Privacy Policy

1. Who we are

App

Tripxcursion (app ID com.tripxcursion.app) for Android and iOS

Developer

Techcolline Solutions, India ("Tripxcursion", "we", "us")

Contact

hello@tripxcursion.com

We are the data controller (or "data fiduciary" under India's Digital Personal Data Protection Act, 2023) for the personal information described in this policy. By using Tripxcursion you acknowledge this policy. If you do not agree with it, please do not use the app or website.

2. Summary

3. Information we collect and why

Each item below lists the data, why we collect it, and where it goes.

3.1 Account and sign-in

• Data: your name, email address and password (email sign-up), or your Google account name, email address and profile photo (Continue with Google). Passwords are handled by Firebase Authentication and are never visible to us.
• Why: to create your account, sign you in, keep your trips in sync and show your profile.
• Stored in: Firebase Authentication and your profile in Cloud Firestore. Your name, email and photo are also cached on your device.

3.2 Trip planning (Create Trip, My Trips, Saved)

• Data: starting point and destination, travel dates, number of adults and children, travel mode, interests and activities, food preference, trip pace, places you have already visited, budget and currency, and the itineraries you generate and save.
• Why: to generate your itinerary, show it on a map, and keep your trips and saved trips in your account.
• Shared with: Google Gemini API (to generate the itinerary), Google Places API and Google Routes API (place details, photos and travel times), Mapbox (maps, geocoding and directions) and Open-Meteo (weather forecasts).

3.3 Travel mood suggestions

• Data: your precise or approximate location (only while the app is in use and only if you grant permission), your country, the travel mood you choose, and a history of the places you have been shown or marked "Not for me".
• Why: to suggest places near you, widen the search area step by step, and avoid showing you the same places again.
• Shared with: Google Gemini API and Google Places API, to find and verify places near you.
• We do not track your location in the background. You can turn off location access at any time in your device settings; mood suggestions near you will then not be available.

3.4 Trip Reality Check

• Data: the itinerary text you paste, or the PDF or image you choose to import, and the travel dates you enter.
• Why: to read your plan and check it for problems such as opening hours, travel times, buffer time, weather and seasonal risk.
• Shared with: Google Gemini API (the content you submit, so it can be read into a plan), Google Places API, Google Routes API, Mapbox geocoding and Open-Meteo.
• The app only accesses the specific file or image you choose. It does not scan your photo library or files.

3.5 Group trips (Blind Budget Match)

• Data: the display name you use in the group, which group trips you belong to, invite codes, and your private budget inputs (maximum budget, currency, must-haves, deal-breakers and stay preference).
• Why: to work out a shared planning budget for the group and generate a group plan that fits it.
• Privacy: your budget amount is never shown to other members, including the organiser. Only the combined, rounded-down group budget is shared. Private budget inputs are processed on our servers (Firebase Cloud Functions) and deleted automatically once they are no longer needed.
• Other members of a group can see your display name and that you have joined or submitted. Group preferences you enter may be used to shape the shared plan.

3.6 Notifications

• Data: your device's push notification token (Firebase Cloud Messaging).
• Why: to send you group-trip updates, for example when a member joins or a plan is ready. Notifications never include anyone's budget amount.
• You can turn notifications off at any time in your device settings.

3.7 Preferences

• Data: your chosen currency.
• Why: to show amounts in your currency. We never auto-convert amounts between currencies.

3.8 Support requests

• Data: your email address and whatever you include in your message when you contact us.
• Why: to answer your question or handle your request (for example a deletion or access request).

3.9 App configuration

The app downloads configuration settings from Firebase Remote Config. This does not require any personal information from you.

4. Website and early-access list

• Early-access list: if you join our waitlist on tripxcursion.com, we collect your email address and the anti-spam check you complete. Our server may also record technical information such as your IP address and the time of the request to prevent abuse. We use your email only to tell you when Tripxcursion launches and for closely related product announcements. Every email includes an unsubscribe option, and you can ask us to remove your email at any time.
• Theme preference: the website stores your light or dark theme choice in your browser's local storage. It is never sent to us.
• Fonts: the website loads fonts from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google.
• The website does not use advertising or analytics cookies.

5. How we use AI

Tripxcursion uses the Google Gemini API to generate itineraries, read itineraries you submit (text, PDF or images) and suggest destinations. The content sent to Gemini is limited to what the feature needs, such as your trip details, the itinerary you submit, your chosen mood and approximate area. We do not send your password, and we do not send individual private budget amounts to other users.

• Google processes this content under the Gemini API Additional Terms of Service and the Google Privacy Policy. Depending on the service tier used, Google may retain this content for a limited period and use it to detect abuse, and in some tiers to improve its products, which can include review by trained human reviewers.
• Trip Reality Check verdicts are decided by fixed rules using map, opening-hours, routing and weather data. AI is used only to read your itinerary.
• AI-generated suggestions can be incomplete or wrong. We do not use AI output to make decisions that have legal or similarly significant effects on you.

6. Device permissions

You can change these permissions at any time in your device settings.

7. Legal bases for processing

Where data protection laws such as the GDPR or UK GDPR apply, we rely on these legal bases:

• Performance of a contract: to provide your account, trips, Reality Check, group trips and notifications you ask for.
• Consent: for location access, notifications, the early-access mailing list and, in future, personalised ads. You can withdraw consent at any time.
• Legitimate interests: to keep the service secure, prevent spam and abuse, and fix problems, balanced against your rights.
• Legal obligation: where we must keep or disclose information to comply with the law.

Under India's Digital Personal Data Protection Act, 2023, we process your personal data on the basis of your consent or for legitimate uses permitted by that Act.

8. Third-party services

We use the following service providers to run Tripxcursion. They process data only as needed to provide their service, under their own terms and privacy policies. We do not share your personal information with anyone else except where required by law, to protect rights and safety, or as part of a merger or acquisition (in which case this policy will continue to protect your data).

Place information in the app is provided by Google Maps. By using features that show Google Maps content, you are also bound by the Google Maps/Google Earth Additional Terms of Service.

9. Advertising (planned)

Tripxcursion does not currently show ads. We may show ads in a future version. If we do:

• Ads may be provided by a third-party ad network such as Google AdMob.
• The ad network may collect your device's advertising ID, IP address, approximate location, device and app information, and how you interact with ads, to show ads, limit how often you see them, measure performance and prevent fraud.
• Where the law requires it (for example in the European Economic Area, the United Kingdom and Switzerland), we will ask for your consent before showing personalised ads. On iOS, we will ask for permission through Apple's App Tracking Transparency prompt before any tracking. If you do not consent, you may see non-personalised ads instead.
• You can reset your advertising ID or opt out of personalised ads at any time in your device settings (Android: Settings > Google > Ads, or Settings > Security & privacy > Privacy > Ads; iOS: Settings > Privacy & Security > Tracking).
• We will not share your trips, private budgets, imported documents or precise location with advertisers.
• Before ads are enabled, we will update this policy with the name of the ad network and a link to its privacy policy.

10. Subscriptions and in-app purchases (planned)

Tripxcursion is currently free. We may offer paid subscriptions or in-app purchases in a future version. If we do:

• All payments will be handled by Google Play Billing (Android) or the Apple App Store (iOS). We never receive or store your card number or other payment details.
• We will receive and store the purchase information needed to give you access to paid features, such as the product purchased, order or transaction ID, purchase date, subscription status and renewal or expiry date.
• You can manage or cancel a subscription at any time in your Google Play or App Store account settings.
• Deleting your Tripxcursion account does not cancel an active subscription. Please cancel it in Google Play or the App Store first.
• Refunds are handled under Google Play's or Apple's refund policies.

11. What we do not do

• We do not use analytics or crash-reporting tools in the app.
• We do not currently show ads or use advertising identifiers (see section 9 for our plans).
• We do not collect your location in the background.
• We do not access your contacts, camera roll or files beyond the specific items you choose.
• We do not sell your personal information, and we do not "share" it for cross-context behavioural advertising as defined by California law.

12. How long we keep data

• Account, profile, trips, saved trips and mood history: until you delete them or delete your account.
• Private group-trip budget inputs: deleted automatically once the group's budget match no longer needs them (old inputs are cleaned up daily), and always when you leave the group, the trip is cancelled or you delete your account.
• Reality Check submissions: used to produce your result; the checked plan is kept only if you save it.
• Push notification token: until you sign out, uninstall the app or delete your account.
• Early-access email: until you unsubscribe or ask us to remove it.
• Support emails: for as long as needed to resolve your request and keep a record of it, normally no longer than 24 months.

We may keep limited information for longer where the law requires it (for example records of purchases, if paid features are introduced) or to resolve disputes and enforce our terms.

13. Deleting your account and data

You can delete your account and all of your data at any time from inside the app:

Profile > Delete account

This permanently deletes:

• your sign-in account
• your profile, currency preference and mood history
• your trips and saved trips
• your group-trip memberships and private budget inputs
• your push notification token

If you are the organiser of a group trip, that trip is cancelled for all members and everyone's private budgets for it are deleted. Deletion happens immediately and cannot be undone.

If you cannot access the app, you can request deletion on our account deletion page or by emailing hello@tripxcursion.com from the email address linked to your account. We will verify the request and delete your account and data within 30 days.

14. Security

Your data is stored on Google Firebase servers and transmitted over encrypted connections (HTTPS/TLS). Access is restricted by security rules so only you can read your private data, and private group budgets are only processed on the server. No method of storage or transmission is completely secure, but we work to protect your information and will notify you and the relevant authorities of a personal data breach where the law requires.

15. Your rights

Depending on where you live (for example under the GDPR in Europe, the UK GDPR, India's DPDP Act 2023, or the CCPA/CPRA in California), you may have the right to:

• access the personal data we hold about you
• correct inaccurate or incomplete data
• delete your data
• object to or restrict certain processing
• receive a copy of your data in a portable format
• withdraw consent at any time (for example to location access, notifications or personalised ads), without affecting processing that already happened
• nominate another person to exercise your rights in the event of death or incapacity (India)
• not be discriminated against for exercising your rights (California)
• complain to your local data protection authority or the Data Protection Board of India

To exercise any of these rights, email hello@tripxcursion.com. We may need to verify your identity, and we will respond within the time required by applicable law (normally within 30 days).

16. International data transfers

Tripxcursion is available worldwide. Our service providers may process your data in countries other than your own, including the United States. Where required, these transfers are protected by appropriate safeguards such as the European Commission's standard contractual clauses used by our providers.

17. Age requirement and children

Tripxcursion is intended for adults. You must be at least 18 years old to create an account or use the app. The app is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us personal information, contact us and we will delete it.

18. Changes to this policy

We may update this policy from time to time, for example when we introduce ads or subscriptions. We will change the "Last updated" date above and, for significant changes, notify you in the app or by email before the change takes effect.

19. Contact and grievance officer

If you have questions about this policy or your data, or a complaint about how we handle it, contact:

Company

Techcolline Solutions (Tripxcursion)

Email

hello@tripxcursion.com

Grievance Officer

Reachable at hello@tripxcursion.com with the subject "Grievance". We acknowledge grievances within 24 hours and aim to resolve them within 15 days.