Legal

Privacy Policy

Travel Plan · Last updated: October 9, 2026

This Privacy Policy explains how Travel Plan ("we", "us", or "our") collects, uses, and protects your information when you use our mobile application.

1. Information We Collect

We collect the following types of information:

Account information: your full name, email address and password (stored securely via Supabase Auth). Your name and profile photo are shown to the members of your trips; your email address is not.
Trip data: trips, itinerary items, expenses, reservations, and checklists you create inside the app.
Photos and files: images or documents you choose to add to a trip's photo gallery, the trip cover, expenses (receipts), reservations or trip documents, and your profile photo. They are uploaded to private cloud storage (trip gallery photos to Amazon S3, the rest to Supabase), only the members of the trip can see them (your profile photo is shown to the members of your trips), and they are never shared with third parties.
Error reports: if the app hits an unexpected error, it sends a technical report (error message, the screen where it happened, app version and device/OS type) linked to your account, so we can fix it. Reports are deleted after 90 days.
Reports: if you report a trip member, we store the report (reason, optional details, the trip and both accounts) so we can review it. The reported person isn't told who reported them.
Blocks: if you block someone, we store that block (both accounts and the date) so they can't join new trips you're in. The blocked person gets no notice; if they try to join one of your trips, they're only told that someone in it blocked them, never who. You can unblock people anytime in Profile → Blocked users.
Last activity: the date and time you last opened the app, used to send you reminders if you have chosen to receive them.
Device permissions: camera and photo library access, requested only when you choose to add a photo.

2. How We Use Your Information

To provide and sync your travel plans across devices.
To allow collaboration with trip members you explicitly invite.
To display and export your trip data (PDF summaries, shared itineraries).
To send you notifications about your trips and, only if you accept them, reminders and ideas for your next trip.
To send you account emails: sign-up confirmation, password reset links and security notices (for example, when your password is changed). We don't send marketing emails.
We don't use analytics, advertising or tracking tools. The only usage information we record is the error reports and the last-activity date described above.

3. Data Storage & Security

Your data is stored on Supabase infrastructure, hosted on servers located in the United States, which uses industry-standard encryption in transit (TLS) and at rest. We do not sell, rent, or trade your personal information to any third party.

4. Data Sharing

We do not share your personal data with third parties except:

With other trip members — only data explicitly shared within a trip you created or joined.
As required by law or to protect our legal rights.

5. Camera & Photo Library

Travel Plan requests access to your camera and photo library solely to let you add photos to a trip's photo gallery, the trip cover, expenses, reservations and your profile photo. Photos are uploaded to private storage and are only accessible to members of the trip they belong to. We never access your photo library beyond the specific images you select.

6. Data Retention & Deletion

Your data is retained as long as your account is active. You may delete your account at any time from the app (Profile → Delete account) or by contacting us at the email below. Deleting your account permanently erases your account, your profile and everything you added: trips where you are the only member and, in shared trips, the expenses you paid, your share of other members' expenses, payments, photos, files, reservations, polls, votes and activity history, together with the notifications that mention you and your error reports. Shared trips you created are handed over to another member, without your content. This cannot be undone.

7. Children's Privacy

You must be at least 16 years old to use Travel Plan (see the Terms and Conditions). We do not knowingly collect personal information from anyone under 16. If you believe someone younger has provided us with personal information, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via the app or by updating the "Last updated" date above.

9. Subscriptions & Payments

Travel Plan offers an optional Premium subscription billed monthly. Purchases and auto-renewing subscriptions are processed by Apple through your App Store account — we never receive or store your payment card details. We use RevenueCat to manage and validate subscription status; RevenueCat receives a non-identifying app user ID and the purchase/receipt information from Apple in order to keep your Premium status in sync across your devices. Your subscription renews automatically unless cancelled at least 24 hours before the end of the current period. You can manage or cancel it anytime in your device's Settings → Apple Account → Subscriptions.

10. Other Service Providers

To operate specific features, the following providers receive limited data:

Visual Crossing (weather): receives the location of a trip's destination (its coordinates, or its name if the coordinates are not available) and the trip dates so it can return the forecast. The request goes through our server, so your account information and your device are not sent to them.
GeoNames (place search): receives the place names you type when you search for a destination, and the place names of a trip when its map or forecast is shown, so it can return location results. The request goes through our server, so your account information and your device are not sent to them.
Amazon Web Services (Amazon S3): stores the photos of each trip's gallery in a private bucket in the United States. Only members of the trip get access to them, through links that expire, and a photo's files are deleted when the photo, its trip or your account is deleted.
Amazon Web Services (Amazon SES): sends the account emails (sign-up confirmation, password reset and security notices) from no-reply@jointrip.app on behalf of Supabase. It receives your email address and the content of those messages, only to deliver them. If an email to your address bounces or is marked as spam, Amazon SES keeps your address on a suppression list so we don't email it again, and we receive a notice with your address and the reason so we can review it. You can ask us to remove your address from that list at any time.
EmailJS (support form): when you send a message through the in-app support form or report a trip member, your message or report, your name and your email address are delivered to us through EmailJS.
Apple Push Notification service: if you enable notifications, a device push token is stored with your account and used only to deliver trip updates and reminders to your device. Reminders and ideas for your next trip are only sent if you accept them in the app, and you can turn them off anytime in Profile.

11. International Data Transfers

Travel Plan is operated from Uruguay, and our service providers (Supabase, Amazon Web Services, RevenueCat and others listed above) process data on servers located in the United States. This means your personal data is transferred to, and stored in, a country other than the one where you live.

If you are in the European Economic Area, the United Kingdom or Switzerland, these transfers are protected by data processing agreements with each provider that include the European Commission's Standard Contractual Clauses, together with the security measures described in Section 3. You may ask us for access to, correction of, or deletion of your data, object to or restrict its processing, or request a copy of it, at any time by contacting us at the email below. You can also delete your account directly in the app (see Section 6).

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at:
travelappdev2026@gmail.com