Summary

• We collect what a booking needs — your contact details, stay dates, and payment record. Nothing we don't use.
• Location stays on your terms — used only to sort hotels near you on the map. Deny it and the app still works.
• We never sell your data — hotels see only the details required to hold and honour your reservation.

01. Who we are

TuTuStay is a hotel booking platform operated by [LEGAL ENTITY NAME]. Guests use our mobile app to search, book, and manage stays; hotels use our manager dashboard to run their listings and reservations. This policy explains what personal information we collect across those products, why we collect it, and what control you have over it.

It applies to the TuTuStay guest app on iOS and Android, the hotel manager dashboard, and this website. When you book a room, the hotel you book with is a separate business that handles your details under its own policies — this document covers what we do, and Section 05 explains what we pass on to them.

02. What we collect

We collect information you give us directly, information generated as you use the app, and a small amount of technical data from your device.

Account detailsName, email address, phone number, and a password. If you sign up with Google, we receive your name, email, and profile photo from Google instead of a password.Profile detailsOptional details you add yourself, including your date of birth, profile photo, and preferred language and currency.Identity detailsLocal guests may provide NRC region and township; foreign guests may provide passport or ID number. Hotels are legally required to record guest identity at check-in, and supplying these in advance lets you skip that step at the front desk.Booking detailsThe hotel and room you selected, check-in and check-out dates, guest count, any coupon applied, special requests you type in, and your reservation status.Payment recordsAmount, currency, method, and payment status. We do not store full card numbers on our servers — card handling stays with our payment provider.Search historyThe searches you run in the app are saved to your account so you can return to recent ones. You can delete them individually or all at once, from the app.LocationApproximate device location, only while you are using map discovery or "hotels near me". Granted through your OS permission prompt and revocable at any time. See the Location-Based Services Policy.Photos and filesImages you choose to upload — a profile picture, or review photos. We only read the specific files you pick, never your whole library.Reviews and support messagesRatings and text you post about a stay, and anything you send us through in-app inquiries.Device and usage dataDevice model, OS version, app version, language, and a push notification token so we can deliver booking updates. The app also includes Google's Firebase Performance Monitoring, which automatically records app start time, screen rendering, and network request timings, and assigns your installation an identifier.

03. How we use it

• To create and secure your account, and to sign you in.
• To search hotels, show live availability, and take your reservation.
• To process payments, apply coupons, and issue refunds when a booking is cancelled.
• To send booking confirmations, check-in reminders, and status changes by push notification or email.
• To show hotels near you on the map, when you have granted location permission.
• To show you your recent searches.
• To answer your support inquiries and investigate problems you report.
• To detect fraud, abuse, and duplicate coupon redemption, and to keep the platform safe.
• To fix crashes and understand which features people actually use, so we can improve them.
• To meet legal obligations, including guest records that hotels and tax authorities require us to keep.

We do not use your personal information to build advertising profiles, and we do not sell it to anyone. Google Analytics on our website is switched off inside the app.

04. App permissions

The app asks for a permission only at the moment a feature needs it, and each one is optional. Declining a permission disables that feature — it never blocks you from booking.

LocationSorts hotels by distance and centres the discovery map on you. Deny it and you can still search by city name.Photos and storageLets you attach an image to your profile or a review. We access only the file you select.NotificationsDelivers booking confirmations, check-in reminders, and cancellation notices. Turn them off in your device settings at any time.

05. Who we share it with

We share personal information only where it is necessary to deliver the service you asked for.

The hotel you bookReceives your name, contact details, stay dates, guest count, room, special requests, and identity details where required by law. It needs these to hold your room and check you in. The hotel handles them under its own privacy practices.Payment providerProcesses your card or wallet transaction and returns a result to us. Card details go to them directly, not through our servers.Infrastructure providersCloud hosting, push notification delivery and performance monitoring (Google Firebase), and maps and directions (Google). They process data on our instructions and may not use it for their own purposes.Legal authoritiesWhere we are legally compelled to disclose, or where disclosure is needed to protect someone's safety or defend a legal claim.

We do not sell personal information, and we do not share it with advertisers or data brokers.

06. How long we keep it

• Account information is kept while your account is open. Deleting your account starts a 30-day window in which you can reactivate it; after that it is deleted or anonymised.
• Booking and payment records are retained after your stay to meet tax, accounting, and dispute-resolution obligations, which in most jurisdictions means several years.
• Search history is kept until you delete it, or until your account is closed.
• Reviews stay published under your display name unless you delete them.
• Crash and diagnostic logs are kept for a short window and then discarded.

When a retention period ends, we delete the data or strip it of anything that identifies you.

07. Your rights

You are in control of your information, and you can exercise any of the following at no cost.

• Access — ask for a copy of the personal information we hold about you.
• Correction — fix anything inaccurate, directly in the app under Personal Information.
• Deletion — close your account and have your data removed, except records we must keep by law.
• Withdraw consent — revoke location, photo, or notification permissions in your device settings at any time.
• Object or restrict — ask us to stop a particular use of your data.
• Complain — raise the matter with your local data protection authority if you are unhappy with our response.

To make a request, email us at support@tutustay.com. We will respond within 30 days, and may ask you to verify your identity first so we don't hand your data to someone else.

08. How we protect it

• Traffic between the app and our servers is encrypted in transit.
• Passwords are stored hashed — never in a form we or anyone else can read back.
• Your login token is held in your device's secure keystore (iOS Keychain, Android Keystore) and is only readable while the device is unlocked.
• Staff and hotel accounts get only the access their role requires, and sensitive fields are masked where full values aren't needed.
• Card numbers never touch our servers; they go straight to our payment provider.

No system is perfectly secure. If a breach ever affects your personal information, we will notify you and the relevant authority as the law requires.

09. Children

TuTuStay is not intended for children under 16, and we do not knowingly collect their personal information. If you believe a child has given us their details, contact us and we will delete the account.

10. Changes to this policy

We may update this policy as the product changes or the law does. The effective date at the top always reflects the current version. If a change materially affects your rights, we will tell you in the app or by email before it takes effect.

11. Contact

support@tutustay.com

Related: Terms of Service · Location-Based Services Policy · Cookie Policy