Privacy Policy

Last updated: July 4, 2026

1. Information We Collect

When you use Tripova, we collect the following types of information:

Account information: Your email address, display name, and profile photo when you sign in with Apple or Google.
Trip data: Destinations, dates, activities, restaurants, flights, hotels, and other itinerary details you create or import.
Location data: With your permission, approximate location to show nearby destinations and personalise recommendations. We do not track your location in the background.
Photos: Trip photos you upload and boarding pass images you scan. These are stored securely in Firebase Storage.
Emails you forward: If you forward a booking confirmation email to your personal Tripova import address, we process that email to extract flight and hotel details and add them to your trip.
Push notification tokens: If you enable notifications, we store a device token (Firebase Cloud Messaging) so we can deliver trip reminders and alerts to your device.
Usage data: Analytics to help us improve the app (Firebase Analytics, including screen views and feature usage) and crash reports. Crash reports are keyed to an internal user ID only and never include your email address.

2. How We Use Your Information

Generate AI-powered itineraries and recommendations.
Extract flight and hotel details from booking emails you forward and boarding passes you scan.
Display place photos, ratings, and details for your trips.
Send trip reminders and travel alerts you have opted in to.
Enable collaboration features such as shared trips and group planning.
Improve our services through aggregated, anonymised analytics.

3. Third-Party Services

Tripova uses the following third-party services:

Firebase (Google): Authentication, database, cloud storage, push notifications, analytics (Firebase Analytics), and crash reporting (Crashlytics).
Sentry: Crash and error reporting. Reports are keyed to an internal user ID only; email addresses are removed before reports are sent.
Google Places API: Place details, ratings, and real place photos (photos are shown to Plus and Pro subscribers).
Google Gemini AI: Processes your trip details (destination, dates, preferences) to generate itineraries and recommendations.
Anthropic Claude: Automated quality evaluation of AI-generated itineraries.
Resend: Sends transactional email and receives the booking confirmation emails you choose to forward for import.
Foursquare, HERE, TomTom: Additional place details used to enrich itineraries.
Pexels: Free stock photos for place imagery.
Wikipedia / Wikimedia & Mapillary: Free place photos and street-level imagery.
Apple App Store: Subscription purchases are made through Apple In-App Purchase and processed entirely by Apple. We never receive or store your payment card details.

Each service has its own privacy policy. We encourage you to review them.

4. Data Storage and Security

Your data is stored on Google Cloud (Firebase) servers. We use industry-standard encryption in transit (TLS) and at rest. Access to your data is restricted by Firebase Security Rules - only you (and collaborators you invite) can access your trips.

5. Data Retention and Deletion

We retain your data for as long as your account is active. You can delete your account and all associated data at any time from the app settings. Upon deletion, your data is permanently removed from our servers within 30 days.

6. Your Rights

You have the right to:

Access and export your personal data.
Correct inaccurate information.
Delete your account and all associated data.
Opt out of non-essential communications.

7. Children's Privacy

Tripova is not directed at children under 13. We do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes through the app or by email.

9. Contact Us

If you have questions about this privacy policy, please contact us at support@tripova.net.