01Introduction
Cribbb is a travel app. You can plan trips with Zuri, our AI travel assistant, book flights, stays and things to do through our travel partners, watch short videos from other travellers, travel with friends and meet people wherever you go. This policy applies to the Cribbb app on iPhone and Android, to cribbb.com, and to the emails and services connected to them (together, “Cribbb”).
We have tried to write this policy plainly. When we say “we”, “us” or “our”, we mean Cribbb. When we say “you”, we mean anyone who uses Cribbb.
If you have questions about this policy, you can contact us at any time (see “Contact us”).
02Information Cribbb collects
We collect information to run Cribbb and to make it work better for you. The information we collect depends on how you use Cribbb.
Things you create or give us
Account details: your name, username, email address and password. Passwords are stored by our sign-in provider in a form that we can’t read. If you sign in with Google or Apple, we receive the name and email address that service shares with us.
Profile: your photo, bio, home city, languages, travel interests and the countries you have visited, if you add them.
Trips and plans: trips, days, places you save, bucket lists, budgets, notes, price alerts and anything you ask Zuri.
Content you share: videos, photos, reviews, comments, group posts and polls. Content you choose to make public can be seen by other people on Cribbb.
Messages: your chats, including photos, voice notes and files sent in them, are end-to-end encrypted. We store them only in encrypted form and can’t read them (see “Keeping your information secure”). We do see who you message and when, so we can deliver your messages.
Group trips and shared costs: who is on a trip with you, what each person added, votes, and the amounts recorded in a shared pot or split.
Calls: when you make or join a voice or video call, we record who was in it, when and for how long (to count call minutes). The call itself is encrypted and carried by our calling provider; we don’t record it.
Verification and support: information you send us to verify your profile, to report a problem or to ask for help.
Information we collect as you use Cribbb
Activity: what you view, search, save, like, add to a trip or book, and how you use features, so we can recommend better places, trips, videos and people.
Location: your device’s location only if you allow it (see “Location”).
Device and app information: device type, operating system, app version, language, time zone, crash and performance data, and a notification token if you allow notifications.
Log information: IP address, the date and time of requests, and the pages or screens you used, which our servers record automatically to keep Cribbb running and secure.
Purchases: when you start a free trial, subscribe to Cribbb Plus, buy call minutes or send a gift, Apple (App Store) or Google (Google Play) processes the payment. We receive the details of the purchase, never your card details (see “Payments and subscriptions”).
Information from other sources
Sign-in providers (Google, Apple), as described above.
Travel partners, who may tell us that a booking was made through a Cribbb link and its basic details (for example the product and date) so we can show it in your trip and earn our commission.
Other people, for example when a friend adds you to a group trip or mentions you.
03Why Cribbb collects information
We use the information we collect to:
Provide Cribbb: run your account, save your trips, show your content to the people you choose, carry your messages and calls, and keep group trips and shared costs in sync.
Plan and recommend: let Zuri plan trips and answer questions, and suggest places, deals, videos and travellers that fit what you like.
Connect you with travel partners: show prices and availability and send you to the partner when you choose to book.
Communicate with you: send the notifications and emails you ask for, such as price alerts, trip reminders, invitations and messages, and important notices about your account or this policy.
Keep people safe: protect against spam, fraud and abuse, verify profiles, review reported content and enforce our Terms of Service.
Improve Cribbb: understand which features help travellers, fix problems and build new features.
Meet legal obligations: keep records the law requires and respond to lawful requests.
We ask for your permission before we use your information for a purpose that isn’t covered by this policy.
04Zuri and AI features
Zuri, our AI travel assistant, uses AI models from trusted providers to understand your questions and write plans and answers. When you ask Zuri something, we send your question and the trip details needed to answer it to the AI provider, which processes them to give you an answer.
Our AI providers process this information on our behalf and are not allowed to use it to train their own models.
Don’t share sensitive information with Zuri that you don’t need to, such as health details, unless you want it used in your plan (for example a food allergy).
AI answers can be wrong. Check important details such as prices, opening times and visa rules before you rely on them.
Translation in chats happens on your phone. Your messages never leave it to be translated, so they stay end-to-end encrypted.
05Your privacy controls
You have choices about the information we collect and how it’s used.
Profile and visibility: edit your profile, make your account, trips and lists private, and choose whether you appear to other travellers nearby.
Location: turn location on or off in your phone’s settings at any time.
Notifications: choose which notifications and emails you receive in the app’s settings or with the unsubscribe link in any marketing email.
People: block or report anyone, and leave a group trip or chat whenever you like.
Chat lock: lock your chats behind your phone’s Face ID, Touch ID or passcode.
Your content: edit or delete your videos, photos, reviews, comments and messages.
Download or correct your information: email us to ask for a copy of your information or to correct it.
Delete your account: go to You → Settings → Account in the app. This deletes your account and personal information, except what we must keep (see “Keeping and deleting your information”).
07Payments and subscriptions
Cribbb is free to use. Some extras are paid, and some travel is booked with our partners.
Cribbb Plus, free trials, call minutes and gifts
These are bought inside the app and paid through the App Store on iPhone and iPad, processed by Apple, or Google Play on Android, processed by Google (Google Play Billing). You pay with the payment method saved in your Apple or Google account.
Apple or Google collects and processes your payment details under their own privacy policies. We never receive or store your card or bank details.
We use RevenueCat, a subscription management service, to receive purchase information from Apple and Google and keep your Cribbb Plus status up to date.
What we receive and keep: the product (for example Plus monthly or yearly, a minutes pack or a gift), price and currency, the store’s transaction and subscription IDs, purchase, trial, renewal, cancellation and refund dates, and your country or region.
We use it to unlock what you paid for, remind you before a free trial ends, handle support and refund questions, prevent fraud and keep financial records.
Gifts: when you send Plus or call minutes to a friend, we record who sent it, who received it and whether it was opened, and show the gift in your chat with them.
Bookings with travel partners
Cribbb shows travel options from partners and earns a commission when you book through our links. This never changes the price you pay.
Bookings are made with the partner, not with Cribbb. The partner collects the details it needs, such as passenger names and payment details, and its own privacy policy applies.
Shared costs on group trips
Cribbb records what each person owes and has paid so everyone can settle up. Cribbb never holds or moves the money; members pay each other directly.
If you are the group’s money holder, the payment details you add (for example a bank or mobile money account) are shown only to the members of that split.
08Keeping your information secure
We build security into Cribbb to protect your information.
End-to-end encrypted chats
Your one-to-one and group chats are end-to-end encrypted, including photos, voice notes and files sent in them.
Each phone has its own encryption keys, kept in the phone’s secure storage. Every message is locked on your phone before it is sent and can only be unlocked on the phones of the people in the chat.
Our servers only ever store encrypted messages. Cribbb can’t read your chats, and neither can our service providers.
Translation of chats happens on your phone, so it doesn’t break this protection.
Secure calls
Voice and video calls are encrypted while they travel between you and the other people in the call, using industry-standard encryption for real-time calls.
Calls are never recorded. We keep only who was in a call, when and for how long.
Everything else
All information is encrypted in transit between your device and our servers (HTTPS/TLS), and encrypted at rest in our databases and storage.
Access to personal information is limited to the people and systems that need it to run Cribbb, and our database enforces who can read and change each record.
Passwords are handled by our sign-in provider and are never visible to us.
You can lock your chats behind your phone’s Face ID, Touch ID or passcode.
Payments are processed by Apple or Google; we never handle card details.
No system is perfectly secure. If we learn of a security breach that affects your personal information, we’ll notify you and the authorities as the law requires.
09Location
With your permission, Cribbb uses your device’s location to show things near you, suggest your next stop, find travellers and locals around you and give you local weather.
You can choose to share your location only while using the app, or not at all, in your phone’s settings.
Other people never see your exact location. When you choose to appear to people nearby, they see an approximate distance, such as “400 m away”.
We may also estimate a general area (such as a city) from your IP address to show prices in your currency and relevant content.
11Keeping and deleting your information
We keep your information for as long as your account is open, and for as long as we need it for the purposes in this policy.
When you delete something, such as a video or message, we remove it from Cribbb. Copies may stay in backups for a short time before they are overwritten.
When you delete your account, we delete your personal information, except where we need to keep it longer.
What we keep longer, and why: records of purchases, subscriptions, trials and gifts for tax and accounting, information about accounts removed for abuse to stop them coming back, and information we must keep to comply with the law or resolve disputes.
Messages you sent to other people may remain in their chats after you delete your account.
12Children
Cribbb is not directed to children under 13, and you must be at least 13 years old to create an account (or older where the law of your country requires it). We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us information, contact us and we’ll delete it.
13International data transfers
Cribbb is used around the world, and our service providers have servers in different countries, including the United States. Your information may be processed in a country other than the one you live in, which may have different data protection laws.
When we transfer information internationally, we protect it as described in this policy and use legal safeguards such as standard contractual clauses where the law requires them.
14Your rights in the United States
Some US state privacy laws, including the California Consumer Privacy Act (as amended by the California Privacy Rights Act) and similar laws in states such as Colorado, Connecticut, Virginia, Utah, Texas and Oregon, require us to describe our practices in a specific way and give residents certain rights.
Categories of personal information we collect (in the last 12 months)
Identifiers: name, username, email address, IP address, device and account identifiers.
Customer records: contact details, and purchase and subscription records (no card details).
Commercial information: trips, saved places, bookings made through our links, Cribbb Plus subscriptions, trials, call minutes and gifts.
Internet or other electronic network activity: how you use Cribbb, searches, views and crash data.
Geolocation data: precise location if you allow it, and approximate location from your IP address.
Audio, electronic and visual information: photos and videos you upload; calls are carried live and not recorded.
Inferences: your travel interests and preferences, used to personalise recommendations.
Sensitive personal information: precise geolocation (with your permission) and account log-in, used only to provide the features you ask for. Your messages are end-to-end encrypted, so we can’t read their contents.
We collect these from you, from your device, and from the other sources described in “Information Cribbb collects”, for the purposes described in “Why Cribbb collects information”. We disclose them for business purposes to the service providers and others listed in “Sharing your information”.
Sale, sharing and targeted advertising. We do not sell personal information, and we do not share it for cross-context behavioural advertising or use it for targeted advertising, as those terms are defined by these laws. We do not sell or share the personal information of anyone under 16. We use sensitive personal information only for purposes the law permits without offering a right to limit.
Your rights. Depending on where you live, you may have the right to:
know what personal information we have collected about you and how we use and disclose it;
get a copy of your personal information in a portable format;
correct inaccurate personal information;
delete your personal information;
opt out of the sale or sharing of personal information, targeted advertising and profiling (we don’t do these, but you can still ask); and
not be treated differently for exercising these rights.
How to exercise your rights. Email hello@cribbb.com from the address on your account, or delete your account in the app. We’ll verify your request by confirming it from your account email, and respond within 45 days (or the time the law allows). You may use an authorised agent; we may ask the agent for proof of permission and ask you to confirm your identity. We honour Global Privacy Control (GPC) signals sent by your browser as an opt-out request.
Appeals. If we decline your request, you can appeal by replying to our decision. If you’re not satisfied with the outcome of your appeal, you can contact your state attorney general.
California “Shine the Light”. We don’t share personal information with third parties for their own direct marketing.
15Your rights in other regions
If you live in the European Economic Area, the United Kingdom or another region with similar laws, you have the right to access, correct, delete, restrict or object to our use of your personal information, to receive it in a portable format, and to withdraw consent at any time. You can also complain to your local data protection authority.
We rely on these legal bases: to provide the service you asked for (contract), our legitimate interests in running, securing and improving Cribbb, your consent (for example for location and notifications), and our legal obligations.
16Changes to this policy
We change this policy from time to time. We won’t reduce your rights under this policy without your consent. The date at the top shows when it last changed. If we make significant changes, we’ll tell you in the app or by email before they take effect.
17Contact us
If you have questions about this policy or want to exercise your rights, contact us:
Email: hello@cribbb.com
We aim to reply within a few working days.