Privacy Policy

Last updated:

This Privacy Policy explains how Taste My Trip (TMT) ("we") collects, uses and protects personal information when you use Taste My Trip (TMT) (the "Service"). We aim to follow internationally recognised privacy principles, including those of the EU/UK GDPR where they apply.

1. Information we collect

Account data: name, username, email address, password (stored only as an encrypted hash), and Google account identifier if you sign in with Google.
Profile data you choose to add: photo, bio, images, social links, phone number, contact email and address. Contact details are public only if you switch them to "Visible".
User Content: posts, photos, video links, locations, ratings and comments.
Location: with your permission, your device's approximate location to show posts near you. It is used in your browser and is not stored on your profile.
Payment data: plan, amount, transaction references and status. Card and wallet details are handled by the payment provider, not by us.
Technical data: IP address, browser type, device, pages viewed and cookies needed to keep you signed in and secure.

2. How we use information

To provide and secure the Service; create and manage accounts; verify email addresses; show, moderate and rank content; process subscriptions; send service messages (codes, approvals, notices); prevent fraud, spam and abuse; comply with law; and improve the Service. Our legal bases are your consent, the performance of our agreement with you, our legitimate interests in running a safe service, and legal obligations.

3. What is public

Your name, username, profile photo, bio, links, posts, ratings and comments are public, and anything you mark "Visible" on your profile. Do not post information you want to keep private.

4. Sharing

We do not sell your personal information. We share it only with service providers who help us run the Service (hosting, email, maps, translation, payment processing), under confidentiality obligations; when required by law or to protect rights, safety and property; or in a business transfer such as a merger or sale.

5. Third-party services

The Service uses Google Maps, Google Sign-In, Google Translate, YouTube embeds and payment gateways, which have their own privacy policies and may set their own cookies.

Advertising (Google AdSense)

We may show advertisements served by Google and its partners. Third-party vendors, including Google, use cookies to serve ads based on your earlier visits to this website and to other websites. Google's advertising cookies let Google and its partners show you ads based on your visits to this and other sites on the Internet.

You can turn off personalised advertising in Google Ads Settings, or opt out of some third-party vendors' cookies at aboutads.info. Learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites. Visitors in the European Economic Area, the United Kingdom and Switzerland are asked for consent through a Google-certified consent message before personalised ads are shown.

Creator Rewards: verification and payment data

If you apply to the Creator Rewards Program, we collect your legal name, date of birth, country, government ID (for example a national ID card or passport), a passport-size photo, your address with proof of address, and your payout details (bank account, routing and SWIFT/BIC codes, PayPal or similar). We use this only to verify your identity, prevent fraud, pay you and meet legal, tax and anti-money-laundering obligations. ID numbers and payout details are stored encrypted, documents are kept in a private area that only authorised TMT administrators can open, and they are never shown on your profile. We keep them while you take part in the program and for as long as the law requires afterwards (usually for tax and accounting records), then delete them. You can ask us for a copy or for deletion at any time, subject to those legal duties.

Personal details, live location, chat and security data

Personal details (gender, date of birth, country, city, optional address) confirm you are an adult and help show you relevant places. They are private unless you choose to show them on your profile; administrators can see them.
Live location is collected only while you have switched sharing on, only the latest position is kept, and it is deleted when sharing ends. Only the people you chose can see it.
Chat messages are encrypted in your browser before they are sent; we store only encrypted text we cannot read, and delete it 12 hours after it is read. We keep who talks to whom and when, to protect members and handle reports.
Security logs: to protect the Service we record IP addresses and details of suspicious requests (for example hacking attempts) for up to 90 days and may block abusive addresses.
Advertising reports: we share only totals (visits, views, clicks) with advertisers, never personal information.

6. Retention and security

We keep data for as long as your account is active or as needed for the purposes above and for legal, accounting and security reasons. We use reasonable technical and organisational safeguards, but no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to withdraw consent, and to data portability. You can edit most information in your profile. For other requests contact mail@tastemytrip.com. You may also complain to your local data-protection authority.

Taste My Trip (TMT) is the data controller for personal data processed through Taste My Trip (TMT). Wherever you live, we give every member the rights of the EU and UK General Data Protection Regulation (GDPR):

Access and portability: download a copy of your data at any time — Profile → Privacy & data → Download my data.
Rectification: correct your details yourself in your profile.
Erasure: delete your account and posts yourself — Profile → Delete my account (confirmed by an email code). Some records (for example payments and creator rewards) are kept as long as tax or accounting law requires.
Restriction and objection: hide your profile and personal details, turn off non-essential emails, and refuse optional cookies in Cookie settings.
Withdraw consent at any time without affecting earlier processing, and complain to your data-protection authority (in the EU, the authority of your country).

Lawful bases: performing our agreement with you (account, posts, chat), your consent (optional cookies, live location, personalised ads), our legitimate interests (security, fraud prevention, improving the Service) and legal obligations (tax, law enforcement requests).

How long we keep data: account data while your account exists; security logs up to 90 days; live location only while sharing; read chat messages 12 hours; verification documents for creator rewards as long as the law requires after you leave the program; backups up to 10 weeks.

Transfers: our hosting and service providers (for example Google) may process data outside your country. Where the GDPR applies, transfers rely on adequacy decisions or the European Commission's Standard Contractual Clauses.

Automated decisions: we do not make decisions with legal or similarly significant effects based solely on automated processing. Automatic filters (for example bad-word filters) are always reviewable by a person.

Questions or requests: mail@tastemytrip.com. We reply within one month.

The Taste My Trip Android app

The Taste My Trip app for Android shows this same website, so everything in this policy applies to the app too. The app itself adds only the following:

Location: only while the app is open and only when you tap “Nearby”, use the map, or start Live Location Share. Android asks your permission first; you can turn it off any time in your phone's settings. We never collect location in the background.
Photos: only the photos you choose yourself when you add a post or a profile picture.
No extra tracking: the app has no advertising ID, no third-party analytics or advertising SDKs, and Google AdSense ads are not shown in the app. Screenshots are blocked to protect members' content and chats.
Sign-in: your sign-in cookie stays on your phone and is not included in phone backups.
All data is sent encrypted (HTTPS).
Deleting your account: in the app or website go to Account → Delete my account, or follow the steps at tastemytrip.com/delete-account. Uninstalling the app does not delete your account.

Friends, availability, notifications and mobile verification

Friends & availability: when the admin switches Friends on, your friends can see whether you are Available, Busy, Away or offline in Chat. We store only the time you were last active. Choose Appear offline in Chat to hide it.
Notifications: if you turn notifications on for a device, we store that device's push address (from your browser's push service, or from Google Firebase in the Android app). Push messages only say that something new is waiting — chat messages stay end-to-end encrypted. Turn notifications or sounds off any time in Profile → Notifications & sound.
Switch account: to let you switch between accounts on the same device, we remember which accounts signed in on that device (for up to 90 days). Logging out removes the account from that list.
Verified mobile number: Creator Rewards requires a verified mobile number. We send a one-time code by SMS through our SMS provider; we keep only the verified number. It is never shown publicly.

8. International transfers

We operate from Bangladesh and our providers may process data in other countries. By using the Service you understand that your information may be transferred to and processed in countries with different data-protection laws.

9. Children

The Service is for adults only (18+) and is not directed at children, and we do not knowingly collect personal data from anyone under 18.

10. Changes and contact

We may update this policy and will post the new version here. Questions: Taste My Trip (TMT), Taste My Trip, mail@tastemytrip.com.