TripUs AI

Privacy Policy

Last updated: September 2026

1. Introduction

TripUs AI respects your privacy. This policy explains what information we collect and how we use it.

Who we are: TripUs AI is operated by Eyal Oron, a sole trader registered in Israel. You can reach us about anything in this policy at developer@tripus.ai.

Giving us your information is voluntary: no law requires you to give us any of it. If you choose not to, we cannot create your account or run the features that need it — for example, without an email address you cannot sign in, and without the trip details you type the AI cannot plan a trip. We use what you give us only for the purposes listed in section 3, share it only with the providers listed in section 4, and you can ask to see, correct or delete your information at any time (section 8).

2. Information We Collect

What you give us:

What we collect automatically:

Location data (only when you allow):

3. How We Use Your Information

We use your data to:

We DON'T: Sell your personal data • Share your location without permission • Keep location history • Read your private messages

4. Who We Share With

Your data may be shared with:

We NEVER share: Your personal info with advertisers • Your location without your consent • Your private messages

5. Your Location Privacy

Location sharing is:

You can:

Live trip web viewer: During a live trip, you can share a web link with others. Anyone with this link can view the live positions of trip participants in their browser. Web viewers' approximate location may also be visible to trip participants. The link becomes inactive when the live trip ends.

6. Trip Story (Public Trip Pages)

Trip Story is an optional feature that turns a trip into a public web page you can share by link.

Who can see it: anyone with the link — no TripUs account or login is needed to view a Trip Story page.

What's on the page:

Visitor contributions: these are on by default — people who only have the link can add notes and photo tags, and people with the invite link can upload their own photos to the page. The trip owner can switch visitor contributions off in the app, which makes the page view-only. Visitors choose the name shown with what they add; to limit abuse we keep only a one-way scrambled code (hash) of their network address, separately for each page. When someone searches for a place while tagging a photo, the search text is sent to Google Places. As the trip owner, you're responsible for what appears on your Trip Story page; email developer@tripus.ai to have any content removed.

How long it's kept: a free Trip Story page is publicly viewable for 7 days after publishing, after which the page becomes inactive; about 30 days later its photos, videos, notes, and tags are permanently deleted. Making it permanent (a one-time purchase, or an active Pro subscription) keeps it live until the trip owner deletes it.

Storage: Trip Story photos and videos are stored in our Supabase storage and served through time-limited links rather than as directly public files.

Your photos stay yours: we use the photos and videos you publish only to show your Trip Story page and run its features. We never sell them, never use them for advertising or marketing, and never use them to train AI models. Our storage provider (Supabase) holds them for us under a data-processing agreement and may not use them for anything else.

Face grouping is optional, needs your consent, and stays on your phone: it is off until you open “Who's in the photos?”, read what it does and tap “Find faces” — that tap is your consent, and you can withdraw it at any time by not using the feature and erasing what the phone learned. The phone finds faces and compares them on the device itself; face shapes, face measurements and face crops are never uploaded to us or to anyone else, and are never used for advertising, marketing or data mining. Only the names you choose to type are published. Faces you name are remembered on that phone, for your account only, to suggest names in your next story, and you can erase them at any time (“Forget the faces this phone learned”). Uninstalling the app also erases them. The only faces processed are in photos of your own Trip Story, and you should only name people who agree to it.

People shown in photos: if you appear in someone's Trip Story and want a photo, tag or your name removed, email developer@tripus.ai with the page link — you don't need a TripUs account.

Reports and safety: when you report content we keep your report, the content concerned and our decision for as long as needed to handle it and meet legal duties. If we find material that sexually exploits children, we preserve it and report it to the authorities as the law requires.

Abuse protection: to stop spam we keep a scrambled code (hash) made from a visitor's network (IP) address, separately for each page. It is pseudonymous personal data, is never shown to the page owner, and is kept only as long as the content it relates to.

Place search: when someone searches for a place while tagging a photo, the text they type is sent to Google Places to find matching places (results are “Powered by Google”; Google's privacy policy applies to that search).

Why we process this and your choices: we process Trip Story data to provide the page you asked for (our contract with you) and, for abuse protection and safety reports, for our legitimate interest in keeping the service safe and to meet legal duties. You are not legally required to give us any of it, but without it the Trip Story features cannot work. Trip Story data is stored with our providers Supabase and Netlify, which may process it outside your country (including in the EU and the USA) under data-protection agreements.

Children's photos: the trip owner is responsible for only publishing photos of children they have the right to share (for example, their own kids, or with a parent or guardian's permission).

Removing a page or its content: email developer@tripus.ai at any time to request removal of a shared Trip Story page, or of specific photos, tags, or notes on it.

7. Data Storage and Security

8. Your Rights

You can:

9. Children's Privacy

TripUs AI is for users 16 and older. We verify age during signup and don't knowingly collect data from children under 16. This age requirement ensures compliance with privacy laws including GDPR. Your date of birth is stored securely and used only for age verification. See Section 6 for additional rules about publishing children's photos on a Trip Story page.

10. Data Retention

11. International Users

Your data is stored in Supabase's cloud infrastructure and may be processed in various countries where our service providers (Supabase, Google) operate. By using TripUs AI, you consent to this transfer.

12. Changes to This Policy

We'll notify you of significant changes via email or in-app notification.

13. Cookies and Local Storage

Authentication cookies:

Local device storage:

Managing storage:

14. Third-Party Services

We use these services to run TripUs AI:

Each service has its own privacy policy. We only share the minimum data necessary with them.

15. AI Disclosure

TripUs AI uses Google Gemini for trip planning assistance. AI-generated suggestions are based on your inputs and learned preferences. The AI does not make decisions on your behalf — all trip plans, bookings, and actions are confirmed by you. When you chat with the AI assistant, your AI-chat messages, general location (city level), and learned travel preferences are sent to Google to generate responses; Google does not use this data to train its models. Messages between trip members are never sent to the AI.

16. Contact Us

Privacy questions? Email: developer@tripus.ai

Data requests: developer@tripus.ai

TripUs AI - We roam the world in conversational times.