same.

5. How long we keep information

We keep your information while your account is open. When you delete your account, we remove your personal details, profile photo, friendships, friend groups, blocks and wishlists, and your name is replaced with “Deleted user”. Trips you shared with others, and the expenses and settlements recorded in them, stay available to the other members, because their records and balances depend on them. Those items are no longer linked to your identity. Server logs and backups are overwritten within 30 days. We may keep information longer when the law requires it or to resolve disputes.

6. Your choices and rights

Access and correct: you can see and edit your profile and content at any time from your account.
Control visibility: choose who can see each trip, and whether people can find you by name.
Notifications: turn most notifications off in your settings. We will still send essential account emails.
Block: block other users to stop them from contacting you or finding you.
Delete: delete your account from your account settings, or ask us to delete it.

California and other U.S. state privacy rights

Depending on where you live, including California, Colorado, Connecticut, Virginia and other states with consumer privacy laws, you may have the right to:

know what personal information we have collected about you, where it came from, why we use it and whom we disclose it to, and get a copy of it;
correct inaccurate personal information;
delete your personal information;
opt out of the sale or sharing of personal information, or its use for targeted advertising or profiling (we do none of these);
limit the use of sensitive personal information (we use account credentials only to provide the Service); and
not be discriminated against for exercising these rights.

To make a request, email us at the address below. We will confirm your identity, usually through the email address on your account, and respond within 45 days. You may use an authorized agent, who must show us that you gave them permission. If we deny your request, you may appeal by replying to our decision, and we will respond within the time the law requires.

In the past 12 months we collected the categories of personal information described in section 1: identifiers, customer records, characteristics you choose to provide such as gender and date of birth, internet activity, approximate location from IP address, and the travel and expense content you add. We collected them for the purposes described in section 2 and disclosed them only as described in section 3.

7. Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections and hashed passwords. Access to user data is limited to what is needed to operate and support the Service. For example, an administrator may view an account while investigating a problem or abuse report. No system is perfectly secure, so please use a unique password and tell us about any suspected unauthorized access.

8. Children

The Service is not intended for anyone under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.

9. Where information is processed

Arrivo is operated from the United States, and your information is stored and processed there. If you use the Service from outside the United States, your information will be transferred to the United States, where data protection laws may differ from those in your country.

10. Changes to this policy

We may update this policy from time to time. When we do, we will change the effective date at the top. If a change is material, we will also notify you by email or through the Service before it takes effect.

11. Contact us

For questions about this policy or to exercise your privacy rights, email support@arrivoya.com.