Privacy Notice

Last updated: August 6, 2026

BucketBuddy ("the app", "we", "us", "our") is operated by Talk Digital. This notice explains what personal data we collect when you use BucketBuddy, why we collect it, who we share it with, and the rights you have. Talk Digital is the data controller for personal data processed through BucketBuddy.

1. Data we collect

• Account data: name, email address, password hash, avatar, authentication provider identifiers (e.g. Google sign-in).
• Profile data: travel preferences, availability, travel documents you choose to upload.
• Trip content: trip crews (referred to in this notice as groups), trip ideas, itineraries, tasks, chat messages, booking documents, expenses, photos and any GPS/EXIF metadata contained in the files you upload.
• Support data: messages you send us, including any information you provide when requesting help or a refund.
• Usage & device data: IP address, device and browser identifiers, log data, feature usage and error reports, collected to keep the service secure and reliable.
• Cookies & local storage: essential cookies and browser storage used to keep you signed in and remember preferences. We do not currently use advertising cookies.

2. Why we use your data (purposes & legal basis)

• Provide the service — create your account, run trip planning features and store your content. Legal basis: performance of a contract.
• AI features (Pro) — send prompts and relevant trip content to our AI provider to generate itineraries, summaries and suggestions. Legal basis: performance of a contract.
• Security & fraud prevention — detect abuse, secure accounts and protect the platform. Legal basis: legitimate interests.
• Product improvement — diagnose errors and improve features. Legal basis: legitimate interests.
• Customer support & transactional email — respond to enquiries and send service-related notifications. Legal basis: performance of a contract / legitimate interests.
• Legal compliance — comply with laws applicable to us. Legal basis: legal obligation.

Payment-related personal data (card details, billing address, tax data) is collected and processed by our Merchant of Record, Paddle, when you buy a subscription. See section 4.

3. Who we share data with

• Infrastructure & hosting providers that run our backend, database, storage and email delivery on our behalf.
• AI providers used to power Pro AI features (itinerary generation, receipt OCR, booking parsing, summaries).
• Paddle.com Market Limited as our Merchant of Record for subscription sales, payments, tax compliance, invoicing and refund handling.
• Mapping providers (Google Maps) when you use map, geocoding or place-autocomplete features.
• Professional advisers (legal, accounting) where necessary.
• Authorities where we are legally required to disclose data.

Other participants in a trip crew (group) you join will see the content you share with that crew (trip ideas, chat, tasks, expenses, photos). You control what you post.

4. Payments and Merchant of Record

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service enquiries and handles returns. When you pay, Paddle collects payment, billing and tax information directly and is a separate data controller for that data. See Paddle's privacy policyand the Paddle Buyer Terms.

5. International transfers

Some of our providers process data outside your country of residence, including in the United States and the European Union. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and equivalent transfer mechanisms.

6. Data retention

We keep personal data only for as long as needed to provide the service and meet legal obligations. Trip content is kept while your account is active. If you delete your account (Profile → Danger zone → Delete my account), we delete or anonymise your personal data within a reasonable period, except where we must retain limited records for tax, accounting or legal reasons.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to our processing of your personal data, to portability, and to withdraw consent. EU/UK users additionally have the right to lodge a complaint with a supervisory authority. To exercise these rights, contact us using the details below. We will respond within the timeframes required by applicable law (typically one month).

8. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls and Row-Level Security on our database — to protect your data. No system is perfectly secure; you also play a role by keeping your credentials confidential.

9. Children

BucketBuddy is not directed to children under 16 and we do not knowingly collect their data.

10. Changes

We may update this notice. Material changes will be notified in-app or by email.

11. Contact

Talk Digital — the operator of BucketBuddy. For privacy questions or to exercise your rights, contact us via the Help centre.

See also our Terms & Conditions and Refund Policy.