Privacy Policy Sabai Squad
Last updated: 16.10.2026 · Version 1.1.0
This is a translation for information purposes only. The German version is authoritative.
This policy describes how the app "Sabai Squad" (JourneyHub engine) actually operates. New compared with version 1.0.0: deleting your account in the app, push notifications, photos, videos, voice messages and files in the chat (also private), sharing your location in the chat, profile photo, translator with language packs from Google, map with street route, weather, entry information and a weekly backup of the database.
1. Data Controller
The party responsible for data processing under the Swiss Federal Act on Data Protection (FADP) and, where applicable, the General Data Protection Regulation (GDPR), is:
Sulser Digital Owner Sandro Manuel Sulser Industriestrasse 40, 8112 Otelfingen, Schweiz UID CHE-444.143.836
Contact for privacy inquiries (access, correction, deletion, withdrawal): privacy@sabaisquad.com
2. What is Sabai Squad?
Sabai Squad is an app for coordinating group trips (focused on Thailand and Vietnam). It includes trip planning and itinerary, expense splitting, group and private chat, an encrypted document storage (the "Vault"), a map with street route, weather and country information, a dictionary with translator and further travel tools (packing list, contacts, shopping list, shopping rounds). Domain: sabaisquad.com.
Sabai Squad is in test operation with a closed group of users. Use is restricted to persons aged 18 and over.
3. What data is processed?
| Data category | Examples | Purpose | Who sees it | Storage |
|---|---|---|---|---|
| Account and login | Email address, password (only as a hash), login times | Registration, login, confirmation by email | only you | Supabase, Zurich |
| Profile | Name, profile picture (icon, colour or your own photo), home currency | Display within the group | you and the active members of your trips | Supabase, Zurich. Your own photo is kept in non-public storage and can only be retrieved via time-limited links. |
| Consent | Version and time of the accepted privacy policy | Proof of consent | only you | Supabase, Zurich |
| Trip and itinerary | Destinations, dates, activities, accommodations, transport, arrival and departure, place of residence and current location that you enter | Planning in the group | members of the trip | Supabase, Zurich, not end-to-end encrypted |
| Personal trip settings | Budget, interests | Recommendations and budget display for you | only you | Supabase, Zurich |
| Finances | Expenses, shares, payment method, settlements, group fund | Shared expense settlement | members of the trip, depending on the visibility of the expense | Supabase, Zurich, not end-to-end encrypted |
| Chat | Text, photos, videos, voice messages, files, shared locations; in the group chat or privately to one person | Communication | Group chat: members of the trip from the history they are allowed to see. Private: only sender and recipient. | Supabase, Zurich, not end-to-end encrypted, see section 4 |
| Device location | exact position, only when you choose "Location" in the chat | Share your location once | like the chat message | as a chat message. The app does not track your location in the background. |
| Street route | Coordinates of start (accommodation) and destination (selected activity), mode of transport | Show path and duration on the map, only when you tap a mode of transport | you | Result stored without reference to your person for up to 30 days, Supabase, Zurich |
| Vault | Scans of passports, visas, bookings | Secure storage of travel documents | only you and people you share a document with | Content, name, category and note end-to-end encrypted; file size and file type not |
| Imported bookings and receipts | Booking confirmations, receipts, screenshots | Pre-fill entries and expenses; you confirm every draft | like trip and financial data | The text is read on your device; the file is not uploaded for this. Adopted details are stored like trip and financial data. |
| Entry | Nationality you enter for the entry information | Show matching entry rules | only you | Supabase, Zurich |
| Push notifications | Device identifier for push (token), platform, device name, your settings per occasion, quiet hours, preview yes or no | Notifications about chat, shopping rounds, votes and payments | only you | Supabase, Zurich; delivered via Expo and Google or Apple, see section 5 |
| Security and abuse | Reports of messages, blocks, join attempts with an invitation code | Protection against abuse and guessing of codes | operator | Supabase, Zurich |
| On your device | cached trip, finance and chat data for offline use, downloaded language packs, weather and map sections, offline copies of Vault documents (encrypted) | Use without a network | whoever uses your unlocked device | only on the device. The caches for trip, finance and chat data are not additionally encrypted. |
The app reads the clipboard only when you explicitly tap "Paste" or an import; the content stays on the device. Camera, photos and microphone are only used when you take or select a photo, a video or a voice message.
Sulser Digital uses no tracking, no analytics tools of its own, no automatic error reporting and no advertising. One exception does not lie with Sulser Digital but in the built-in translator: the Google ML Kit library it contains sends usage and diagnostic data to Google on its own (device, app version, selected languages, error codes; not linked to you as a person, no tracking, never the translated text), see section 5. Sulser Digital does not receive this data. Partner links to booking portals are currently not active.
4. End-to-end encryption: what it means and what it does not
The documents in the Vault are end-to-end encrypted: the operator technically cannot see the content, name, category and note of a document. File size and file type are not encrypted.
Not end-to-end encrypted are chat messages including photos, videos, voice messages and files, also private messages, as well as all financial and trip data. They are stored in plain text in the database or the file storage and are technically visible to the operator and, within their access rights, to the service providers used.
If the recovery code and all devices on which the Vault is set up are lost, the documents cannot be recovered.
5. Recipients and services
| Provider | Purpose | Which data | Location | Basis of disclosure |
|---|---|---|---|---|
| Supabase | Database, login, file storage, server functions (final deletion, push delivery, street route) | all data from section 3 except pure device data | Region eu-central-2, Zurich | Data in Switzerland. Supabase Inc. is based in the USA; access for operations and support cannot be ruled out. Supabase is not certified under the Data Privacy Framework. |
| Expo (650 Industries Inc.) | Delivery of push notifications | Push token, title and text of the notification (without message content, unless you switch on the preview) | USA | Swiss-U.S. Data Privacy Framework, status "active, re-certification under review" (participant list, measured 16.10.2026) |
| Google (Firebase Cloud Messaging) on Android, Apple (Push Notification Service) on iPhone | Delivery of the push notification to the device | Push token and notification | USA | Google LLC: Swiss-U.S. Data Privacy Framework (measured 16.10.2026). Apple Inc. is not listed in the Data Privacy Framework (measured 16.10.2026). |
| Google (ML Kit, translator) | (a) Download language packs for the translator from Google servers; (b) usage and diagnostic data that ML Kit sends to Google on its own. According to Google, it uses them to measure performance, fix errors, improve ML Kit and detect abuse. | (a) when downloading, IP address and device data. (b) continuously: device information (manufacturer, model, operating system version), app identifier and app version, per-installation identifiers (according to Google not intended to uniquely identify you or the device; on Android partly a device identifier), performance values (for example duration), selected source and target language, events (for example pack loaded, translation) and error codes. For remote configuration ML Kit uses Firebase Remote Config and Firebase Installations. According to Google, the data is not linked to you as a person, not used for tracking and transmitted encrypted (HTTPS). The text to be translated and the translated text do not leave the device. | USA | Google LLC: Swiss-U.S. Data Privacy Framework. Sources (retrieved 09.10.2026): developers.google.com/ml-kit/terms, /ml-kit/android-data-disclosure, /ml-kit/ios-data-disclosure |
| Google Maps (Android app only) | Map display and place search | Map section, searched places, IP address, device data | USA | Google LLC: Swiss-U.S. Data Privacy Framework (measured 16.10.2026) |
| Google Routes (Android app only) | Street route between accommodation and activity | Coordinates of start and destination and the mode of transport. The request goes through the server function at Supabase, not directly from your device; Google receives neither your IP address nor your name or account. | USA | Google LLC: Swiss-U.S. Data Privacy Framework (measured 16.10.2026) |
| OpenStreetMap Foundation | Map tiles and place search (place name to coordinates) | displayed map section, the searched place name or address, IP address | United Kingdom | Switzerland recognises the United Kingdom as adequate. |
| Norwegian Meteorological Institute (MET Norway) | Weather forecast | rounded coordinates of the place, IP address | Norway | EEA, recognised by Switzerland as adequate |
| Mailjet (Sinch) | Sending the login emails from hello@sabaisquad.com, without open and click tracking | Email address, content of the login email | EU (Frankfurt, Saint-Ghislain) | EU, recognised by Switzerland as adequate |
| Vercel | Delivery of the website sabaisquad.com and the web version app.sabaisquad.com | IP address, pages accessed | USA | Vercel Inc.: Swiss-U.S. Data Privacy Framework (measured 16.10.2026) |
If you open a link or another app from within the app (for example Google Maps, Grab, LINE, Wise, Airbnb, Booking.com, government websites), the privacy policy of that provider applies from there; Sulser Digital transmits no data other than what is in the link itself (for example a place or a travel date).
No data is sold. Further recipients are the members of the same trip to the extent described in section 3. New services will be added here before they are introduced.
6. Legal basis
- Account, trip, finances, chat, Vault, map, street route and push delivery: performance of the user relationship.
- Push notifications, sharing your location, camera, microphone: additionally your permission in the operating system, revocable at any time.
- Protection against abuse (join attempts, reports, blocks) and backup of the database: legitimate interest in secure and reliable operation.
- Consent to this policy: proof that you have been informed.
- Usage and diagnostic data of Google ML Kit (section 5): legitimate interest in a working translator; the app points this out on the consent screen.
7. Cookies
Sabai Squad uses no marketing or tracking cookies. Login uses session tokens from Supabase that are needed solely for the login state.
8. Retention and deletion
Deleting your account in the app (Settings › Account › Delete account, confirmed by typing): deleted are your profile and profile photo, your chat messages including photos, videos, voice messages and files, comments, votes, packing list, stays, Vault documents, push identifiers and settings, entry information, personal trip settings, blocks and reports. Your login is blocked and the email address is removed from the account.
What remains, anonymised as "Deleted account": expenses and shares in which others are involved, so that their settlement is correct, as well as trip entries you created for the group (for example activities, contacts, shopping lists including photos). Trips you created alone are deleted completely; for trips with others, management passes to another member.
Deleting a message: a deleted message is replaced for everyone by "Message deleted"; an attachment can no longer be retrieved by anyone from that moment and is removed from storage.
Time limits:
- Files of deleted messages, accounts and trips: physically deleted, as a rule within one hour.
- Vault recycle bin: final deletion after 30 days.
- Push notification queue: delivered entries after 7 days.
- Cached street routes: after 30 days.
- Other data: as long as your account exists.
Backup: the operator backs up the database itself once a week. The backup copy is kept on a computer of the operator in Switzerland, not in cloud storage, and serves only for recovery after an outage. Files (photos, videos, receipts, Vault documents) are not included. Data you have deleted may still be contained in an older backup. Backups are deleted after 30 days. Supabase itself does not create automatic backups for this project.
Data stored on your device is deleted when you log out or remove the app.
Deletion on request is still possible by email to privacy@sabaisquad.com.
9. Your rights
Under the FADP and, where applicable, the GDPR you have in particular the following rights:
- Access to the data stored about you
- Correction of inaccurate data
- Deletion of your data (in the app or by email)
- Data portability
- Objection to the processing or withdrawal of consent given
- Complaint to a supervisory authority, in Switzerland the Federal Data Protection and Information Commissioner (FDPIC)
For all these requests: privacy@sabaisquad.com
10. Data security
Transmission is encrypted (HTTPS/TLS). The Vault is additionally end-to-end encrypted and protected by a personal code (section 4). Access to the database is restricted per table via row-level security; photos, videos, voice messages, files and trip cover images are kept in non-public storage and can only be retrieved via time-limited links.
11. Minimum age
Use is restricted to persons aged 18 and over.
12. Changes to this policy
This policy is adapted as needed. Each version carries a version number. When a new version is published, the app asks for consent again and records the version and time in your profile.