Privacy Policy

1. Data you provide

When you create an account and use Trippin, you give us directly:

• Account: name, e-mail, password (stored only as a bcrypt hash, never in plain text), preferred language, frequent-flyer number or KTN (optional) and an avatar photo (optional).
• Trip content: destinations and dates; transport (flights, cars, trains and others) with times, confirmation codes and attachments; stays with address, phone, codes and attachments; activities with address, notes and an estimated price (optional); travel documents (passport, visa, insurance and others) with expiry date and attachments; a document checklist.
• Travelers without an account: the name of people a member adds to a trip who don't have an account themselves.
• Invites: the invitee's e-mail, when an invite is addressed to a specific person.

2. Data collected automatically

• A session cookie (httpOnly, essential to keep you signed in) and a language cookie. We use no tracking or advertising cookies.
• IP address: used only to rate-limit sign-in, sign-up, password reset and confirmation re-send attempts, as protection against brute force. Kept for short windows and deleted automatically.
• Error reports: when something fails, a technical report is sent to Sentry and may include your user identifier and the page you were on. No session recording, no navigation tracking.
• Visit metrics on the website: aggregated and anonymous, through Vercel Analytics, without cookies.
• Push notifications: only if you turn them on. Your browser's subscription identifier is kept until you turn them off or the browser cancels the subscription.
• Account creation date, e-mail confirmation date and last access date (derived from sessions).

3. What we use the data for

• Running the service: storing trips and showing them to you and the members you invited.
• Transactional e-mail: sign-up confirmation, invites and password reset. We send no marketing e-mail.
• Security: protecting accounts from unauthorized access and limiting abusive attempts.
• AI features: reading a booking confirmation you upload, answering questions about your trip and suggesting activities, always at your request.
• Supporting information: flight status, placing locations on a map and weather forecasts.
• Keeping the service healthy: error monitoring and aggregate usage metrics of the website.

4. Legal basis

We process account and trip data to perform the service you signed up for. We rely on legitimate interest for security and error monitoring. Push notifications, addressed invites and uploading confirmations for automatic reading rely on your consent, which you can withdraw at any time.

5. Who we share data with

We do not sell data, show ads or share with third parties beyond the services below, which run parts of Trippin on our behalf:

6. Sharing between users

• Members of the same trip see all of that trip's data: transport, stays, activities, confirmation codes and travelers.
• Travel documents can be marked private; then only their owner sees them. Otherwise every member does.
• Attachments are only accessible to trip members, and attachments of private documents only to their owner.
• Public links: "Share the day" creates a link that shows that day's schedule to anyone who has it; "Add to my calendar" creates a calendar link (.ics) with flights, check-ins and activities, without confirmation codes or traveler names. Anyone with the link can see it; you decide who you share it with.
• An addressed invite can only be accepted by the account with that e-mail, after it is confirmed.

7. International transfers

Trippin is operated from the United States, and all the services listed above are located in the United States or the European Union. If you are in Brazil or another country, your data is transferred to, stored and processed in those countries under the contracts and safeguards those providers offer.

8. Retention and deletion

• Data is kept for as long as your account exists.
• Deleting a trip deletes its items and attachments. Leaving a trip removes your access to it.
• Expired sessions, used confirmation and reset tokens, and rate-limit windows are deleted automatically every day.
• Account deletion: removes the account, its sessions, the trips you are the sole owner of (with attachments) and removes you from the other trips. Until the option is available in Settings, request it at contact@trippin.muamba.net.

9. Your rights

Under the LGPD and, where applicable, the GDPR, you can request access to, correction, deletion and portability of your data, and withdraw consents (push notifications, e-mails). Much of that you can do yourself in Settings. For the rest, write to contact@trippin.muamba.net.

10. Minimum age

You must be at least 16 years old to create an account. Children under that age have no account: they can only exist as a "traveler without an account", identified by name, inside a trip managed by a responsible adult.

11. Security

Passwords are stored only as bcrypt hashes. The session lives in an httpOnly cookie. Attachments are stored privately and served only after checking that the requester is a member of the trip. All traffic uses HTTPS. No system is infallible; if we identify an incident affecting your data, we will let you know.

12. Changes to this policy

When this policy changes in a meaningful way, we will let you know by e-mail or inside the app. The date at the top identifies the version in force.

13. Contact

Questions and requests about your data: contact@trippin.muamba.net.