Butter Agent / Legal / Privacy

Privacy Policy

What we collect, why we collect it, and how long we keep it. Written in plain English, reviewed before every release, and updated when something material changes.

Last updated June 16, 2026 Sections 13 Operator Peera Kerdkokaew
Important: This document is intended as a practical privacy notice for users and app-store review. It is not a substitute for advice from a qualified attorney in your jurisdictions (including Thailand PDPA, EU/UK GDPR, and U.S. state privacy laws).

1. Who we are

Butter Agent is operated by Peera Kerdkokaew ("we," "us," or "our").

Contact: contact@butteragent.io

This Privacy Policy describes how we collect, use, disclose, and protect information in connection with:

  • The Butter Agent mobile application (the "App"); and
  • Our public website (e.g., butteragent.io), if you visit it (the "Site").

If you do not agree with this Policy, please do not use the App or Site.

2. Information we collect

2.1 Account and profile information

When you sign in (for example with Google, Apple, or a one-time code sent to your email address), we receive and store information needed to create and maintain your account, which may include:

  • Name
  • Email address
  • Profile photo URL supplied by your sign-in provider (if available)

2.2 Trip and app content you provide

We process information you enter in the App in connection with trips and related features, such as destinations, dates, itineraries, expenses, settlement/payment-related records, member interactions, member avatars and receipt or trip photos you upload, and other trip content you choose to save.

2.3 Location information (permission-based)

If you grant permission, we may collect approximate or precise device location when you use features that request it (for example, to help with destination selection during trip creation). We use this for a one-time lookup at the moment you request it; we do not track your location in the background. You can change location permissions in your device settings.

2.4 Camera and photos (permission-based)

If you grant permission, the App can access your camera and photo library so you can add a member avatar or attach a receipt/trip photo. We only access photos you choose to capture or select.

2.5 Microphone and speech (permission-based)

If you grant permission, the App uses your microphone and speech recognition so you can dictate text (for example, for in-trip translation and voice quick-add). Audio is processed to produce a text transcription for the feature you invoked.

2.6 Push notification tokens

If you enable notifications, we store a device push token (via Firebase Cloud Messaging / Apple Push Notification service) so we can send you trip-related notifications such as reminders, payment, and settlement updates.

2.7 Device, diagnostic, and usage information

We collect limited device and diagnostic information and usage information to operate, secure, and improve the App — for example device type, operating system and app version, crash and error reports, and basic interaction/usage events. We use Google Analytics for Firebase and Firebase Crashlytics (provided by Google) for product analytics and crash reporting. We do not use this information to track you across apps or websites operated by other companies, and the App does not use the device advertising identifier (IDFA).

2.8 Website visitors (the Site)

If you visit our Site, our hosting and infrastructure providers may automatically collect standard server/connection logs (for example IP address, user agent, timestamps, and requested URLs) for security and reliability.

2.9 Cookies and similar technologies (the Site)

The Site may use cookies or similar technologies that are strictly necessary for the Site to function, or (if we add them) analytics cookies. If we use non-essential cookies where consent is required, we will provide a consent mechanism and update this Policy accordingly.

3. How we use information

We use information to:

  • Provide, operate, maintain, and improve the App and Site
  • Authenticate users and prevent fraud/abuse
  • Sync your data across devices when you use online features
  • Provide customer support and respond to inquiries
  • Comply with law and enforce our terms
  • Analyze usage in aggregated or de-identified form where permitted

4. Legal bases (EEA/UK users)

If applicable privacy laws require a "legal basis," we rely on one or more of the following:

  • Performance of a contract (providing the App you requested)
  • Legitimate interests (securing and improving the service, troubleshooting, analytics where permitted)
  • Consent (where required for optional processing, such as certain cookies or marketing communications, if offered)
  • Legal obligation

5. How we share information

We do not sell your personal information. We may share information with:

5.1 Service providers (processors)

We use trusted third-party providers to host infrastructure and provide core functionality, including:

  • Google Firebase / Google Cloud (including Firestore database, Cloud Storage, Cloud Messaging, Analytics for Firebase, and Crashlytics, plus related infrastructure used by our backend)
  • Google and Apple for authentication and related account services, as applicable
  • AI and content providers used to power trip-planning features — for example Google (Gemini) and web-search providers — which may process the trip details you submit to generate suggestions
  • Mapping and place providers (for example Apple Maps) used for geocoding and place lookups, which may process your search terms and approximate location
  • Flight and travel-data providers used to look up flight information you request

These providers may process data on our behalf subject to contractual safeguards.

5.2 Legal and safety

We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of users, the public, or us.

5.3 Business transfers

If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will provide notice as required by law.

6. International transfers

If you access the App or Site from outside Thailand, your information may be processed in Thailand and other countries where we or our providers operate (including countries that may have different data protection laws). Where required, we implement appropriate safeguards (such as contractual clauses) for cross-border transfers.

7. Retention and account deletion

We retain information as long as needed to provide the App and for legitimate business purposes (including security, dispute resolution, and legal compliance).

7.1 Deleting your account in the App

You can delete your account directly from within the App. Go to Profile → Help & Support → Delete account and follow the steps (you will be asked to re-confirm your identity). You do not need to email us to delete your account.

7.2 What happens when you delete

When you initiate deletion, your account is first deactivated and held for a short recovery grace period (approximately 30 days), during which you can sign back in to cancel the deletion. After the grace period, we delete or de-identify your personal information — including your profile details, uploaded photos, and device push tokens — except where limited retention is required by law or legitimate interests (for example, security logs for a limited period). Some content you contributed to trips shared with other members may remain visible to those members in de-identified form.

8. Security

We implement reasonable technical and organizational measures designed to protect information. No method of transmission or storage is 100% secure.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, or delete certain information; object to or restrict certain processing; withdraw consent where processing is consent-based; data portability (where applicable); and lodge a complaint with a supervisory authority (where applicable).

To exercise rights, contact contact@butteragent.io. We may need to verify your request.

Thailand PDPA: If you are in Thailand, you may have additional rights under the Personal Data Protection Act B.E. 2562 (2019).

EEA/UK: If you are in the European Economic Area or United Kingdom, you may have rights under GDPR/UK GDPR.

10. Children's privacy

The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

11. Third-party links and services

The App or Site may contain links to third-party websites or services. We are not responsible for their privacy practices. Review their policies before providing information.

12. Changes to this Policy

We may update this Policy from time to time. We will post the updated Policy with a new "Last updated" date. If changes are material, we will provide additional notice as required by law (for example, in-app notice or email).

13. Contact

Email: contact@butteragent.io

Or use the contact form on our site — we read every message.