This Privacy Policy explains what information Tripw collects, how we use it, who we share it with and the choices you have. "Tripw" is the trip-planning app for iPhone and the website https://tripw.co (together, the "Service"), operated by the Tripw team ("we", "us"). If you have any questions, contact us at support@tripw.co or through our support page at https://tripw.co/support.
In short
- We collect the information needed to run your account and the trips you plan with others.
- Everything added to a trip is visible to all members of that trip.
- We don't track your device's location, we don't sell personal information and we don't use third-party advertising tracking.
- AI features run only when you ask, and only the content needed for that request is sent to the AI provider.
- You can delete your account at any time from the profile screen in the app.
Information you give us
Account information
When you create an account, we collect your name and email address and, if you choose, a phone number. Your password is stored only in hashed form, so we cannot read it. If you sign in with Google or Apple, we receive basic details from that provider, such as your name and email address.
You can also choose to add a profile photo, set your language, currency and notification preferences, turn on two-factor authentication, and tell us your gender so the app can address you with correct Hebrew grammar. These are optional.
Trip content
Most of what Tripw stores is the trip information you and your fellow travellers add: trips, destinations and dates; flights and other transport; hotels; daily schedules with places and times; expenses and how they are split; polls and votes; comments and day chat; packing lists; and photos and videos.
Travel documents
You can upload documents such as passports, visas, insurance policies, tickets and booking confirmations, together with details such as expiry dates and which traveller each document belongs to. Documents like these can contain sensitive information, including information about other people. Please upload only documents you are allowed to share, and remember that they are visible to the members of the trip.
Subscription information
If you subscribe to Tripw Plus, the purchase is handled by Apple. We receive information about your subscription, such as the plan and whether it is in a trial, active or cancelled, from Apple and from our subscription-management provider, RevenueCat. We never receive your card or payment details.
Support messages
If you contact us, we keep your message and our reply so we can help you and improve the Service.
You are not legally required to give us any information, but without some of it (for example, an email address) we cannot create an account or provide the Service.
Information collected automatically
When you use the Service, our servers record basic technical information needed to run it reliably and securely, such as IP address, request times, app version and error details. If you allow notifications, we store a push token for your device so we can send you push notifications.
The website uses cookies or similar browser storage only as needed to keep you signed in and remember your settings. We don't use advertising cookies.
Location
Tripw does not track your device's location. When you or other members add places to a trip, we convert them into map coordinates (geocoding) so we can show them on a map and provide related features, such as weather forecasts.
How we use information
- To provide the Service: create and secure your account, store and sync your trips, and show them to the members of each trip.
- To show maps, places, weather forecasts, attraction listings and translations.
- To run the AI features when you ask for them.
- To send service emails and notifications according to your preferences.
- To manage Plus subscriptions and the features they unlock.
- To keep the Service secure, prevent abuse, apply usage limits and fix problems.
- To answer support requests and meet our legal obligations.
We don't sell personal information, we don't use it for third-party advertising, and we don't track you across other companies' apps or websites.
Sharing inside a trip
Tripw is built for travelling together. Trip members see each other: names and profile photos, the schedule, flights and hotels, expenses and how they're split, comments and polls, the packing list, the photos and videos added to trip days, and the documents marked as shared.
You choose what to upload and what to share. Whatever you add to a shared trip is available to that trip's members, and we can't control what they do with it (such as keeping a copy). Share only with people you trust, and don't upload other people's details without their permission. What you share, including other people's details, is your responsibility.
Members join a trip with an invite code or link, so share it only with people you want in the trip. The trip owner manages the trip and its members.
Identity documents
Passports, visas and insurance are private by default: only the member who uploaded the document and the members it is assigned to can open it. The other trip members don't see it in the document list, in previews or in the AI document check.
You can share an identity document with all trip members with the "Share with the members" switch when uploading or editing it. That is the uploader's explicit choice, and we record who confirmed it and when. You can stop sharing at any time in the same place; from then on the document is private again (copies other members already saved to their devices are outside our control).
We don't review the contents of documents. We recommend not sharing identity documents unless it's really needed, and uploading another person's document only with their permission.
Location sharing
On the live map you can share your location with the trip's members. Sharing is off until you explicitly agree to it, separately for each trip, and you can stop or pause it at any time from the map or from the profile settings.
- What is shared: your phone's approximate location (a point on the map, the estimated accuracy and heading), only while the app is open.
- With whom: the members of that trip only. Your location isn't shown on the website or to anyone outside the trip.
- When: only around the trip's dates (from a day and a half before it starts until two days after it ends). Nothing is stored outside that window.
- For how long: a location is deleted after 24 hours, or immediately when you pause or stop sharing. The sharing record and your consent are deleted a week after the trip ends.
We record when you agreed to share. You can withdraw that consent in the same place you gave it. Choosing to share is your decision and your responsibility.
AI features
Documents and texts you send to an AI feature (for example a booking confirmation to import, a receipt to scan or a trip description) are passed to Anthropic for processing. This happens only when you run the feature, and the app says so before the first use.
Tripw Plus includes AI features: importing a booking from a pasted email, PDF or screenshot of a ticket or booking; planning a day; scanning receipts; reordering a day; suggesting polls; checking documents; and creating a packing list. These features are powered by Anthropic's Claude models.
- AI runs only when you ask for it, and only the content needed for that specific request is sent to Anthropic, for example the booking email you pasted or the trip details needed to plan a day.
- The document check uses the list of documents, their titles and expiry dates. It does not send the contents of the files.
- Booking files you upload for import are saved to the trip's documents, like any other trip document.
- Results are shown as suggestions for you to review before anything is saved.
- Under Anthropic's API terms, data sent to it through the API is not used to train its models.
- AI output can be wrong. Please check it before relying on it.
Service providers
We use service providers that process information on our behalf. Each receives only what it needs to perform its service for us:
- Hosting: servers operated for us, where the Service and its data are stored and run.
- Mapbox: maps, place search and geocoding.
- Apple Maps, Google Maps and Waze: only when you tap to open a location in one of them. That app then handles the request under its own privacy policy.
- Google Cloud Translation: translating attraction descriptions.
- Viator (a Tripadvisor company): attraction listings. If you decide to book, the booking is completed on Viator's site under Viator's own terms and privacy policy.
- Resend: sending emails.
- Expo push service and Apple Push Notification service: delivering push notifications, using your device's push token.
- Apple App Store and RevenueCat: processing and managing Plus subscriptions.
- Anthropic: the AI features.
- Apple WeatherKit or Open-Meteo: weather forecasts. They receive only the coordinates of the trip's places.
- Google and Apple: sign-in, if you choose to sign in with them.
We may also disclose information if the law requires it, to protect the rights, safety and security of our users or the Service, or as part of a merger, acquisition or sale of the Service, in which case this policy will continue to apply to your information.
Offline copies on your device
So you can use your trip without internet, the app keeps a copy of your upcoming trips and their documents on your device. This copy is protected by your device's own security, so we recommend locking your device with a passcode.
Emails and notifications
We send service emails that are needed to run your account, such as email verification and password reset. We also send trip notifications by email and push, according to your preferences. You can change these preferences in the app's settings, and you can turn off push notifications in your device settings at any time.
If you sign up for updates on our website (guides, tips and Tripw news), we first send a confirmation email, and updates start only after you confirm. For this we keep your email address, language, where on the site you signed up, when you signed up and confirmed, and the consent wording you agreed to. Every update has a link to unsubscribe at once, and you can also contact us. A sign-up that isn't confirmed is deleted after 30 days.
Security
We protect information with encryption in transit (HTTPS), hashed passwords and encrypted storage of credentials, and we offer optional two-factor authentication. Access to data is limited to what is needed to run the Service. No system is perfectly secure, so we cannot guarantee absolute security. Please use a strong password, turn on two-factor authentication and let us know right away if you suspect unauthorised access to your account.
How long we keep information
We keep your information for as long as your account is active. After you delete your account, we keep information only where needed to meet legal obligations, resolve disputes or prevent abuse. Backups are kept for a limited time and are then deleted in the ordinary course.
Live-map locations are deleted after 24 hours, and the location-sharing record a week after the trip ends. Documents, photos and videos are kept until you delete them, the trip or your account.
Deleting your account
You can delete your account at any time from the profile screen in the app, or by emailing support@tripw.co. Deleting your account removes the account and your personal information.
Trips are shared spaces. Items you added to trips that other people also use are deleted or anonymised, so those trips can continue for their other members without identifying you. We cannot remove copies that other members have already saved outside the Service, for example photos saved to their own devices.
Your rights
Depending on where you live, including under the Israeli Privacy Protection Law and, for users in the European Economic Area and the UK, the GDPR, you may have the right to:
- access the personal information we hold about you;
- correct information that is inaccurate or incomplete;
- delete your information;
- receive a copy of your information in a portable format;
- object to or restrict certain processing;
- withdraw consent where processing is based on consent.
You can view and edit most of your information directly in the app and delete your account from the profile screen. For any other request, email support@tripw.co. We may need to verify your identity before acting on a request. You also have the right to complain to a data protection authority: in Israel, the Privacy Protection Authority; in the EEA or the UK, your local supervisory authority.
Legal bases (EEA and UK users)
Where the GDPR applies, we process personal information on these bases:
- to perform our agreement with you, meaning to provide the Service you signed up for;
- our legitimate interests in keeping the Service secure, preventing abuse and improving it;
- your consent, for example for push notifications or optional details, which you can withdraw at any time;
- compliance with legal obligations.
International transfers
Our service providers may process information in countries other than the one you live in, including countries with different data protection laws. Where required, we rely on appropriate safeguards for these transfers, such as standard contractual clauses or adequacy decisions.
Children
The Service is not directed to children under 13, or under 16 in the European Union. We do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. If we make material changes, we will let you know in the app or by email before they take effect. The "last updated" date on this page shows when it last changed.
Contact us
For any question or request about privacy, contact the Tripw team at support@tripw.co or through https://tripw.co/support.