Privacy Policy

SORA ("we", "us", or "our") operates the SORA mobile and web application (the "Service"). This Privacy Policy explains how we collect, use, and protect your personal information when you use the Service. By creating an account or using the Service, you agree to the practices described in this policy.

We collect information you provide directly to us, including:

• Account information such as your name, email address, and profile photo.
• Trip and event details you create, including itineraries, accommodations, expenses, packing lists, notes, and group chat messages.
• Connections with other users, such as friend requests and trip invitations.
• Content you upload, such as inspiration images, receipts, and photos.

We also automatically collect device and usage data, such as your IP address, device type, and how you interact with the Service, to improve performance and security.

• To create and manage your trips, events, and shared spaces.
• To facilitate collaboration with other invited members on a trip.
• To send you notifications about trip activity, invitations, and reminders.
• To provide customer support and respond to your requests.
• To improve, secure, and troubleshoot the Service.
• To comply with legal obligations.

We do not sell your personal information. We share data only as necessary to operate the Service:

• With other trip members: Information you add to a shared trip (itinerary, chat, expenses, etc.) is visible to the members and invitees of that trip.
• Service providers: We use trusted third-party vendors (such as hosting, maps, and payment processors) that help operate the Service, under appropriate data protection agreements.
• Legal compliance: We may disclose information when required by law or to protect our rights and the safety of others.

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we remove your profile, your hosted trips, and associated content as described in the in-app account deletion flow. Some residual data may be retained in backups or as required by law.

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Request correction or deletion of your data.
• Opt out of certain communications or data processing.

You can delete your account and associated data at any time from Settings → Delete Account. To exercise other rights, contact us through the in-app support channels.

We use reasonable technical and organizational measures to protect your information, including encrypted transmission and access controls based on your role within each trip. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

The Service is not directed to children under 13 (or the applicable age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. We encourage you to review this page periodically to stay informed.

If you have questions about this Privacy Policy or your data, please reach out through the in-app support options or the contact information provided in the Service.