Privacy Policy

1. Introduction

Trip Amor ("we", "our", "us") builds an AI-powered travel planning application ("the App"). This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the choices you have about your data.

By using Trip Amor, you agree to the practices described in this policy. If you disagree with anything here, please do not use the App.

2. Information We Collect

2.1 Information you provide

• Account information: name, email address, and password (encrypted) when you sign up.
• Profile information: profile photo (optional) and language preference.
• Trip content: destinations, dates, activities, notes, uploaded attachments (booking confirmations, tickets), and preferences you enter into the App.
• Communications: messages you send us for support or feedback.

2.2 Information collected automatically

• Device information: device model, operating system version, unique device identifiers, and app version.
• Usage data: features you use, screens you visit, and crash logs. Used only to improve the App.
• Approximate location: only when you grant permission, and only used to suggest nearby activities or center the map on your location.

2.3 Information from third-party sign-in

If you sign in with Google or Apple, we receive your name and email address from that provider. We do not receive your password.

3. Google API Services — User Data

3.1 Google Calendar

When you tap "Add to Google Calendar" inside Trip Amor, we ask for permission to access your Google Calendar. Here is exactly what we do with that access:

• What we do: Create new calendar events on your Google Calendar for each activity in your trip (flights, hotel check-ins, tours, meals, etc.). Each event includes the activity title, time, location, and notes you added inside Trip Amor.
• What we do NOT do: We do not read events you did not create through Trip Amor. We do not modify or delete events unrelated to Trip Amor trips. We do not share your calendar data with any third party.
• Where the data lives: Calendar events are written directly to your Google Calendar. Trip Amor's servers do not store a copy of your calendar or any events read from it.
• Revoking access: You can revoke Trip Amor's calendar access at any time via your Google Account permissions. Doing so does not delete events already created — those remain on your calendar until you delete them.

3.2 Google Sign-In

If you choose Google Sign-In, we receive only your basic profile (name, email, and profile picture). We use this to create your Trip Amor account. We do not access any other Google services with this scope.

4. How We Use Your Information

• Provide the service: save your trips, sync them across devices, generate AI itineraries, and track your flights.
• Improve the App: understand which features are used and diagnose bugs.
• Send necessary emails: account confirmations, password resets, security alerts. We do not send marketing emails unless you opt in.
• Notify you: local push notifications for upcoming trips, activity reminders, and flight status updates.
• Legal compliance: respond to lawful requests from public authorities.

We do not sell your personal information to third parties. We do not use your data to train third-party AI models beyond what is necessary to generate your specific trip itinerary at your request.

5. Third-Party Services We Use

Trip Amor uses a small number of third-party services to deliver the App. Each is contractually bound to handle your data securely.

• MongoDB Atlas — hosts our database (encrypted at rest). Your trip data lives here.
• Render.com — hosts our backend server.
• Google Maps Platform — provides map tiles, place search, and geocoding for activity locations.
• AirLabs — provides live flight status data. We send them the flight number you enter. No personal information about you is transmitted.
• Open-Meteo — provides weather forecasts at airport locations. Only anonymous latitude/longitude coordinates are sent.
• Anthropic (Claude) / OpenAI — powers the AI itinerary generator. Your trip prompt (destination, dates, preferences) is sent to generate the itinerary. Nothing about your identity is included.
• Cloudinary — hosts profile photos and activity attachments you upload.
• Google Cloud (Sign-In / Calendar) — see Section 3 above.
• Apple (Sign in with Apple) — same as Google Sign-In: name and email only.

6. Data Retention

We keep your account and trip data for as long as your account exists. You can delete your account at any time from within the App (Settings → Delete Account), which permanently removes all your personal information from our servers within 30 days.

Crash logs and anonymous usage metrics are retained for 12 months before automatic deletion.

7. Security

We use industry-standard measures to protect your data, including:

• TLS encryption for all data in transit
• Encryption at rest for database storage
• Password hashing with bcrypt (we never store passwords in plain text)
• JWT-based authentication with short-lived tokens
• Regular security audits and dependency updates

No system is 100% secure. If we ever suffer a data breach affecting your information, we will notify you promptly and take appropriate remedial action.

8. Your Rights

Depending on where you live, you may have the following rights over your personal data:

• Access: request a copy of the data we hold about you
• Correction: update inaccurate information (most is editable in-app)
• Deletion: delete your account and associated data
• Portability: receive your data in a portable format (JSON)
• Withdraw consent: for any optional data uses

To exercise any of these rights, email us at support@tripamor.com. We respond within 30 days.

9. Children's Privacy

Trip Amor is not directed at children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. International Data Transfers

Trip Amor's servers are located in the United States and Europe. If you access the App from outside these regions, your information will be transferred to and processed in a jurisdiction that may have different data protection laws than yours. By using the App you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via an in-app notice or email at least 14 days before they take effect. Continued use of the App after the changes take effect constitutes acceptance.

12. Contact Us

Questions, concerns, or requests? Reach us at:

Email: support@tripamor.com
Trip Amor