Privacy Policy

• Account information such as your email, name, and optional profile photo.
• Trip preferences, destinations, dates, generated plans, and saved-trip activity.
• When you choose to use foreground location features in the mobile app, approximate or precise device location used to center maps and improve route context. TripperTip does not request background location access.
• Notification preferences, scheduled-reminder details, push-notification tokens, installation identifiers, device platform, time zone, locale, and notification permission status used to provide requested trip reminders.
• A persistent installation identifier or derived device hash used to enforce the one-time guest trial and prevent abuse.
• Customer-review information such as a public display name, star rating, review title and text, moderation status, and whether the account has created a saved itinerary.
• Trip balance, plan type, purchase status, transaction history, and billing-support records.
• For web purchases, Stripe customer, Checkout Session, PaymentIntent, Charge, Price, Product, invoice, refund, dispute, and webhook event identifiers; order amount, currency, tax, status, timestamps, and hosted receipt or invoice links.
• For verified mobile purchases, app-store platform, product and transaction identifiers, receipt environment, purchased tier, and Trip quantity.
• When you enter through a partner QR link: the partner and scan identifiers, a pseudonymous browser identifier, the permanent partner attribution attached to your account, eligible discounted purchases, refunds, disputes, and the resulting partner commission records.
• When you apply as a business partner: business and contact details, location count, website or social profile, preferred payout method and destination identifier (for a bank transfer, only the bank name and account-holder name), application message, accepted program terms, application and payout-request review status and notes, partner profile, commission ledger, payout requests and batches, transfer method and reference, and receipt link when provided. The public application does not ask for account or routing numbers, IBANs, SWIFT/BIC codes, card details, online-banking passwords or PINs, recovery codes, or one-time security codes.
• Technical and usage information needed to secure, maintain, and improve the service.
• If you allow it on a Premium itinerary map, your browser provides your foreground location and estimated accuracy so the map can show and recenter on you. TripperTip does not save this live location to your account or continue tracking after the map session ends.
• When marketing measurement is allowed: the applicable permission basis and time, any explicit-consent record, Meta and TikTok browser or click identifiers, campaign source page, referrer origin and path, IP address, user agent, purchased tier, order-based event identifier, confirmed value, and currency.

• Provide personalized travel planning and destination recommendations.
• Show your current position on a Premium itinerary map while that map is open and location access is enabled.
• Authenticate accounts, save itineraries, and manage trips and billing history.
• Display optional foreground location on maps and provide route-aware trip features when you enable location access.
• Schedule requested local trip reminders, register devices for enabled push notifications, and respect notification preferences.
• Prevent abuse, diagnose errors, and improve product reliability.
• Send essential account, verification, and support communications.
• Verify review eligibility, moderate submitted reviews, and publish approved reviews without displaying the customer’s email address.
• Apply an eligible partner discount, measure partner scans and registrations, calculate commission on eligible purchases, reconcile refunds and disputes, and show aggregate performance to the partner without exposing customer contact information.
• Review business partner applications, verify eligibility, activate partner profiles, communicate application decisions, and maintain auditable commission and payout records.
• Where permitted by the applicable regional setting or your choice, measure Meta and TikTok advertising performance, attribute checkout and purchase activity, prevent duplicate conversion reporting, and improve campaign effectiveness.

Payments made through TripperTip web checkout are processed by Stripe. Stripe may collect and process payment, billing, device, and fraud-prevention information under its own privacy policy. Stripe sends payment and refund receipts to the account email and may provide hosted receipt or paid-invoice links. Mobile-app purchases may instead be processed by Apple or Google under the applicable store privacy terms.

TripperTip does not store complete payment-card numbers or card security codes. The application stores the billing and purchase records described above so it can provision Trips, display account history, prevent duplicate fulfillment, reconcile refunds and disputes, and assist with billing questions.

We use trusted providers for authentication, hosting, databases, email delivery, maps, route and public-transit data, weather data, place information, AI-assisted planning, app-store billing, and notification delivery. Trip locations and transport preferences may be sent to mapping providers to calculate Premium route ordering and transport legs. When you use the Premium location control, your browser and the displayed map provider process the coordinates needed to show your current position; TripperTip does not persist those live coordinates. When you enable mobile notifications, Google Firebase Cloud Messaging and Expo notification services may process a push token, project and app identifiers, device platform, and notification-delivery information. Google Play processes Android purchases and associated transaction identifiers under its own privacy terms.

The Google tag loads with analytics and advertising storage initially denied and may send limited cookieless consent and configuration signals. Optional analytics remains off in prior opt-in regions until you allow it; it may be enabled after a category-specific regional check in reviewed opt-out locations unless you opt out or send a recognized Global Privacy Control signal. Google advertising features remain disabled.

Meta and TikTok are evaluated independently from analytics. When marketing measurement is enabled through its applicable regional setting or your explicit choice, they process limited page, campaign, browser/device, checkout, and confirmed-purchase data through Meta Pixel and Conversions API or TikTok Pixel and Events API. TripperTip uses an internal order identifier to deduplicate browser and server purchase events. We do not intentionally send either provider payment-card information, email addresses, or free-text trip details. Providers process information under their own privacy terms and security obligations.

Our Cookie and Browser Storage Policy lists the current regional defaults and describes the relevant technologies, purposes, providers, and typical durations.

We retain account and trip data while your account is active. Deleting your account removes the TripperTip authentication account and account-linked profile, sessions, saved itineraries, reviews, internal credit and order records, verified mobile purchase records, and other records configured to be deleted with the account.

Payment processors and app stores retain their own transaction records under their privacy policies. We may retain limited support correspondence, transaction evidence, or security and fraud-prevention records when reasonably necessary for tax, accounting, chargeback, dispute, legal, or abuse-prevention obligations. Retained information is restricted to those purposes and removed or de-identified when no longer required. We use access controls, encryption in transit, and other reasonable safeguards, but no online service can guarantee absolute security.

• Request access to or correction of your personal information.
• Request removal of saved itineraries or other eligible account-linked data while keeping your account open.
• Delete your account from Settings or submit a request through our public account-deletion page, subject to required legal retention.
• Allow or block foreground location in your browser settings; blocking it disables the Premium location control without affecting your itinerary.
• Separately allow, decline, or later withdraw optional analytics and Meta/TikTok marketing measurement through Cookie choices in the site footer.
• Send a supported Global Privacy Control signal, which keeps optional analytics and marketing measurement disabled in the browser.
• Edit or withdraw your customer review through the review form. Editing a published review returns it to moderation.
• Contact us to request an export or raise a privacy concern.

Open Remove your data without closing your account to request removal of selected information while keeping your TripperTip sign-in active.

Open Delete your TripperTip account to delete your account in the mobile app or submit a verified request without installing or signing in to the app. Public requests are normally completed within 30 days after account ownership is verified.