Privacy Policy
Effective 8 October 2026
LMI Automata Labs (“we”) runs Tarashare. This policy explains what personal information we process, why, and your rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.
What we collect
- From Google when you sign in: your name, email address and profile photo. We never see your Google password.
- Trip information you and other members enter: trip details, the names (and optionally emails) of people in the trip, expenses, payments, covering arrangements, notes and the change history.
- Files you upload: receipts, payment screenshots, trip images, and payment QR codes.
- Payment details you choose to show others: e.g. a GCash or bank account name and number, so trip members can pay you. We don’t take payments through these.
- Technical data: a session cookie that keeps you signed in, and server logs (IP address, time, page requested) kept for security for up to 30 days.
Why we use it
- To run the service: show each trip to its members and calculate balances and settle-up.
- To email an invite when an organiser adds someone to a trip with their email address. We keep a record of each invite (who, to which address, when, and whether it was delivered) to prevent misuse — at most one invite per person per hour, and daily limits per trip and per organiser.
- To keep accounts secure and prevent abuse.
- To manage your plan (trial, Pro) and answer requests you send us.
Our basis is the contract with you (providing the service you asked for) and our legitimate interest in keeping it secure. We do not sell personal information, show ads, or use your trip data to train AI models.
Who can see it
- Members of a trip see that trip’s information, including receipts and the payment details of its members. Emails of members are shown only to the trip’s organisers.
- Our administrators see account-level information only (name, email, plan, number of trips) — not trip contents.
- Service providers who run parts of the service for us: Railway (servers, database and file storage), Google (sign-in) and Resend (sending invite emails — it receives the recipient’s address, the trip name and the organiser’s name). Exchange rates are fetched from public rate services; no personal data is sent to them.
- Authorities, only where the law requires it.
How long we keep it
- Trip data stays until the trip’s owner deletes the trip.
- Deleted expenses and payments stay in the trip’s trash for 30 days, then are erased with their files.
- When you delete your account we erase your profile, sign-in sessions and payment details. Your name stays in trips you were part of, without your email, so other members’ balances stay correct.
Your rights
You may ask to be informed about, access, correct, object to processing of, or erase your personal data, and to receive a copy in a portable format. You can also complain to the National Privacy Commission (privacy.gov.ph). Email us at lmiautomatalabs@gmail.com and we’ll respond within 15 days.
Security
Data is encrypted in transit. Files are private and shown only through short-lived links after we check you are a member of the trip. Sessions can be ended by signing out.
Children
Tarashare is not directed at children under 13. A parent or guardian may add a child to a trip by name.
Changes
We’ll post changes here and, for significant ones, tell you in the app before they take effect.
Contact
Data Protection contact: LMI Automata Labs · lmiautomatalabs@gmail.com