App Privacy Policy

Overview

This policy covers the TripTribe mobile app (iOS and Android), currently in early access. It explains what information the app collects, why, how it's used, stored, and shared, and — just as importantly — what we deliberately do not collect.

This website (triptribe.org) has its own, separate Privacy Policy covering the marketing site itself (contact form, early-access signups). If you're only visiting this website and haven't created a TripTribe account, that policy — not this one — applies to you.

Who operates TripTribe

The TripTribe app is operated by Zilbehar Ajdari, registered at Cellopek, 1200 Tetovo, North Macedonia. For the purposes of applicable data-protection law, this entity is the data controller for the information described in this policy.

Information we collect

When you create an account, we collect your email address, a password (which we store as a one-way cryptographic hash, never in plain text), a display name, your locale and timezone, the date you accepted these terms, and the date you confirmed you meet our minimum age requirement (see "Eligibility" in the App Terms of Service) — we record only that confirmation, not your date of birth. You can optionally add a profile photo.

We generate a random device identifier (not tied to your device's hardware) to keep you signed in across app restarts and to manage your login sessions securely.

When you create or join a trip, we store the trip details you and your trip's other members enter — names, destinations, dates, budgets, itinerary items (including any notes and the resolved location of each place), expenses and notes, an in-trip activity feed, and any documents or photos uploaded to the trip. This information is visible to the other members of that trip — it's a collaborative planning tool, not private storage.

If you use TripTribe's travel-preference feature ("Travel DNA"), we store your budget range, travel pace, luxury preference, interests, transport preference, and — optionally — dietary restrictions you choose to enter, so we can personalize itinerary and destination suggestions for your group.

If you invite someone to a trip, we store the email address you provide for them. Invitations are shared as a link — we don't send the invitee an email ourselves.

If you subscribe to TripTribe Pro, purchases are processed by the Apple App Store or Google Play, not by us. We use RevenueCat to manage subscriptions and receive your subscription status, product identifier, and renewal/expiration information from it. We never receive or store your payment card number or billing address — Apple/Google and RevenueCat handle that directly.

We temporarily process your IP address to rate-limit and block automated abuse of the app's public endpoints (login, registration, invitations, etc.).

If you report another member, a piece of trip content, or an AI-generated suggestion, we store your report — the reason you selected, any details you add, and a copy of the reported content as it existed at that moment — together with your identity as the reporter, so we can review it. If you block another member, we store that you blocked them; blocking stops future trip invitations between the two of you but does not remove either of you from a trip you already share.

What we don't collect

The TripTribe app does not access your device's live location, camera, contacts, or microphone, and does not use push notifications, advertising identifiers, or any analytics or crash-reporting SDK. We don't build an advertising profile of you, and we don't sell or rent personal information to anyone.

How we use your information

We use the information described above to:

• Provide, operate, and secure the TripTribe app
• Create and manage your account, verify your email, and let you recover a forgotten password
• Let you and the people you invite collaborate on a shared trip
• Generate AI-assisted itinerary and destination suggestions, when you use that feature (see "AI features" below)
• Process and manage your TripTribe Pro subscription
• Review and act on reports about other members, trip content, or AI-generated suggestions, and let you block members you no longer want to interact with
• Detect, investigate, and prevent abuse, fraud, and automated attacks on the app's endpoints
• Respond to support requests about your account

We never send your app account data to analytics or advertising tools.

AI features (Google Gemini)

Certain TripTribe Pro features generate AI-assisted itinerary and destination suggestions using Google's Gemini model. When you use these features, we send Gemini a summary of your trip (destination, dates, the number of members, and the names, times and categories of the places in the plan being personalized) and an aggregated summary of your group's travel preferences — this summary intentionally excludes member names and account identifiers, though it can include preference text (such as dietary notes) pooled across the group.

AI-generated suggestions can be inaccurate, outdated, or unsuitable for your trip. Treat them as a starting point, not verified travel or safety advice, and confirm important details (opening hours, prices, entry requirements) independently.

If an AI-generated suggestion is offensive or inappropriate, you can report it directly from the app, without needing to leave the app or contact us separately.

Legal basis for processing

Where data-protection law that requires a stated legal basis applies to you (for example, the EU/EEA or UK GDPR), we rely on the following bases:

• Contract — to create and operate your TripTribe account and provide the trip-planning features you sign up for, including subscription management for TripTribe Pro.
• Consent — for optional profile information like your photo or dietary preferences. You can withdraw consent at any time.
• Legitimate interests — for responding to support requests about your account, and for temporarily processing IP addresses to rate-limit and block automated abuse of the app's endpoints. We consider these interests proportionate and not overridden by your rights.

We do not knowingly process special-category data, and we do not make solely automated decisions about you with legal or similarly significant effects.

Service providers

We use a small number of infrastructure and service providers, each acting as a processor on our behalf under its own terms:

• Cloudflare — stores app document and photo uploads (Cloudflare R2), and also sits in front of the app's servers and this website as a network proxy, so requests the app makes to our servers (including your IP address and the content of the request, in transit over HTTPS) pass through Cloudflare's network. See Cloudflare's privacy policy.
• Resend — delivers the app's transactional emails (account verification, password reset, account deletion). See Resend's privacy policy.
• RevenueCat — manages TripTribe Pro subscription status. See RevenueCat's privacy policy.
• Google — provides the Gemini model used for AI itinerary/ destination suggestions, and (optionally, for some itinerary locations) the Places API used to resolve place details. See Google's privacy policy.
• Apple App Store / Google Play — process TripTribe Pro purchases directly; we never see your payment card details.
• OpenStreetMap contributors and Wikimedia — provide the default, free map/place data and destination imagery used in itineraries. Lookups our servers make to them are based on place names and coordinates, not your personal account data.

Requests your device makes directly. Some content is loaded by the app straight from a third party's servers, not through ours, and the subscription library built into the app also talks to its provider directly:

• RevenueCat (api.revenuecat.com) — the subscription library in the app contacts RevenueCat from your device to show the available plans, complete a purchase and read your subscription status. It identifies you by your TripTribe account number, not your email address, and RevenueCat also receives your device's IP address and standard device and app details, as described in RevenueCat's own policy linked above.
• OpenFreeMap (tiles.openfreemap.org) supplies the map style and map tiles shown on an itinerary item's location preview. See OpenFreeMap's privacy policy.
• Wikimedia (upload.wikimedia.org) hosts the destination photos shown in the app. See the Wikimedia Foundation's privacy policy.

Like any network request, these reach those services with your device's IP address and standard request details (such as the app's user agent). We do not include your name, email address, or sign-in token in the OpenFreeMap and Wikimedia requests — the map request identifies only the area being drawn, and the image request only the photo. Because the app contacts these services directly, what they record and how they handle it is governed by their own policies, not ours, and we do not control it.

Apart from those direct requests, the processors listed above handle your information only to provide their service to us under their own terms, and we do not sell or rent your information or share it with anyone else.

International data transfers

The providers listed above operate global infrastructure, so your information may be processed in a country other than the one you're in, including the United States. Where that transfer requires a specific legal safeguard (for example, Standard Contractual Clauses for transfers out of the EU/EEA or UK), we rely on the mechanisms each provider makes available under its own data processing terms.

Data retention and deletion

You can delete your TripTribe account at any time from the app's settings (password re-authentication required), or, if you no longer have access to the app, from our account-deletion page using the email address on your account. Deleting your account removes your private data: your email, display name, password, profile photo, and travel preferences. If you still own an active trip, you'll need to transfer ownership or delete it first — we'll tell you if this applies before your account is deleted.

Trip content you created together with other members — shared itinerary items, expenses, activity history, and documents you uploaded to a trip — is not deleted, because doing so would corrupt the shared trip record for everyone else in the group. Instead, it is kept and re-attributed to an anonymized "Deleted User" placeholder that can no longer be linked back to you.

Subscription and billing history (for example, which product you purchased and when) is retained after account deletion for financial record-keeping. It is no longer linked to any account you can access.

Reports (and the copy of the reported content kept with each one) and blocks are safety records. They are kept for moderation and abuse-prevention purposes even after you or the person you reported delete an account.

Security

We use industry-standard technical measures to protect your information — encryption in transit (HTTPS/TLS everywhere), one-way hashing of passwords and session/invitation tokens (never stored in plain text), rate limiting on public endpoints, and malware scanning of uploaded documents and photos before they're stored. No method of transmission or storage is completely secure, so we can't guarantee absolute security, but we work to keep your information appropriately protected.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of the information we hold about you, to object to or restrict how we use it, to withdraw consent you previously gave us, and to lodge a complaint with your local data-protection authority.

You can delete your account directly from the app's settings at any time. For anything else — including a correction, an export, or a question about data a trip you're no longer part of retains — contact us via the privacy request form or by emailing support@triptribe.org. We may need to verify your identity before acting on a request — we'll never ask for a password or a copy of a government ID through that form.

Children's privacy

The TripTribe app is not directed at children, and we do not knowingly collect information from anyone under 18 years of age. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

If this policy changes, we'll update the "last updated" date above. Material changes will be reflected here before they take effect.

Contact

Questions about this policy? Email support@triptribe.org.