Privacy Policy
Last updated: 13 October 2026
1. Introduction
NRI TravelBuddy ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our travel companion matching service, in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.
NRI TravelBuddy is a free community service run by a private individual in a personal capacity. It is non-commercial: it earns no revenue and we do not sell or monetise your data.
As our primary market is Germany and Europe, we adhere to the highest standards of data protection as required by European law.
2. Data Controller
Prashant Shah (private individual running NRI TravelBuddy as a non-commercial community service)
Ina-Rothschild-Weg 36/3
73732 Esslingen am Neckar, Germany
Email: travelbuddymatch@gmail.com
3. Information We Collect
Contact Information
• Email address (required for travel matching and communication)
• WhatsApp number (optional - never shown or given to other users)
Travel Information
• Flight details (departure/arrival cities, dates, flight numbers)
• Travel assistance requests or offers
• Travel preferences and descriptions
Technical Information
• IP address and browser information (for security and analytics)
• Usage data and interaction patterns (anonymized)
4. How We Use Your Information
Primary Purpose: Travel Matching
Legal Basis: Consent
We use your flight details and email to identify potential co-travelers on the same routes and facilitate introductions between matched travelers.
Optional: Marketing Communications
Legal Basis: Separate Explicit Consent
Only if you explicitly opt-in, we may send you updates about new features, travel tips, and service improvements. You can unsubscribe at any time.
Service Operations
Legal Basis: Legitimate Interest
We process data to maintain service security, prevent fraud, and improve our platform.
4a. How Matching and Courier Requests Work
NRI TravelBuddy only puts two people in touch with each other. One person sends a travel-buddy or courier request, the other person chooses whether to accept it, and the two then deal with each other directly.
We are not a party to any arrangement, agreement or transaction between the people who connect through the site. What you agree between yourselves is your own responsibility.
WhatsApp number: Adding a WhatsApp number is optional. We never share it with other users, including the person you are matched with, and never with anyone outside the platform (no advertisers, data brokers or other third parties). Only email addresses are exchanged between matched people. The operator may use your number himself only in an urgent case, for example when a trip is within hours and email has not reached you.
4b. Service Providers We Use
We use the following providers to run the site. They process data on our behalf:
- • Supabase - database and sign-in (stores your account and request data)
- • Netlify - website hosting and delivery
- • Google - Gmail (sending our emails), Google Sheets (logging clicks on our campaign links), and Google Analytics (only if you accept analytics cookies)
4c. Use of AI Services
We do not currently use AI services to process your personal data. If we do in the future, we will name the provider in this policy once it is in use.
5. Data Sharing
With Matched Travelers
When we find a potential travel match, we share your email address with the matched traveler and vice versa. Your WhatsApp number is never shared with other users. This sharing is limited to the specific purpose of facilitating travel companionship.
We do NOT share your data with:
- • Third-party advertisers
- • Data brokers
- • Social media platforms (unless you explicitly connect them)
- • Any party for commercial purposes without your explicit consent
6. Your Rights Under GDPR
Right to Access
Request a copy of your personal data
Right to Rectification
Correct inaccurate information
Right to Erasure
Request deletion of your data
Right to Withdraw Consent
Opt-out of data processing
Right to Data Portability
Receive your data in a structured format
Right to Object
Object to certain processing activities
How to Exercise Your Rights
To exercise any of these rights, please contact us at:
We will respond to your request within 30 days as required by law.
7. Data Retention
Travel Requests: We retain your travel requests and associated data for 12 months after your travel date, or until you request deletion.
Email Communications: Marketing consent and communication preferences are retained until you withdraw consent or request deletion.
Technical Data: Anonymized usage data may be retained for up to 2 years for service improvement purposes.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- • Encryption of data in transit and at rest
- • Regular security assessments and updates
- • Access controls and authentication measures
- • Staff training on data protection principles
9. International Data Transfers
Your data may be processed in countries outside the European Economic Area (EEA). When this occurs, we ensure adequate protection through:
- • Standard Contractual Clauses approved by the European Commission
- • Adequacy decisions by the European Commission
- • Other appropriate safeguards as required by GDPR
10. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
11. Supervisory Authority
You have the right to lodge a complaint with a supervisory authority if you believe we have not complied with data protection laws. In Germany, you can contact:
Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)
Website: www.bfdi.bund.de
Email: poststelle@bfdi.bund.de
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email (if you have provided one) and/or by posting a notice on our website. The "Last updated" date at the top of this policy indicates when it was last revised.