Privacy Policy

Effective: 22.07.2026 · Updated: 27.08.2026

1. Scope & Controller

This policy covers the services offered by Tripwoa, including the tripwoa.com website and the Tripwoa mobile application (the "Services"). Contact: info@tripwoa.com

2. Data We Process

Account data (optional membership): you can use Tripwoa without an account. If you sign up we ask for the minimum: an email address and password (stored only as an irreversible hash, never in plain text), or — with Google Sign-In — your Google account identifier plus the name and profile photo Google shares. A randomly generated device identifier links your device to your account. Content you provide: travel/plan preferences (city, dates, party size) and content you create in Tripwoa (photos, videos, notes, memories, trip plans). Device permissions: used only for the relevant feature and only if granted (photo library, camera, location, notifications); revocable in device settings. Location: in the app, precise location — with your permission — is processed transiently to suggest nearby places and calculate route/traffic information to your next stop; we do not store a location history on our servers. On the web, a country/city guess may be made from your IP. Technical data & usage counters: IP address, device info, app version, crash logs, and fair-use counters (e.g. monthly plan generations).

3. Cloud Backup and Sync

Trips and private content you create in Tripwoa — including photos, videos, notes and memories — are uploaded over encrypted connections (HTTPS), stored on Tripwoa servers and synced for account continuity. The former "Keep only on my device / Privacy Mode" option is no longer offered because account changes could make device-only content unrecoverable. Android system cloud backup is disabled for the app, so this content is not independently copied to Google Drive by Android Auto Backup. Public place contributions (optional): when you explicitly choose to share a photo publicly from a place page or visit flow, it is published after moderation in that place's public gallery without displaying your account name. This is entirely optional. If you delete your account, the remaining internal link to your identity is severed and the contribution may remain anonymous. You can remove your own contribution in the app or request full removal via info@tripwoa.com.

4. AI Processing

Generative AI is used only to generate trip plans. Plan context such as destination, dates, party size, preferences and candidate place lists is sent to AI model providers (large language model APIs) and processed on their systems. Place and destination search additionally uses a non-generative embedding model: the text you search for is sent to the model provider to compute semantic similarity and is processed there. That text is not stored in readable form on our servers; only an irreversible digest of it is kept as a cache key and deleted within 30 days at the latest. Tripwoa does not offer an AI chat/assistant, and your photos, videos, notes and memories are not sent to AI model providers. AI-generated plans can contain errors; verify critical details.

5. Cookies & Similar Technologies

The Services use cookies, local storage and similar technologies: (a) essential ones (language/session preferences, sign-in tokens); (b) third-party content and services (maps, photos, advertising and analytics) may set their own identifiers; (c) affiliate click tracking. Manage them in browser/device settings; some features may not work without them.

6. Advertising, Sponsored Content & Affiliate Tracking

Ads may be shown on the free tier (including third-party ad networks such as Google advertising services); ad providers may use device identifiers (e.g. the Android advertising ID) for delivery and measurement. Some places may be given extra prominence under partnership agreements (sponsored placement); such placements are indicated in the app. Some links are affiliate links (e.g. the Travelpayouts network); clicks are tracked by the network for attribution. None of this costs you anything extra.

7. Third-Party Processors

Data is shared as needed with: AI model providers (plan-generation text); Google services (place search, photos, Google Sign-In, Google Play distribution and billing, advertising/analytics); map and routing providers (e.g. Mapbox — map display, route/traffic durations); flight-information providers (flight status lookups); weather and encyclopedic content providers (e.g. Wikimedia); affiliate networks; and hosting/infrastructure providers. Their own privacy policies apply and their servers may be abroad.

8. Premium Subscription & Payments

Premium subscription payments are handled by Google Play. Your card/payment details never reach us; Google Play processes them. We only receive your subscription status (active/expiry) and associate it with your account.

9. Purposes

Providing and personalising the Services, generating trip plans, backup and sync, enforcing fair-use limits, monitoring performance and errors, security, improving the Services, legal compliance and — where applicable — advertising/measurement and sponsored-content display.

10. Retention

Data is kept as long as its purpose requires: caches refresh periodically, logs rotate; your content is deleted when you delete it. Account deletion takes effect immediately: account data (email, name, credentials) and all private cloud trip/media data are permanently removed together; backup copies are purged from our systems within a reasonable period.

11. Security

Data travels over encrypted connections (HTTPS); passwords are stored as irreversible hashes and sessions use short-lived tokens. Still, no transmission over the internet is 100% secure.

12. Account & Data Deletion

You can delete your account inside the app: Profile → bottom of the page → Delete account; deletion takes effect immediately and all private cloud trip/media data is always removed with it. If you no longer have access to the app, you can request deletion on the web; requests are completed within 7 days with a confirmation reply. Deletion covers: account data (email, name, profile photo, sign-in links), cloud trips and private media, and device registrations linked to the account. Your public community contributions are not deleted; the link to your identity is severed and they remain published anonymously (you can separately request their full removal). Residual copies in encrypted backups are purged within 30 days; minimal records may be retained where legally required. An active Premium subscription must be cancelled separately in Google Play → Subscriptions.

13. International Transfers

Servers and providers may be located abroad; your data may be transferred to those countries.

14. Children

The Services are not directed to children under 13 and we do not knowingly collect their data.

15. Legal Bases & Your Rights (GDPR / KVKK)

We process data on these legal bases: performance of a contract (providing the Services, including private backup and sync), your consent (e.g. optional public contributions and permission-gated features), legitimate interests (security, abuse prevention, service improvement) and compliance with legal obligations. You may request access, correction, deletion, portability or object to processing: info@tripwoa.com

16. Changes

This policy may be updated; the current version is published here. Material changes may be announced in-app.