Privacy Policy

1. Information We Collect

Account information

When you sign in with Google, we receive your name, email address, and profile picture. This is used to identify your account and personalise your experience.

Trip and booking data

Any journeys, bookings, expenses, and expense groups you create are stored in your account. This data is yours — we store it to power the app's core features.

Google Calendar data (optional)

If you connect Google Calendar, we request read-only access to your calendar solely to detect and import travel-related events (flights, hotels, activities) into your trips. We access only the event data needed to identify travel — and only structured trip data (titles, dates, times, locations) is saved to your account. We do not modify your calendar, use it for any other purpose, or share your calendar data with third parties.

If you disconnect Google Calendar, previously imported events remain in your account as part of your trip. No new events will be read after disconnection. Calendar API calls are logged server-side for error monitoring only; these logs are retained for 30 days and contain no event content. You can revoke access at any time via your Google Account settings.

Subscriptions and payment information

TripTrekr offers an optional paid subscription ("Pro"). On iOS, subscriptions are purchased through Apple's In-App Purchase system — Apple processes your payment, and we never receive or store your card details. On the web, payments are processed by Stripe; again, we do not store card details, and Stripe handles payment data under its own PCI-compliant privacy policy.

We use RevenueCat to manage subscription status and validate purchases across platforms. RevenueCat receives your purchase history and a pseudonymous app user identifier (and may receive a device identifier) in order to determine whether your subscription is active. We retain your subscription status (active or expired, plan, and renewal date) to unlock Pro features.

Location data

If you grant location permission, TripTrekr uses your device location to find restaurants and things to do near you. Precise location is sent to our servers and to our maps and places providers only to fulfil that request, and is not stored against your account. Approximate (coarse) location may also be inferred from your IP address by our analytics provider.

Photos

If you add highlight photos to a trip, the photos you choose — via your camera or photo library — are uploaded to your account so they appear in your trip. We access only the photos you explicitly select.

Usage, analytics, and device data

We use Google Firebase Analytics to understand how the app is used (for example, which features are opened) so we can improve it. This may include product-interaction events, a device or app-instance identifier, and approximate location derived from your IP address. We do not use this data for advertising, and we do not track you across other companies' apps or websites.

2. How We Use Your Information

• To provide and operate the TripTrekr service
• To sync and display your travel events from your Google Calendar (only if you opt in)
• To show you restaurants and things to do near your location (only if you grant permission)
• To process subscription payments via Apple In-App Purchase (iOS) or Stripe (web), and to validate subscription status via RevenueCat
• To send you service-related emails (e.g. trip invitations from other users)
• To understand usage and improve app features and fix bugs using analytics data
• To operate the referral programme (tracking referral codes and rewards)

We will never sell your personal data or use it for advertising purposes.

3. Google API Services

TripTrekr's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, Google Calendar data obtained via Google APIs is used only to import travel events into your trips at your request. It is not transferred to third parties, used to serve advertisements, or used for purposes beyond the feature you explicitly enabled.

4. Data Sharing

We share data only in these limited circumstances:

• Trip collaborators: When you invite someone to a trip, they can see the trip details you share with them, based on the role you assign.
• Service providers: Firebase (Google) for database, authentication, and analytics; Apple and Stripe for subscription payments; RevenueCat for subscription management; and mapping and places providers to return nearby results. These providers have their own privacy policies and process data only as needed to provide their services.
• Legal requirements: If required by law or to protect our rights or users' safety.

5. Data Storage and Security

Your data is stored in Google Firebase (Firestore), which uses industry-standard encryption at rest and in transit. Access is controlled by Firestore security rules so that only you (and those you explicitly invite) can access your trip data.

Firebase Authentication secures your sign-in. We do not store passwords — authentication is handled entirely by Google.

6. Data Retention

Your account data (trips, bookings, expenses) is retained for as long as your account is active. Travel events imported from Google Calendar are retained as part of your trip until you delete that trip or your account — they are not removed if you disconnect Calendar.

If you wish to delete your account and all associated data, please contact us at the email below and we will process the deletion within 30 days.

7. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Revoke Google Calendar access at any time via your Google Account settings

To exercise any of these rights, contact us at triptrekr@gmail.com.

8. Children's Privacy

TripTrekr is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this privacy policy from time to time. When we make material changes, we will update the "Last updated" date above. Continued use of the app after changes constitutes acceptance of the updated policy.