Last updated: June 1, 2026
This Privacy Policy explains how the TripTiger travel-planning app and website ("TripTiger", "we", "us") collect, use, and protect your information, and the rights you have over it. We are the data controller for the personal data described here. Our servers and primary database are hosted in the European Union (Finland).
| Category | What it is | Why |
|---|---|---|
| Account & identity | Email address, name and profile picture, obtained when you sign in with Google, with Apple, or with an emailed one-time code. If you use Apple's "Hide My Email", we only receive the relay address. | Create and secure your account. |
| Trip content | Trips, days, activities, destinations, places, notes and coordinates you add. | Provide the core service and sync it across your devices. |
| Collaboration | Email addresses you invite to a trip, and—if you are invited—your email and role on that trip. | Enable private, invite-only trip collaboration. |
| Location | Approximate or precise device location, only with your permission. We use it in the moment to show nearby places; we do not store a location history. | Show relevant nearby suggestions. |
| Place searches | Search terms and place look-ups, which our server forwards to Google Maps Platform. | Return maps, places and directions. |
| Usage analytics | Product-usage events (e.g. screens viewed, features used), which may be associated with an account or device identifier. | Understand and improve the app. You can turn this off in the app (Profile → Settings). |
| Diagnostics | Server-side error and crash reports, which may contain limited technical data. | Detect and fix problems, keep the service reliable. |
| Purchases | Subscription status (active/expired/refunded). Payments are handled by the Apple App Store or Google Play; we never receive your card details. | Provide and manage paid features. |
| Technical data | IP address, device and app version, timestamps in server logs. | Security, abuse prevention and debugging. |
Where the GDPR applies, we rely on: performance of a contract (running your account and trips); legitimate interests (security, abuse prevention, basic service reliability); consent (optional analytics and device location, which you can withdraw at any time); and legal obligation where required.
We do not sell your personal data. We use a small number of service providers ("sub-processors") that process data on our behalf:
| Provider | Purpose |
|---|---|
| Google (Maps Platform, OAuth) | Sign-in, maps, places and directions |
| Apple | Sign in with Apple, App Store purchases |
| RevenueCat | Subscription management |
| PostHog | Product analytics (optional) |
| Sentry | Server error monitoring |
| Resend | Sending sign-in codes and support email |
| Cloudflare | Content delivery and security |
| Hetzner | Server and database hosting (EU) |
We also share trip data with the collaborators you choose to invite. We may disclose data if required by law.
Some providers are located outside the European Economic Area. Where data is transferred internationally, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
We keep your account and trip data until you delete them. When you delete your account, your personal data is erased from our live database, and removed from rotating encrypted backups within up to 12 months. Server logs are kept for a short period for security and debugging.
You can, at any time:
We use HTTPS for all traffic, store session tokens securely, never store passwords (sign-in is via Google, Apple, or one-time codes), and restrict access to production systems.
TripTiger is not directed to children. We do not knowingly collect personal data from children under 16 in the EEA (or under 13 elsewhere). If you believe a child has provided us data, contact us and we will delete it.
We may update this policy from time to time. We will revise the "Last updated" date and, for material changes, notify you in the app or on this site.
Questions or requests about your privacy: [email protected].