This Privacy Policy explains how Trippova handles your information when you use our mobile app. We aim to collect as little as possible — only what we need to plan trips for you and keep your data accessible across devices.
1. Information We Collect
Information you provide:
- Account info — your email address (and your name, if you sign in with Apple) when you create an account.
- Trip data — destination, dates, budget, travelers, interests, and other preferences you enter when planning.
- Expenses — amounts, categories, dates, and notes you log against a saved trip.
Information generated for you:
- AI-generated itineraries based on your inputs, saved with your account so you can reopen them.
- Hotel and restaurant recommendations from Google Places, scoped to your destination and budget.
Information we do NOT collect:
- Your real-time location.
- Your contacts, photos, or files on your device.
- Web cookies or cross-site tracking.
- Any data for advertising — we do not show ads.
2. How We Use Your Information
- To create and manage your account.
- To generate trip plans personalized to what you tell us.
- To remember your trips, expenses, and saved destinations across devices.
- To process subscription purchases (handled by Apple via RevenueCat).
- To respond to support requests you send us.
3. Third-Party Services
We use the following services to operate the app. Each has its own privacy policy:
- Supabase — stores your account, trips, plans, and expenses. Data is encrypted at rest and in transit.
- Apple Sign In — used only when you choose to sign in with your Apple ID.
- OpenRouter — routes AI itinerary generation requests to large language model providers (e.g. Google Gemini, OpenAI). We send your destination, budget tier, traveler type, pace, and interests; we do not share your email, name, or account ID.
- Google Maps Platform — geocoding and Places API for hotel and restaurant data. Only your destination text is sent.
- Open-Meteo — public weather forecast for the destination city. Only the city name (or its coordinates) is sent.
- RevenueCat — manages subscription state for Trippova Pro.
- Apple — processes payment for subscriptions according to App Store rules.
4. Data Retention
- Your account data is kept until you delete your account.
- Saved AI plans are kept until you delete the trip.
- Cached AI plan results may be kept on our servers for up to 24 hours to speed up repeat requests for the same destination. These caches are anonymous and not tied to your account.
5. Your Rights
- Access — sign in to see all your data anytime.
- Delete a trip — long-press a trip card on the Trips tab.
- Delete your entire account — Profile → Delete account. This permanently removes your account and all your data, immediately. There is no recovery.
- Export — email us at support@trippova.online and we will send your trips and expenses as a JSON file within 30 days.
6. Children's Privacy
Trippova is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has used our app, please contact us and we will delete their account.
7. Security
- All network traffic uses HTTPS.
- Trip data is protected by row-level security — only you can read your own trips and plans.
- API keys for AI and Maps services are kept on our servers, never embedded in the app.
- We do not store your password — authentication is handled by Supabase using industry-standard hashing, or by Apple Sign In.
8. International Transfers
Our servers and the third-party services we use may be located outside your country (e.g., the United States or the European Union). By using the app, you consent to your data being transferred internationally.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top changes when we do. Significant changes will be highlighted in the app. Continued use of the app after a change means you accept the updated policy.
10. Contact Us
Privacy questions or data requests? Email support@trippova.online.