Tripzy Privacy Policy

Effective date: October 11, 2026

This Privacy Policy explains how Tripzy ("Tripzy," "we," "our," or "us") collects, uses, shares, and protects information when you use the Tripzy mobile application (the "App").

1. Information We Collect

Account and app identifiers: Tripzy uses Firebase anonymous authentication and may process an assigned account identifier, Firebase installation or messaging identifiers, and app/device-integrity information supplied through Firebase App Check. You do not need to provide a name, email address, or password to create the anonymous account.
Trip requests and user content: Information you enter to create a trip, including origins, destinations, dates, preferences, interests, timing choices, and free-form trip instructions. We also process the itinerary and related results generated for your request.
Purchases and credits: Apple StoreKit product and signed transaction information, purchase status, purchase history needed to restore or prevent duplicate grants, and your Tripzy credit-account balance and ledger activity. Tripzy does not receive your payment-card or bank-account information.
Usage and interaction information: Information necessary to operate and protect the service, such as request identifiers, feature interactions, generation status, rate-limit and duplicate-request information, and related timestamps.
Diagnostics and feedback: Technical failure categories, service-performance information, and information you voluntarily include in feedback. Feedback submissions may also contain the App version, iOS version, and device model.
Support communications: Your email address and the contents of a message if you contact us directly.

2. How We Use Information

To authenticate the App and protect the service from fraud, abuse, and unauthorized access.
To generate personalized itineraries, place information, and route or travel recommendations.
To initialize and maintain credit accounts, verify purchases, restore eligible credits, and prevent duplicate purchase grants.
To maintain reliability, enforce limits, diagnose failures, and improve App functionality.
To provide optional notifications and respond to feedback or support requests.

3. Service Providers and Data Sharing

We do not sell or rent personal information, and we do not use Tripzy data for cross-app tracking or third-party advertising. We share information only as necessary to operate the App, comply with law, or protect users and the service.

Google Firebase and Google Cloud: Firebase Authentication, App Check, Cloud Functions, Cloud Firestore, Cloud Messaging, and Remote Config support authentication, app integrity, backend processing, records, notifications, and configuration.
Google Gemini API: Trip requests and relevant context are sent to the Gemini API to generate itinerary content. Under Google's published policies for paid Gemini API services, prompts and responses are not used to improve Google's products by default, but may be retained for a limited period for abuse monitoring and legal or regulatory requirements.
Google Maps Platform: Destination, place, and route queries are sent to Google Places and Routes services to provide geographic and travel information.
Apple: Apple provides StoreKit purchase information and signed App Store transaction data used to verify the App environment and purchases.

These providers process information under their own terms and privacy commitments. Processing may occur in countries other than the one where you live.

4. Data Retention

We retain credit-account, purchase, fraud-prevention, and security records for as long as reasonably necessary to provide the service, prevent duplicate grants, resolve disputes, meet legal obligations, and protect Tripzy. Temporary rate-limit and duplicate-request records are retained for shorter operational periods. Feedback and support communications are retained while needed to respond, improve the service, or meet legal obligations.

Third-party providers apply their own retention schedules. Google's published Gemini API policies currently describe limited retention for abuse monitoring. Trips saved locally in the App remain on your device until you delete them or remove the App, subject to your device backup settings.

5. Your Choices and Rights

Depending on where you live, you may have rights to request access, correction, deletion, or restriction of personal information. Because Tripzy uses anonymous authentication, we may need information available from your device to locate the relevant account safely. You may delete locally saved trips within the App. You can manage notification permission in iOS Settings.

To submit a privacy request, contact us using the address below. We may retain limited information where required for security, fraud prevention, accounting, dispute resolution, or legal compliance.

6. Security

We use safeguards including encrypted network connections, Firebase App Check, authentication, server-side purchase verification, restricted service credentials, and access controls. No system can guarantee absolute security.

7. Changes to This Policy

We may update this Privacy Policy to reflect changes to Tripzy, our service providers, or legal requirements. The revised policy will be posted on this page with a new effective date.

8. Contact Us

For privacy questions or requests, email tripzy053@gmail.com.

Support • Terms of Use (Apple Standard EULA)