Privacy Policy
Viimeksi päivitetty: 8. helmikuuta 2026
PRIVACY POLICY OF TRIPPROF
Last updated: April 2, 2026
This Privacy Policy ("Policy") describes how TripProf ("TripProf", "Company", "we", "us", or "our") collects, uses, discloses, stores, and otherwise processes personal data when you access or use the TripProf mobile applications (Android and iOS), website, and related services (collectively, the "Services").
TripProf provides digital services for travel planning and organization, combining user-provided information, experiences of travelers and travel professionals, and artificial intelligence-based recommendations, resulting in personalized trip reports and related features.
This Policy is designed to comply with:
EU General Data Protection Regulation (GDPR),
UK GDPR,
California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA),
and other applicable international data protection and privacy laws.
1. Data Controller
For the purposes of applicable data protection laws, TripProf acts as the data controller with respect to personal data processed through the Services.
Contact details:
Email: [email protected]
Publisher: Tripprof OÜ, registry code 17464057
Address: Ahtri 12, 15551 Tallinn, Estonia
2. Scope of This Policy
This Policy applies to:
Registered and unregistered users of the Services,
Mobile applications (Android and iOS),
Web platform,
All features, including Trip Planning, Trip Reports, Memories, Expenses, Checklists, and related functionalities.
This Policy does not apply to third-party services, websites, or platforms that may be linked from the Services.
3. Categories of Personal Data We Collect
3.1 Data You Provide When Creating an Account
Mandatory information:
First name
Year of birth
Gender
City or hometown (used for timezone and regional settings)
Email address
Password (or authentication token)
Optional information:
Last name
Day and month of birth
Profile photo
Country of residence
Country of citizenship or residency
Dietary preferences (Diet Type, Food Allergies)
Religious or ethical requirements
Accessibility requirements
Environmental sensitivities
System preferences (language, theme, font size, measurement units, currency, timezone)
Push notification preferences
Any other information you choose to provide
3.2 Trip Planning and Travel-Related Data
Mandatory trip planning data:
Trip title
Type of trip
Destination(s)
Travel dates
Budget level
Activity pace
Optional trip planning data:
Trip description
Trip participants and relationship to you
Pets information
Accommodation preferences
Interests
Special occasions
Transportation details
Dietary, religious, accessibility, and environmental preferences
Additional notes and preferences
You may add multiple travelers. For each traveler, you may voluntarily provide personal and travel-related information similar to your own (excluding system settings).
3.3 Trip Reports and Generated Content
Based on the data you provide and your selected options, TripProf generates Trip Reports, which may include:
Events
Restaurants
Shopping spots
Attractions
Accommodations
Recommended applications
Cultural tips (dos and don'ts, tipping guides, iconic dishes, etc.)
Some sections are free, while others are available on a paid basis.
3.4 Payments and Subscriptions
TripProf does not store full payment card details.
Payments are processed exclusively by Stripe, including:
Credit purchases,
Monthly or annual subscriptions,
Visa, Mastercard, Maestro, American Express,
Apple Pay and Google Pay.
Stripe acts as an independent data controller for payment data and processes such data in accordance with its own privacy policies.
3.5 Memories Section
Users may store personal travel memories, including:
Locations,
Descriptions and notes,
Personal photos,
Information about trip participants.
User Responsibility:
You agree not to upload:
Pornographic or 18+ content,
Content that is hateful, discriminatory, offensive, or unlawful.
TripProf does not review, moderate, or assume responsibility for user-uploaded content and disclaims all liability related thereto.
3.6 Tickets, Bookings, and Documents
You may voluntarily upload:
Flight or transport tickets,
Event or museum tickets,
Accommodation bookings,
Copies of related documents.
Such data is provided entirely at your discretion.
TripProf:
Does not verify accuracy or authenticity,
Does not provide guarantees,
Bears no responsibility for errors, losses, or consequences arising from such information.
3.7 Checklists and Expenses
Checklists: personal reminders for documents, items, or tasks related to a trip.
Expenses: notes on past or planned expenses and budget preferences.
These features are informational only and do not constitute financial, tax, or investment advice.
3.8 Technical and Usage Data
We automatically collect limited technical data, including:
Device and operating system information,
Application usage data,
Crash and error logs (via Sentry),
Behavioral analytics (via PostHog, cloud-based).
4. Use of Artificial Intelligence
TripProf uses artificial intelligence models and traveler/professional experience data to generate recommendations and reports.
All outputs are:
Informational and advisory only,
Not guaranteed to be accurate, complete, or up to date,
Not a substitute for professional, legal, medical, or safety advice.
TripProf disclaims all liability for decisions made based on AI-generated content.
5. Legal Bases for Processing (GDPR)
We process personal data based on:
Performance of a contract,
User consent,
Legal obligations,
Legitimate interests, including service improvement, security, fraud prevention, and product analytics.
Where you voluntarily provide data revealing dietary, accessibility, or health-related preferences, we process this data based on your explicit consent (Article 9(2)(a) GDPR), which you provide by actively choosing to submit such information. You may withdraw this consent at any time by deleting the relevant data from your profile or trip preferences.
6. Cookies and Similar Technologies
TripProf does not use traditional HTTP cookies.
Instead, we use:
localStorage / sessionStorage (web),
AsyncStorage (mobile apps),
MMKV (
react-native-mmkv) as high-performance mobile cache storage.
These are considered "similar technologies" under applicable laws and are used strictly for:
Authentication,
Preferences,
Application functionality,
Offline data caching.
7. Data Sharing and Disclosure
We may share personal data with third-party service providers acting as data processors on our behalf for the following purposes:
cloud hosting, database management, authentication, file storage, and application infrastructure;
payment processing;
product analytics and performance monitoring;
error tracking and crash reporting;
location-based functionality;
authentication and identity services;
push notifications, application updates, and related operational services;
provision of AI-enabled features.
Some of these service providers are located within the European Union, while others are located outside the European Economic Area, including in the United States.
Where personal data is transferred to third countries that do not provide an adequate level of data protection, such transfers are carried out in accordance with applicable data protection laws and are subject to appropriate safeguards, including Standard Contractual Clauses (SCCs).
We may also disclose personal data to public authorities where required to do so by law.
We do not sell personal data.
8. International Data Transfers
Personal data may be processed in jurisdictions other than your country of residence.
Some of our service providers operate infrastructure within the European Union and process personal data exclusively within the EU.
In certain cases, we engage third-party service providers located outside the European Economic Area, including in the United States, for purposes such as payment processing, analytics, customer support, authentication, and the provision of AI-enabled features.
Where personal data is transferred to countries that do not provide an adequate level of data protection under applicable law, such transfers are carried out in accordance with appropriate safeguards, including the use of Standard Contractual Clauses (SCCs) or equivalent mechanisms recognized under applicable data protection laws
9. Data Retention
Account data is retained while your account is active.
Upon account deletion:
Data is deleted from active systems within 24 hours.
During this 24-hour period, you may restore your account.
Automated encrypted backups are purged in accordance with standard infrastructure retention cycles (up to 7 days).
Some data may be retained longer where required by law or for legitimate interests.
10. Your Rights
Depending on your jurisdiction, you may have the right to:
Access your data,
Rectify inaccuracies,
Erase data,
Restrict or object to processing,
Data portability,
Withdraw consent,
Opt-out of sale or sharing (CCPA/CPRA),
Lodge a complaint with a supervisory authority.
If you are located in the EU, you have the right to lodge a complaint with your local supervisory authority. The supervisory authority for Tripprof OÜ is:
Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate)
Tatari 39, 10134 Tallinn, Estonia
Requests may be submitted to [email protected].
11. Security
We implement appropriate technical and organizational security measures.
However, no system is completely secure, and we cannot guarantee absolute security.
12. Children
The Services are not intended for children under 16 (or the minimum age required by applicable law). We do not knowingly collect such data.
13. Changes to This Policy
We may update this Policy from time to time.
Material changes will be communicated through the Services.
14. Contact Us
For questions or requests regarding this Policy: