Privacy Policy

Last updated: April 2026

1. Introduction

TripUs AI respects your privacy. This policy explains what information we collect and how we use it.

2. Information We Collect

What you give us:

• Email address and password
• Profile info (name, nickname, phone)
• Profile picture (optional)
• Trip plans and preferences
• Messages in chats
• Travel preferences learned from AI conversations (food preferences, activity types, accommodation styles, budget range). These are stored to personalize future trip suggestions across sessions.

What we collect automatically:

• Device type and app version
• General location (city/country)
• App usage statistics (screen views, performance metrics)
• Anonymized crash reports and error tracking via Sentry (device info, stack traces — no personal data)

Location data (only when you allow):

• Precise location during active trips
• Only shared with people you choose
• Auto-deleted after 24 hours

3. How We Use Your Information

We use your data to:

• Create and manage your account
• Power AI trip planning features
• Connect you with friends and groups
• Send trip-related notifications
• Learn your travel preferences to improve future recommendations
• Improve the app
• Keep the app secure

4. Who We Share With

Your data may be shared with:

• Friends and groups you choose
• Google (for maps and AI features)
• Supabase (our database provider)
• OneSignal (push notification delivery)
• RevenueCat (subscription management)
• Sentry (crash reporting — anonymized data only)

5. Your Location Privacy

Location sharing is:

• Always optional
• Only during active trips
• Controlled by you
• Temporary (auto-deletes in 24 hours)

You can:

• Choose precise, approximate, or city-level sharing
• Stop sharing anytime
• See who has access
• Delete location data immediately

Live trip web viewer: During a live trip, you can share a web link with others. Anyone with this link can view the live positions of trip participants in their browser. Web viewers' approximate location may also be visible to trip participants. The link becomes inactive when the live trip ends.

6. Data Storage and Security

• All data is stored in Supabase's secure cloud infrastructure
• Your password is encrypted by Supabase Auth
• We use secure connections (HTTPS)
• Regular security updates
• Limited access to data

7. Your Rights

You can:

• Request a copy of your data by emailing developer@tripus.ai
• Delete your messages (tap and hold any message you sent)
• Delete your account (Settings → Delete Account). Your data enters a 30-day recovery window. Sign back in within 30 days to cancel deletion. After 30 days, all personal data is permanently and irreversibly deleted, including: profile information, trip data, messages, AI conversation history, preferences, and group memberships.
• Change privacy settings (Profile → Privacy)
• Opt out of notifications
• Correct wrong information

8. Children's Privacy

TripUs AI is for users 16 and older. We verify age during signup and don't knowingly collect data from children under 16. This age requirement ensures compliance with privacy laws including GDPR. Your date of birth is stored securely and used only for age verification.

9. Data Retention

• Account data: Kept until you delete your account
• Messages: You can delete individual messages anytime
• Location: Auto-deleted after 24 hours
• AI conversations: Kept for 90 days
• AI-learned preferences: Kept until you clear them (Profile → Privacy) or delete your account
• Account deletion: When you delete your account via Settings → Delete Account, your data enters a 30-day recovery window. After 30 days, all personal data is permanently and irreversibly deleted.

10. International Users

Your data is stored in Supabase's cloud infrastructure and may be processed in various countries where our service providers (Supabase, Google) operate. By using TripUs AI, you consent to this transfer.

11. Changes to This Policy

We'll notify you of significant changes via email or in-app notification.

12. Cookies and Local Storage

Authentication cookies:

• Supabase authentication cookies for secure login
• Session tokens for maintaining your login state
• Secure, HttpOnly cookies that expire when you log out

Local device storage:

• App preferences (theme, language, notification settings)
• Cached data for offline functionality
• Message cache for faster loading

Managing storage:

• Clear app data in your device settings
• Log out to clear authentication cookies
• Uninstall the app to remove all local data

13. Third-Party Services

We use these services to run TripUs AI:

• Supabase: Database, authentication, and file storage
• Google Maps: Location services and place information
• Google AI (Gemini): Trip planning assistance
• OneSignal: Push notification delivery (device tokens, notification preferences)
• RevenueCat: Subscription and payment management (purchase history, subscription status)
• Mapbox: Turn-by-turn navigation during live trips (route calculation, no personal data shared)
• Sentry: Crash reporting and error tracking (anonymized device info, stack traces — no personal data)

Each service has its own privacy policy. We only share the minimum data necessary with them.

14. AI Disclosure

TripUs AI uses Google Gemini for trip planning assistance. AI-generated suggestions are based on your inputs and learned preferences. The AI does not make decisions on your behalf — all trip plans, bookings, and actions are confirmed by you.

15. Contact Us

Privacy questions? Email: developer@tripus.ai

Data requests: developer@tripus.ai

TripUs AI - We roam the world in conversational times.