Privacy Policy
Last updated: September 2026
1. Introduction
TripUs AI respects your privacy. This policy explains what information we collect and how we use it.
Who we are: TripUs AI is operated by Eyal Oron, a sole trader registered in Israel. You can reach us about anything in this policy at developer@tripus.ai.
Giving us your information is voluntary: no law requires you to give us any of it. If you choose not to, we cannot create your account or run the features that need it — for example, without an email address you cannot sign in, and without the trip details you type the AI cannot plan a trip. We use what you give us only for the purposes listed in section 3, share it only with the providers listed in section 4, and you can ask to see, correct or delete your information at any time (section 8).
2. Information We Collect
What you give us:
- Email address and password
- Profile info (name, nickname, phone)
- Profile picture (optional)
- Trip plans and preferences
- Messages in chats
- Travel preferences learned from AI conversations (food preferences, activity types, accommodation styles, budget range). These are stored to personalize future trip suggestions across sessions.
What we collect automatically:
- Device type and app version
- General location (city/country)
- App usage statistics (screen views, performance metrics)
- Anonymized crash reports and error tracking via Sentry (device info, stack traces — no personal data)
Location data (only when you allow):
- Precise location during active trips
- Only shared with people you choose
- Auto-deleted after 24 hours
3. How We Use Your Information
We use your data to:
- Create and manage your account
- Power AI trip planning features
- Connect you with friends and groups
- Send trip-related notifications
- Learn your travel preferences to improve future recommendations
- Improve the app
- Keep the app secure
We DON'T: Sell your personal data • Share your location without permission • Keep location history • Read your private messages
4. Who We Share With
Your data may be shared with:
- Friends and groups you choose
- Google (for maps and AI features)
- Supabase (our database provider)
- OneSignal (push notification delivery)
- RevenueCat (subscription management)
- Sentry (crash reporting — anonymized data only)
We NEVER share: Your personal info with advertisers • Your location without your consent • Your private messages
5. Your Location Privacy
Location sharing is:
- Always optional
- Only during active trips
- Controlled by you
- Temporary (auto-deletes in 24 hours)
You can:
- Choose precise, approximate, or city-level sharing
- Stop sharing anytime
- See who has access
- Delete location data immediately
Live trip web viewer: During a live trip, you can share a web link with others. Anyone with this link can view the live positions of trip participants in their browser. Web viewers' approximate location may also be visible to trip participants. The link becomes inactive when the live trip ends.
6. Trip Story (Public Trip Pages)
Trip Story is an optional feature that turns a trip into a public web page you can share by link.
Who can see it: anyone with the link — no TripUs account or login is needed to view a Trip Story page.
What's on the page:
- Photos and videos you choose to publish. Photos are resized for the web (up to 1600px, plus a smaller thumbnail) — published copies are not full-resolution or print quality.
- Any location (GPS) attached to a published photo is shown alongside it. Photos uploaded to the page from a phone's browser usually carry no location; original photos uploaded from a computer can.
- If you use on-device face grouping to name people in your photos, only the names you type are shown on the page. The face-matching data itself (face groupings, the images used for matching) stays on your device and is never uploaded or published. Faces you name are remembered only on that phone, for your account, to suggest names in your next story; you can clear them at any time in the app (“Forget the faces this phone learned”).
- Notes and tags added by you, your trip's contributors, or — if you allow it — visitors who only have the link.
Visitor contributions: these are on by default — people who only have the link can add notes and photo tags, and people with the invite link can upload their own photos to the page. The trip owner can switch visitor contributions off in the app, which makes the page view-only. Visitors choose the name shown with what they add; to limit abuse we keep only a one-way scrambled code (hash) of their network address, separately for each page. When someone searches for a place while tagging a photo, the search text is sent to Google Places. As the trip owner, you're responsible for what appears on your Trip Story page; email developer@tripus.ai to have any content removed.
How long it's kept: a free Trip Story page is publicly viewable for 7 days after publishing, after which the page becomes inactive; about 30 days later its photos, videos, notes, and tags are permanently deleted. Making it permanent (a one-time purchase, or an active Pro subscription) keeps it live until the trip owner deletes it.
Storage: Trip Story photos and videos are stored in our Supabase storage and served through time-limited links rather than as directly public files.
Your photos stay yours: we use the photos and videos you publish only to show your Trip Story page and run its features. We never sell them, never use them for advertising or marketing, and never use them to train AI models. Our storage provider (Supabase) holds them for us under a data-processing agreement and may not use them for anything else.
Face grouping is optional, needs your consent, and stays on your phone: it is off until you open “Who's in the photos?”, read what it does and tap “Find faces” — that tap is your consent, and you can withdraw it at any time by not using the feature and erasing what the phone learned. The phone finds faces and compares them on the device itself; face shapes, face measurements and face crops are never uploaded to us or to anyone else, and are never used for advertising, marketing or data mining. Only the names you choose to type are published. Faces you name are remembered on that phone, for your account only, to suggest names in your next story, and you can erase them at any time (“Forget the faces this phone learned”). Uninstalling the app also erases them. The only faces processed are in photos of your own Trip Story, and you should only name people who agree to it.
People shown in photos: if you appear in someone's Trip Story and want a photo, tag or your name removed, email developer@tripus.ai with the page link — you don't need a TripUs account.
Reports and safety: when you report content we keep your report, the content concerned and our decision for as long as needed to handle it and meet legal duties. If we find material that sexually exploits children, we preserve it and report it to the authorities as the law requires.
Abuse protection: to stop spam we keep a scrambled code (hash) made from a visitor's network (IP) address, separately for each page. It is pseudonymous personal data, is never shown to the page owner, and is kept only as long as the content it relates to.
Place search: when someone searches for a place while tagging a photo, the text they type is sent to Google Places to find matching places (results are “Powered by Google”; Google's privacy policy applies to that search).
Why we process this and your choices: we process Trip Story data to provide the page you asked for (our contract with you) and, for abuse protection and safety reports, for our legitimate interest in keeping the service safe and to meet legal duties. You are not legally required to give us any of it, but without it the Trip Story features cannot work. Trip Story data is stored with our providers Supabase and Netlify, which may process it outside your country (including in the EU and the USA) under data-protection agreements.
Children's photos: the trip owner is responsible for only publishing photos of children they have the right to share (for example, their own kids, or with a parent or guardian's permission).
Removing a page or its content: email developer@tripus.ai at any time to request removal of a shared Trip Story page, or of specific photos, tags, or notes on it.
7. Data Storage and Security
- All data is stored in Supabase's secure cloud infrastructure
- Your password is encrypted by Supabase Auth
- We use secure connections (HTTPS)
- Regular security updates
- Limited access to data
8. Your Rights
You can:
- Request a copy of your data by emailing developer@tripus.ai
- Delete your messages (tap and hold any message you sent)
- Delete your account (Settings → Delete Account). Your data enters a 30-day recovery window. Sign back in within 30 days to cancel deletion. After 30 days, all personal data is permanently and irreversibly deleted, including: profile information, trip data, messages, AI conversation history, preferences, and group memberships.
- Change privacy settings (Profile → Privacy)
- Opt out of notifications
- Correct wrong information
9. Children's Privacy
TripUs AI is for users 16 and older. We verify age during signup and don't knowingly collect data from children under 16. This age requirement ensures compliance with privacy laws including GDPR. Your date of birth is stored securely and used only for age verification. See Section 6 for additional rules about publishing children's photos on a Trip Story page.
10. Data Retention
- Account data: Kept until you delete your account
- Messages: You can delete individual messages anytime
- Location: Auto-deleted after 24 hours
- AI conversations: Kept for 90 days
- AI-learned preferences: Kept until you clear them (Profile → Privacy) or delete your account
- Account deletion: When you delete your account via Settings → Delete Account, your data enters a 30-day recovery window. After 30 days, all personal data is permanently and irreversibly deleted.
- Trip Story pages: see Section 6 for how long a shared trip page stays live.
11. International Users
Your data is stored in Supabase's cloud infrastructure and may be processed in various countries where our service providers (Supabase, Google) operate. By using TripUs AI, you consent to this transfer.
12. Changes to This Policy
We'll notify you of significant changes via email or in-app notification.
13. Cookies and Local Storage
Authentication cookies:
- Supabase authentication cookies for secure login
- Session tokens for maintaining your login state
- Secure, HttpOnly cookies that expire when you log out
Local device storage:
- App preferences (theme, language, notification settings)
- Cached data for offline functionality
- Message cache for faster loading
- On Trip Story web pages: your chosen language, the name you type, and gallery settings are kept in your browser only
Managing storage:
- Clear app data in your device settings
- Log out to clear authentication cookies
- Uninstall the app to remove all local data
14. Third-Party Services
We use these services to run TripUs AI:
- Supabase: Database, authentication, and file storage
- Google Maps: Location services and place information
- Google AI (Gemini): Trip planning assistance
- OneSignal: Push notification delivery (device tokens, notification preferences)
- RevenueCat: Subscription and payment management (purchase history, subscription status)
- Mapbox: Turn-by-turn navigation during live trips (route calculation, no personal data shared)
- Sentry: Crash reporting and error tracking (anonymized device info, stack traces — no personal data)
Each service has its own privacy policy. We only share the minimum data necessary with them.
15. AI Disclosure
TripUs AI uses Google Gemini for trip planning assistance. AI-generated suggestions are based on your inputs and learned preferences. The AI does not make decisions on your behalf — all trip plans, bookings, and actions are confirmed by you. When you chat with the AI assistant, your AI-chat messages, general location (city level), and learned travel preferences are sent to Google to generate responses; Google does not use this data to train its models. Messages between trip members are never sent to the AI.
16. Contact Us
Privacy questions? Email: developer@tripus.ai
Data requests: developer@tripus.ai
TripUs AI - We roam the world in conversational times.
