TripKit Privacy Policy

Last updated: 9 July 2026

Summary

TripKit is a local-first travel app. By default your data stays on your device. An account, cloud backup, shared trips, and public trip pages are all optional features you choose to turn on. We do not sell your data and we do not track you across other apps or websites.

What is stored on your device

• Trips: itineraries, day notes, photos, and attachments you add.
• Trip checklists and their completion state.
• Visited places and wishlist places, including any notes and ratings you add.
• Phrase settings (selected languages, preferences).
• Currency preferences (home currency, recent pairs).
• App preferences (appearance, app icon, selected app language).

By default this stays on your device and is not transmitted to us.

Optional account (Sign in with Apple or Google)

Signing in is optional. If you choose to sign in, we use Firebase Authentication (a Google service) to create and operate your account, and we collect:

• Your email address
• Your name, if provided by Apple or Google
• An account identifier (user ID)

This information is linked to your identity and is used only to run your account and enable cloud backup. It is not used for tracking or advertising.

Optional cloud backup

If you are signed in, you can back up your app content (trips, including their photos and attachments, places, notes, ratings, and settings) so you can restore it on another device. Backups are stored in Google Cloud Firestore and Firebase Storage under your account and are readable only by you. Backup is free and optional. Restoring never overwrites your local data without your explicit confirmation.

Shared trips (optional)

You can share a trip and plan it together with people you invite. When you share a trip or join one:

• The trip's content (itinerary, day notes, photos, attachments, comments, and ideas) is stored in Google Cloud Firestore and Firebase Storage and is visible to the trip's members.
• Your member profile is visible to the other members: your name, email, travel stats (places, completed share, trip count), and your custom avatar if you set one. Your Google or Apple account photo is never used or shared.
• Anyone who has the trip's invite code can join and edit the trip, so share the code only with people you trust.
• An invite link you send carries a small trip preview so the invite page can show who is inviting and to what: the trip's name, your first name, and the trip's dates and place. Only the people you send the link to receive this; the code alone reveals nothing.
• You can leave a shared trip at any time. The trip owner can remove members and can delete the trip for everyone.

Public trip pages (optional)

Each trip has a public link switch, off by default. When you turn it on, a sanitized copy of the trip is published on the web: members' first names only, the trip name, description, dates, places, the day-by-day itinerary, and the photos and attachments you added. Anyone with the link can view that page without an account and can copy the itinerary into their own TripKit. Turning the switch off deletes the public copy, including its photos and attachments.

Reporting and blocking

You can report a comment or a member from any shared trip, and you can block a member to hide their comments from your view. A report is sent to us as an email from your mail app; it includes the reported content and its identifiers so we can investigate, it is not shared with the person you report, and we reply to the email address you send it from. Your blocked list is stored with your account backup and is visible to no one else, including the people you block; they are not notified.

Analytics

We use Firebase Analytics in the app and Google Analytics on tripkit.world to collect anonymous, aggregated usage events (for example, which tab was opened or which feature was used) to understand how TripKit is used and improve it. When you open a booking or activity link, we log only the destination's domain. These events contain no personal information, no place names or note text, and no advertising identifiers. We do not use this data to track you across other apps or websites.

Notifications

Trip reminders (recap prompts, trip anniversaries, and someone-joined alerts) are scheduled locally on your device. You can turn each kind off in Settings, and the system notification permission remains the master switch.

Network requests

• Exchange rates are fetched from third-party rate providers to show conversions and rate-history charts. These requests include only the currency codes being converted, never a personal identifier.
• Phrase content is bundled in the app and works offline; phrase audio is generated on your device.

Data sharing

We do not sell personal data. Data is processed by Google (Firebase Authentication, Firestore, Firebase Storage, and analytics) and by the exchange-rate providers (currency codes only). If you contact us through the support form on tripkit.world, your name, email, and message are delivered to our inbox by a form relay service and used only to answer you. Recap videos are created entirely on your device. Travel sites we link to receive no personal data from us; a link may carry an anonymous partner tag (see the Terms).

Your choices

• You can delete all local app data from Settings > Data > Delete local data.
• You can turn a trip's public link off at any time, which deletes its public page, and you can leave any shared trip.
• You can delete your account in the app; this removes your cloud backup and revokes the Apple or Google sign-in grant. See how to delete your account. Signing out never deletes your local data.
• Uninstalling the app removes local data from your device.

Contact

Email: hello@tripkit.world