Privacy Policy

Triprant (“we”, “us”) helps people plan trips, record what actually happened, and split the cost. This page explains what we collect to do that, why, and how you can see, change or remove it.

1. What we collect

Account information. Your email address and password (stored as a salted hash — we never see or store your actual password), or your Google account identifier if you sign in with Google.

Profile information. Your display name, handle, bio, avatar, home time zone and country. Your approximate home location, if you add one, is used only to blur it out of your published trip routes and is never shown to anyone.

Trip content. Trips you create or join, the places, dates and plans on them, expenses and who paid what, photos or receipts you upload, comments, reactions, and ratings you leave on trips and places.

Location, when you turn it on.If you enable live trip tracking, we record your device’s location for the duration you have it switched on, so your route can be reconstructed and, if you choose, shared with people on the trip. Location sharing is off by default and only runs while a trip you are part of is active.

Device and usage information. A push-notification token if you enable notifications, and the ordinary technical information any app collects to keep working — device type, app version, and basic error/crash reports.

What we don’t collect.We don’t buy or sell data about you from third parties, and we don’t use your trip or expense data to build advertising profiles.

2. Why we collect it

• To run the core features you use: trip planning, expense splitting, messaging and photo sharing between people on the same trip.
• To show you and the people you travel with what you’ve chosen to share, and nothing you haven’t.
• To send account emails you’ve asked for: password resets, email verification and trip invitations.
• To send push notifications you’ve enabled, such as a new expense or message on a trip you’re part of.
• To keep the service secure — detecting abuse, rate-limiting sign-in attempts, and enforcing the account lockouts that protect you from password guessing.
• To fix bugs and improve the product, using aggregated or anonymised usage patterns wherever we can.

3. Who your data is shared with

People you invite to a trip see what that trip’s sharing settings allow — plans, expenses, photos, comments — because that is the point of inviting them. A trip you publish publicly is visible to anyone with the link, or to your followers if your account is private, exactly as the visibility setting you chose describes.

We use a small number of infrastructure providers to run the service — our database and hosting provider, our email delivery provider, and (if you subscribe to Pro) our payment processor for billing. Each only receives what it needs to do its job, and none of them may use your data for their own purposes.

We do not sell your personal information.

4. How long we keep it

We keep your account and trip data for as long as your account is open, and for a reasonable period after a trip ends so you and your travel companions can still look back on it. If you delete your account (see below), it is closed immediately and your content stops being shown to anyone else.

5. Your choices

See and download your data. From Settings → Account, you can download a copy of your profile, trips, expenses, comments and ratings as a file at any time.

Delete your account. From Settings → Account, you can close your account yourself, at any time, with no need to contact us. Deleting your account:

• signs you out of every device immediately;
• stops your posts, comments and ratings from being shown to anyone else;
• frees your email address so it can be used to sign up again, by you or anyone else.

Because trips and expenses are shared records — the same expense can determine what several other people on a trip owe or are owed — deleting your account does not erase rows that other participants’ own records depend on. Instead, your account is closed and your content is hidden from public view rather than being immediately purged from the database. If you would like your underlying data fully erased rather than hidden, contact us at the address below and we will handle it individually.

Location and notificationscan be turned off at any time from your device’s system settings or from within the app.

6. Security

Passwords are hashed, never stored in plain text. Sessions can be revoked instantly — from a password change, a password reset, or closing your account — rather than waiting for a token to expire. Traffic to and from the app is encrypted in transit.

7. Children

Triprant is not directed at children under 13 (or the minimum age required in your country), and we don’t knowingly collect data from them.

8. Changes to this policy

If we make a material change to how we handle your data, we’ll update this page and change the date at the top. Continuing to use Triprant after a change means you accept the update.

9. Contact us

Questions about this policy, or a request about your data, go to support@triprant.com.