Privacy Policy

Last updated: 22 September 2026

Taabik is a travel journal. This policy covers the Taabik website at taabik.com and the Taabik mobile app for Android and iOS, both operated by the Taabik team.

What we collect

• Account: your email address, and — if you sign in with Google — the name and profile picture on that Google account.
• Profile: username, display name, avatar, bio, passport country, home city and Instagram handle, all of which you choose to enter.
• Trips: the places you log, their coordinates, your titles, notes, dates, and the photos and captions you attach.
• Social: who you follow, the trips you cheer, comments, and tags.
• Technical: server logs containing IP address, device or browser type and timestamps, kept to run and secure the service.

We do not collect your device's background or precise location. A trip's coordinates come from the place you name, not from your phone's GPS. The app reads only the photos you pick, and nothing else in your library.

How we use it

To run the service: keep you signed in, show your journey, calculate XP and badges, show your profile to people you share it with, and send the notifications you ask for. We do not sell personal data, and we do not share it with advertisers or data brokers.

Who processes it

• Supabase — authentication, database and photo storage, hosted on AWS in Mumbai (ap-south-1).
• Amazon Web Services — the API server, also in Mumbai.
• Vercel — hosting for the website.
• Google — Sign in with Google, if you use it, and Google Fonts.

Each is a processor acting on our instructions. Wikipedia is called for place descriptions; those requests carry no information about you.

Security

Everything travels over HTTPS. Photos and records are held in a database with row-level security, so one account cannot read another's private data. We never see or store your password — sign-in is handled by Supabase with a one-time email code or by Google.

How long we keep it

Your account and its trips are kept until you delete them. Deleting your account removes your profile, trips, photos and social activity immediately and permanently. Server logs are kept for up to 30 days. We may retain the minimum needed to meet a legal obligation or to prevent fraud or abuse, and nothing more.

Deleting your account

In the app: Settings → Delete account. On the web: taabik.com/delete-account. Either one removes everything listed above. Your account is deleted, not frozen or hidden.

Your rights

You can access, correct, export or delete your data. Most of it you can change yourself in Settings; for anything else, write to us from the address on your account and we will answer within 30 days. If you are in the EU, UK or Switzerland you have these rights under the GDPR, and you may complain to your local supervisory authority.

Children

Taabik is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will remove it.

Contact

Taabik — founders@taabik.com. We answer privacy requests within 30 days, and support questions within 3 business days.

We will update this page as Taabik changes, and the date above with it. Material changes will be announced in the product or by email.