Privacy policy
tripstory is a travel planner and journal. This page says what it keeps about you, what it does with it, and how you take it back.
What we hold
- Your account: your name, your email address, an optional username, and — if you sign in with Apple or Google — the identifier that provider gives us. We never receive your Apple or Google password.
- What you make: trips, days, stops, activities, stays, notes, tasks, links, files you attach, places you save or mark as visited, the moments (journals) and photos you add, and the mood you give a day.
- Where you are, only when you allow it: your location is read on your phone to bias place search near you and, on a locked plan whose dates include today, to mark a stop reached when you arrive. Your location is not stored on our servers.
- How share pages are used: when someone opens a trip you shared, we record that a page was opened and whether it was a browser, a bot or the app — never who. Share links are stored as a one-way hash. These counts are deleted after two years.
Who else sees it
- People you choose: trip members you invite, people you send a share link to, and — if you publish a trip or a moment — anyone using tripstory or opening its public page.
- Account email: Resend receives your email address and the verification or password-recovery message to deliver the code you request. We store a one-way protected representation of the code, which expires after 10 minutes, and temporary sending limits to prevent abuse.
- Google Places: what you type in place search and your approximate position are sent to Google through our server to return suggestions. Google's privacy policy applies to that request. When you ask for stay suggestions, a position worked out from the coordinates of that day's stops is sent to Google Places to find places to sleep nearby.
- Content check: when you publish a trip or a moment, or report one, the words about to become public may be sent to an automated content-safety service (TypeSafe AI, through Vercel AI Gateway) to be scored for abuse. Only the text is sent — never your name, account, location or photos — and it is not used to train models.
- OpenStreetMap, Wikidata and NASA POWER: a place's coordinates and name are sent, in the background, to gather open facts such as opening hours and climate. Nothing about you is sent.
- openrouteservice: the coordinates of your stops are sent to draw the road between them.
- Apple Maps: opens on your phone when you tap Navigate; we pass the stop's coordinates and nothing else.
- Hosting: our servers and storage run on Oracle Cloud in Frankfurt, Germany.
We do not sell your data and we do not use advertising networks.
Keeping it and deleting it
Your data is kept for as long as your account exists. You can delete your account at any time from You → Account → Delete account. Deletion signs you out everywhere and hides everything you published at once; your rows and files are erased from our systems within 7 days, and from backups within one further day. What remains afterwards is not about you: anonymous share-page counts, and a note on trips others copied from yours that no longer carries your name.
Write to connect@tripstory.global to ask for a copy of your data, to correct it, or to raise a concern; we answer within 24 hours on working days.
Children
tripstory is not directed at children under 13, and we do not knowingly hold data about them. If you believe a child has an account, write to us and we will delete it.
Changes
If this policy changes in a way that matters, the app will say so the next time you open it. The date at the top is the last change.