• Trips are private. You join with a private invite link, and the host sees everyone who joins and can remove anyone.
• We keep only what the app needs to work.
• We don't sell your data or share it for marketing, and there are no ads.
• You can ask us to delete your data at any time.

• Your name, and your email if you use one. Followers can join with just an invite link and their name; hosts and travellers sign in with Google or an email. We use your email to sign you in, and to send the reminders described below (a trip reminder you ask for, and a reminder before we close an account that hasn't been used for 2 years). Other people on a trip see your name, never your email.
• What you post: photos, captions, the town, the date and time, and the weather. Photos are resized on your phone before upload, which also removes their hidden location data (GPS). For each photo we also note the original's file name, size and when it was taken (not the photo itself), so a photo book can use the full-size version later.
• Reactions and comments you add.
• Trip membership: which trips you're on, your role, who invited you, and when you last opened each trip.
• Feedback and survey answers you send us, with the screen you were on and your phone type. A review is only shown publicly if you say yes, with the name you choose.
• Your type of phone and browser (for example "iPhone · Safari"), so we can spot problems that only happen on one kind of phone. Only the Hola-day team sees it.
• Trip reminders: if you ask on the front page, your email and the month of your next trip, used only to send that reminder. Ask us and we'll remove it.

• Invite links: a link for one person can be used once. A link for a group chat works for anyone who has it, for 7 days. Once the host removes someone, they can't rejoin with the same link.
• Everyone on a trip or event sees its posts, the names of the people who posted or reacted, and (if the host turns them on) comments.
• Private comments are shown in the diary only to the person who wrote them and the person whose post it is.
• Saving and downloading: the host decides whether travellers and followers can save photos, and whether travellers can download the whole trip or make a trip video. Trip videos are made on your own phone and stay there. Copies people have already saved or downloaded stay with them, even if a post is later deleted.
• The host (and anyone they let manage the trip) sees the list of people on it and when each person last opened it, and can remove anyone.
• The Hola-day team can access the stored data to run the service and fix problems. We don't browse your trips.

• Your originals stay on your phone. Hola-day uploads a smaller copy for sharing. It never takes, moves or replaces your originals.
• You keep ownership of everything you post. We only use it to run Hola-day: to store it and show it to the people you invited.
• We don't sell your photos, use them for ads or use them to train AI.
• Download your whole trip at any time, free (Download diary on the trip page). Delete a post at any time.

• Your trips and photos are stored securely in Singapore. In the app, photos are shown through links that expire within an hour.
• We use a small number of trusted service providers to run Hola-day: cloud storage, web hosting, sending sign-in emails, optional Google sign-in, and looking up the town and weather. Some may process data outside Singapore. We choose providers that protect it to a comparable standard. Ask us for the list any time.
• To fill in the town and weather, the app sends only a rounded position (about 1 km) and the date, along with the usual internet address any website sees. Your photos, name and email are never sent. Your phone asks before sharing your location. If a photo has its own location, it's used the same way, rounded, to suggest the town, and isn't stored.

• As long as you use Hola-day. Your trips, photos and posts stay for as long as your account is active.
• Beta ending doesn't delete anything. When Hola-day leaves beta, or moves to a new web address, everything stays. We'll keep old links working for as long as we reasonably can, and tell you if anything changes.
• If you don't open Hola-day for 2 years, we'll email you reminders first. If you still don't sign in, we delete your account and everything you posted. A trip is deleted together with its owner's account.
• Want a copy first? Use Download diary on any trip you post to, or ask us and we'll help.
• Deleting things yourself: deleted posts and comments disappear from the app straight away. Ask us and we'll erase them completely, including stored photos, usually within 30 days (backups clear on their own schedule). When a host deletes a trip, everyone's posts in it are deleted too. Ask us to delete your whole account at any time.

• The host is in charge of the trip: who joins, what they can see, and whether followers can save photos.
• Children: ask a parent or guardian before posting a photo where someone else's child can be recognised. Avoid school names, home addresses and exact live locations.
• Only post photos the people in them are happy to share. No app can stop screenshots, so only invite people you trust.
• Report a photo: anyone, including someone who is in a photo or their parent, can ask the host or us to take it down. No account needed: email us or use Problem or idea? in the app.

Hola-day (beta) is run from Singapore. For anything about your data (seeing what we hold, correcting it, deleting it, withdrawing consent, reporting a photo or making a complaint), email our data protection contact at hello@hola-day.com, or use Problem or idea? in the app and choose "Delete my data", or ask the person who invited you to pass it on. We'll reply and confirm when it's done. You don't need an account to contact us.

If there's ever a data breach, we'll notify Singapore's Personal Data Protection Commission (PDPC) and the people affected, where the law requires it.