Privacy
Privacy Policy
TripNotePlan processes personal information only as needed to provide the service and does not store card information on our servers. This policy summarizes the main processing activities in a format you can review on the web.
Last updated
Information we collect and process
Account information may include an email address, display name, and profile image. We also process itineraries, saved places, expense records, and subscription status entered by users to provide the service.
Access logs, IP addresses, device information, and usage records may be collected automatically for security and service improvement. If a user grants permission, location information is processed temporarily to show the current location on a map and is not stored on our servers.
Why we process information
We use information for account authentication, storage and synchronization of trip data, map and AI features, subscription status checks, customer support, security, error analysis, and service quality improvement.
When a user scans a receipt, the selected image may be sent to an AI processing service. Users should make sure it does not contain sensitive personal information.
External service providers
We may use Supabase for authentication and data storage, Google services for maps, places, and AI features, Polar for web payments, and Google Play for Android payments.
We may use analytics tools such as Google Analytics and Microsoft Clarity to analyze web use and improve errors. Each provider processes information under its own privacy policy.
Retention and deletion
We retain account and trip data while the service is in use. When an account deletion is requested, we begin deletion except for information we are legally required to retain.
Payment and subscription records may be retained for periods required by applicable law. We may keep anonymized aggregate information for service improvement in a form that does not identify individuals.
Your rights and how to contact us
Users may request access, correction, deletion, or restriction of processing. Users in the EU or EEA may exercise rights of access, correction, deletion, and portability under the GDPR. We do not sell personal information.
Send privacy questions or rights requests to [email protected]. We aim to acknowledge them within five business days.