OffBeatHoliday app and website · Last updated 28 October 2026
OffBeatHoliday (“we”, “us”) is a travel planner available on the web, iPhone and Android. This policy explains what we collect, why, who helps us run the service, and how you can delete your data. Contact: offfbeatholiday@gmail.com.
| Data | Why |
|---|---|
| Account: email address, name (if you give one), sign-in method (email, Google or Apple), and an account ID | To sign you in and keep your trips in your account |
| Trips you create: destinations, dates, itinerary stops, hotel or base location, budgets, expenses, packing lists, saved places | To provide the planner and sync it across your devices |
| Sharing: email addresses you invite and their access level | To let invited travelers view or edit a trip |
| Purchases (Android and web only): plan, amount, date and the payment provider’s order and payment IDs | To activate your plan and keep accounting records. We never see or store your card, UPI or bank details. |
| Usage and security: sign-in times, device sessions, counts of features used, and records of changes to accounts, trips and payments | To keep the service secure, prevent abuse and fix problems |
| Emails we send: the type of email, the recipient and whether it was delivered (not the message text) | To send welcome and receipt emails and check that they arrive |
We do not request your device location in the app. We do not sell your data, show ads, or track you across other companies’ apps and websites.
Offline trip drafts, saved places, your profile name and preferences are stored on your phone. They stay on the device until you erase them (Profile → More account actions → Erase data on this phone) or uninstall the app. Sign-in tokens are kept in the device’s secure storage (Keychain on iPhone, Keystore on Android).
We share only what each provider needs to do its job:
Account, trip and sharing data are kept until you delete your account. Database backups are kept for up to 14 days and then replaced. Payment records are kept as long as accounting law requires, with your email removed once your account is deleted. Security change records may be kept after deletion where needed to prevent fraud or meet legal obligations.
You can permanently delete your account at any time:
Deletion removes your profile, trips, sharing and every signed-in device, and deletes your sign-in record with our authentication provider. If you used Sign in with Apple, we also revoke the app’s access with Apple.
You can view and edit your trips and profile in the app, export a trip as a PDF, and ask us for a copy or correction of your data by email. Depending on where you live (for example under GDPR or India’s DPDP Act) you may have further rights, such as objecting to processing or complaining to a regulator.
All connections use HTTPS. Sign-in tokens are stored only as one-way hashes, access is limited by role, and changes to accounts, trips and payments are logged. No system is perfectly secure; tell us at the address above if you find a problem.
OffBeatHoliday is not directed at children under 13, and we do not knowingly collect their data.
We’ll update this page when our practices change and change the date at the top. Significant changes will also be announced in the app.
See also the Terms of Use.