Privacy Policy & Terms of Use

Effective 13 September 2026 · v1.2

1. The App

2. How your trips are protected

• What is not inside the encrypted file: receipt and cover photos (stored separately behind unguessable links that are never listed — each photo's link lives only inside the encrypted trip), your device's notification address, and your account details if you sign in.
• The KDK420 team sees counts and technical logs only (such as how many trips exist or error reports), never your trip contents.

3. What we process & why

• Trip content — member names, expenses and payments, the plan, chat messages — to sync between your group's members, encrypted as described in section 2.
• Photos — receipts and trip covers you upload, stored on our cloud servers.
• Account data (optional) — if you sign in with Google, Apple, email or phone we receive your email, name or phone number, and send your sign-in code by email or text message. The app is fully usable without an account.
• Live location (opt-in) — while you switch it on inside a trip, your position updates every few seconds and only that trip's members see it; it is part of the encrypted trip. When you switch it off, updates stop and your last position stays visible to the group as “last seen”.
• Notifications — we store your device's notification address with the trip's encrypted identifier to deliver your group's alerts through your phone's notification service.
• The «بن بطوطة» assistant — when you mention it in the chat, the group's recent messages and the trip's name, destination and plan are sent to a third-party AI service to answer you; it may look up place and weather information with map and public-information services. None of this is used to profile you.
• Plan import — the file or photo you choose is sent to the AI service to be read, and is not stored by us.
• Maps and exchange rates — map images and routes come from map services, which see the area you view; exchange rates come from a public service, with no personal data.
• Crash reports — technical crash data, without your trip contents.
• Contact-us messages — delivered to the KDK420 team with any screenshots you attach.

We use trusted service providers solely to run the app; your data may be processed outside the UAE.

4. What we don't do

No ads. No selling of data. No tracking outside the app. No permission requests unrelated to a feature you use (camera for receipts, location for the live map, notifications after we explain why).

5. Who sees your data

Your group's members see the shared trip. Anyone holding an invite code can join. Payment details you save are shown to your groups' members, masked until tapped.

6. Your rights

• Export any trip as PDF/CSV from its Money tab.
• Delete your account in the app (Account → Close account): your account and sign-in details are deleted immediately. Your trips stay on your device and with your group.
• Retention: we keep a trip's encrypted copy while its members use it; deleting a trip on your phone removes your copy.
• Other requests — to access, correct or delete your data, write to contact@kdk420.ae; we aim to reply within 30 days.

7. Terms in short

Bin Battuta is a group-organisation tool, not a financial institution; actual transfers happen outside the app between members. You are responsible for what you enter and for the invite codes you share. Abuse may lead to suspension.

8. Changes

Material changes will be posted on this page with an updated effective date.