Privacy Policy — TripGenius

TripGenius ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the TripGenius mobile application and related services. Please read this policy carefully.

1. Information We Collect

We collect information you provide directly to us and information generated automatically when you use TripGenius.

Account Information

Email address (if you register with email)
Anonymous user identifier (if you use the app without registering)
Language and locale preferences

Travel & Usage Data

Destinations and travel plans you create
Place searches and destination queries
Number of plans created and app usage frequency
In-app preferences (companion type, trip duration)

Technical Data

Device type, operating system, and app version
IP address and network information
Crash reports and error logs
AI processing metadata (token counts, response latency) — not your content

Subscription & Payment Data

Subscription tier and status (free, weekly, monthly, yearly)
Purchase history and renewal dates
Payment transactions are processed entirely by Apple App Store or Google Play — we never receive your credit card or payment details

2. How We Use Your Information

To provide, operate, and improve TripGenius services
To generate personalized AI travel itineraries based on your inputs
To manage your account, subscription, and plan limits
To send service-related communications (account, subscription changes)
To analyze aggregate usage patterns and improve AI quality
To prevent fraud, abuse, and violations of our Terms of Service
To comply with applicable legal obligations

We do not sell your personal information to third parties. We do not use your travel data for advertising purposes.

3. Third-Party Services

TripGenius integrates with the following third-party services. Each operates under its own privacy policy.

Service	Purpose	Data Shared
Supabase	Authentication & database hosting	Account info, travel plans, usage data
Google Gemini AI	AI itinerary & content generation	Destination queries, trip preferences
Google Places API	Place search, photos & location data	Place names and search queries
RevenueCat	Subscription management & billing	User ID, subscription status & events
Apple App Store / Google Play	Payment processing	Handled entirely by the platform

4. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

Account data: Retained until you delete your account
Travel plans: Retained until you delete them or your account
Usage logs: Retained for up to 12 months for service improvement
Subscription records: Retained for 7 years for legal and tax compliance

After account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

5. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your account and associated personal data
Portability: Receive your data in a structured, machine-readable format
Opt-out: Disable optional data collection through your device settings

To exercise any of these rights, contact us at vskavgaci@gmail.com. We will respond within 30 days.

6. Children's Privacy

TripGenius is not directed to children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately at vskavgaci@gmail.com and we will promptly delete such information.

7. Data Security

We implement industry-standard security measures to protect your data, including:

Encryption of data in transit (TLS/HTTPS)
Encrypted storage via Supabase's secure infrastructure
Row-level security policies ensuring users can only access their own data
Rate limiting and abuse prevention on all API endpoints

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

8. International Data Transfers

TripGenius is operated from and your data may be processed in countries outside your country of residence, including the United States. By using TripGenius, you consent to the transfer of your information to these countries. We ensure appropriate safeguards are in place consistent with applicable data protection laws.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact vskavgaci@gmail.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where appropriate, through in-app notification. Your continued use of TripGenius after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: vskavgaci@gmail.com
Support: tripgenius.app/contact