Who we are
TripMate is a group trip planner made by CodexJar Technologies Pvt Ltd. Contact: support@codexjar.com.
What the app does
People sign in with a mobile number, create trips, invite members, keep an itinerary, split expenses, record settle-ups, share photos and booking documents, and optionally use Mate AI for trip suggestions.
Information we process
- Mobile number used to request an OTP and create an account.
- Profile details you add (name, optional photo, bio, city, date of birth, gender, UPI ID).
- Trip data: members, itinerary, expenses, settlement records, checklists, notes.
- Photos, receipts, and documents you upload. These are stored in S3-compatible object storage.
- Session tokens (short-lived JWT access tokens and rotating refresh tokens) and device records used for sign-in and push notifications.
- Optional Google Drive connection, if you enable it, so trip files can be stored in Drive you connect. TripMate does not ask for or store your Google password. Drive refresh tokens are stored encrypted on the API. The Google permission requested is limited to files the app creates (
drive.file). - Mate AI prompts and generated plans when you use that feature. Those requests are sent to the configured AI provider. We do not promise that AI content stays only on our servers.
Authentication
Login uses a one-time password sent by SMS (or printed to development logs in local console mode). We store a peppered hash of the OTP, not the code itself, and we do not put OTP codes in production API responses.
Payments
TripMate records who paid and who is owed. Settle-up opens the member’s own UPI app through a deep link. TripMate does not hold user funds and is not a wallet, bank, or payment institution. We receive no payment callback and only record that a user said they paid.
Notifications
If you allow push notifications, a device push token may be stored so we can deliver invites and trip updates.
How long we keep data
Account data stays until you delete the account or ask us to help. Shared trip and ledger rows that other people still need may be retained in anonymized form so group balances stay correct. See the account deletion page.
Sharing
Trip members can see the trip content you share with that group. Service providers we use (SMS, object storage, optional Google Drive, optional AI) receive only what that feature needs. We do not sell personal information.
Contact
Privacy and support requests: support@codexjar.com.