Urban Break

Privacy Policy

Last updated 17 October 2026

This explains what personal data Urban Break collects, why, who can see it, how long it's kept, and the rights you have over it.

1. Who is responsible

Santhosh Devadiga (an individual in India) is the Data Fiduciary for Urban Break under the Digital Personal Data Protection Act, 2023. Contact: santhoshrdevadiga@gmail.com.

2. What we collect and why

  • Account: name, email, username, sign-in method, and when you accepted these terms and confirmed you're 18+. To run your account and keep it secure.
  • Sign-ins: time, device type and IP address of each sign-in. To protect accounts and investigate abuse.
  • What you share: trips, join requests, chats, photos, posts, captions, ratings, reports. To provide the app, show it to the people you chose, and keep the community safe.
  • Safety settings you choose to give: gender (only for women-only trips), an emergency contact (shown only to your trip's organiser around the trip day). Optional, and you can remove them any time.
  • How you use Explore and places (what you open, save or like, how long a post is on screen). To rank what you see and learn what's useful. Ranking logs use a random per-tab id, not your name. You can switch personalisation off.
  • How long you spend on each part of the app: only a page name and the active seconds, never what you view or type. It is added up per page and per day. For signed-in people one small daily marker links you to that day's total so we can count active people; it deletes itself after 100 days and when you delete your account. Browsers set to Do Not Track aren't counted.
  • Which version of a page you were shown when we test two designs, and whether you then took a step such as creating a trip. This uses a random id kept in your browser, never your name, and the counts are added up per version. Browsers set to Do Not Track aren't counted.
  • Location: only if you allow it, used on your device for "Nearby" (rounded to about 1 km when sent). We never show anyone your location; photo location data is removed on your phone before upload.

3. Who sees what

  • Posts: the audience you pick (Everyone, Buddies, Close friends, Only me). People who aren't your buddies see the day a post was shared, not the time.
  • Profile: travel facts to people you've shared a trip with and organisers of public trips you can see. A private profile shows only your name.
  • We never sell your data or show ads based on it.

4. Where it's stored and who helps us

Your data is stored on Amazon Web Services in Mumbai (ap-south-1), India. We use Amazon Cognito for sign-in (and Google if you choose Google sign-in). Map tiles come from OpenStreetMap and place videos from YouTube (privacy-enhanced mode); weather comes from MET Norway without any personal data. These services process data only to provide their service to us.

5. How long we keep it

  • Your account and what you share: until you delete them or your account.
  • Chats: trip chats 180 days after the trip; direct chats a year after each message. Notifications 90 days. Ranking logs 30 days.
  • After you delete your account: your registration record (profile, sign-in identities, login history) is kept in a locked store for 180 days, because the IT Rules 2021 require it, then deleted automatically.
  • Content removed for breaking the rules, and records of banned accounts: 180 days (longer only if a court or authority asks).
  • Moderation records (warnings, strikes): one year.

6. Your rights

  • See and correct your data in the app, or ask us for a summary of what we hold.
  • Erase: delete posts, photos, albums or your whole account from the app (subject to the legal record above).
  • Withdraw consent: switch personalisation, notifications and the weekly digest off any time; deleting your account withdraws all consent.
  • Complain: to our Grievance Officer (form), and then to the Data Protection Board of India.
  • Nominate someone to exercise your rights if you die or can't act yourself: email us.

7. Children

Urban Break is only for people aged 18 and over. We don't knowingly process children's data; if we learn of a child's account we delete it.

8. Security and breaches

Data is encrypted in transit and at rest; access is limited to what each part of the app needs. If a personal data breach happens we'll inform the Data Protection Board and the people affected, as the law requires.

9. Contact

Grievance Officer: Santhosh Devadiga, santhoshrdevadiga@gmail.com. We acknowledge within 24 hours and resolve within 15 days.