Privacy Policy

Laatst bijgewerkt: 8 februari 2026

PRIVACY POLICY OF TRIPPROF

Last updated: April 2, 2026

This Privacy Policy ("Policy") describes how TripProf ("TripProf", "Company", "we", "us", or "our") collects, uses, discloses, stores, and otherwise processes personal data when you access or use the TripProf mobile applications (Android and iOS), website, and related services (collectively, the "Services").

TripProf provides digital services for travel planning and organization, combining user-provided information, experiences of travelers and travel professionals, and artificial intelligence-based recommendations, resulting in personalized trip reports and related features.

This Policy is designed to comply with:

  • EU General Data Protection Regulation (GDPR),

  • UK GDPR,

  • California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA),

  • and other applicable international data protection and privacy laws.

1. Data Controller

For the purposes of applicable data protection laws, TripProf acts as the data controller with respect to personal data processed through the Services.

Contact details:

  • Email: [email protected]

  • Publisher: Tripprof OÜ, registry code 17464057

  • Address: Ahtri 12, 15551 Tallinn, Estonia

2. Scope of This Policy

This Policy applies to:

  • Registered and unregistered users of the Services,

  • Mobile applications (Android and iOS),

  • Web platform,

  • All features, including Trip Planning, Trip Reports, Memories, Expenses, Checklists, and related functionalities.

This Policy does not apply to third-party services, websites, or platforms that may be linked from the Services.

3. Categories of Personal Data We Collect

3.1 Data You Provide When Creating an Account

Mandatory information:

  • First name

  • Year of birth

  • Gender

  • City or hometown (used for timezone and regional settings)

  • Email address

  • Password (or authentication token)

Optional information:

  • Last name

  • Day and month of birth

  • Profile photo

  • Country of residence

  • Country of citizenship or residency

  • Dietary preferences (Diet Type, Food Allergies)

  • Religious or ethical requirements

  • Accessibility requirements

  • Environmental sensitivities

  • System preferences (language, theme, font size, measurement units, currency, timezone)

  • Push notification preferences

  • Any other information you choose to provide

3.2 Trip Planning and Travel-Related Data

Mandatory trip planning data:

  • Trip title

  • Type of trip

  • Destination(s)

  • Travel dates

  • Budget level

  • Activity pace

Optional trip planning data:

  • Trip description

  • Trip participants and relationship to you

  • Pets information

  • Accommodation preferences

  • Interests

  • Special occasions

  • Transportation details

  • Dietary, religious, accessibility, and environmental preferences

  • Additional notes and preferences

You may add multiple travelers. For each traveler, you may voluntarily provide personal and travel-related information similar to your own (excluding system settings).

3.3 Trip Reports and Generated Content

Based on the data you provide and your selected options, TripProf generates Trip Reports, which may include:

  • Events

  • Restaurants

  • Shopping spots

  • Attractions

  • Accommodations

  • Recommended applications

  • Cultural tips (dos and don'ts, tipping guides, iconic dishes, etc.)

Some sections are free, while others are available on a paid basis.

3.4 Payments and Subscriptions

TripProf does not store full payment card details.

Payments are processed exclusively by Stripe, including:

  • Credit purchases,

  • Monthly or annual subscriptions,

  • Visa, Mastercard, Maestro, American Express,

  • Apple Pay and Google Pay.

Stripe acts as an independent data controller for payment data and processes such data in accordance with its own privacy policies.

3.5 Memories Section

Users may store personal travel memories, including:

  • Locations,

  • Descriptions and notes,

  • Personal photos,

  • Information about trip participants.

User Responsibility:
You agree not to upload:

  • Pornographic or 18+ content,

  • Content that is hateful, discriminatory, offensive, or unlawful.

TripProf does not review, moderate, or assume responsibility for user-uploaded content and disclaims all liability related thereto.

3.6 Tickets, Bookings, and Documents

You may voluntarily upload:

  • Flight or transport tickets,

  • Event or museum tickets,

  • Accommodation bookings,

  • Copies of related documents.

Such data is provided entirely at your discretion.

TripProf:

  • Does not verify accuracy or authenticity,

  • Does not provide guarantees,

  • Bears no responsibility for errors, losses, or consequences arising from such information.

3.7 Checklists and Expenses

  • Checklists: personal reminders for documents, items, or tasks related to a trip.

  • Expenses: notes on past or planned expenses and budget preferences.

These features are informational only and do not constitute financial, tax, or investment advice.

3.8 Technical and Usage Data

We automatically collect limited technical data, including:

  • Device and operating system information,

  • Application usage data,

  • Crash and error logs (via Sentry),

  • Behavioral analytics (via PostHog, cloud-based).

4. Use of Artificial Intelligence

TripProf uses artificial intelligence models and traveler/professional experience data to generate recommendations and reports.

All outputs are:

  • Informational and advisory only,

  • Not guaranteed to be accurate, complete, or up to date,

  • Not a substitute for professional, legal, medical, or safety advice.

TripProf disclaims all liability for decisions made based on AI-generated content.

5. Legal Bases for Processing (GDPR)

We process personal data based on:

  • Performance of a contract,

  • User consent,

  • Legal obligations,

  • Legitimate interests, including service improvement, security, fraud prevention, and product analytics.

Where you voluntarily provide data revealing dietary, accessibility, or health-related preferences, we process this data based on your explicit consent (Article 9(2)(a) GDPR), which you provide by actively choosing to submit such information. You may withdraw this consent at any time by deleting the relevant data from your profile or trip preferences.

6. Cookies and Similar Technologies

TripProf does not use traditional HTTP cookies.

Instead, we use:

  • localStorage / sessionStorage (web),

  • AsyncStorage (mobile apps),

  • MMKV (react-native-mmkv) as high-performance mobile cache storage.

These are considered "similar technologies" under applicable laws and are used strictly for:

  • Authentication,

  • Preferences,

  • Application functionality,

  • Offline data caching.

7. Data Sharing and Disclosure

We may share personal data with third-party service providers acting as data processors on our behalf for the following purposes:

  • cloud hosting, database management, authentication, file storage, and application infrastructure;

  • payment processing;

  • product analytics and performance monitoring;

  • error tracking and crash reporting;

  • location-based functionality;

  • authentication and identity services;

  • push notifications, application updates, and related operational services;

  • provision of AI-enabled features.

Some of these service providers are located within the European Union, while others are located outside the European Economic Area, including in the United States.

Where personal data is transferred to third countries that do not provide an adequate level of data protection, such transfers are carried out in accordance with applicable data protection laws and are subject to appropriate safeguards, including Standard Contractual Clauses (SCCs).

We may also disclose personal data to public authorities where required to do so by law.

We do not sell personal data.

8. International Data Transfers

Personal data may be processed in jurisdictions other than your country of residence.

Some of our service providers operate infrastructure within the European Union and process personal data exclusively within the EU.

In certain cases, we engage third-party service providers located outside the European Economic Area, including in the United States, for purposes such as payment processing, analytics, customer support, authentication, and the provision of AI-enabled features.

Where personal data is transferred to countries that do not provide an adequate level of data protection under applicable law, such transfers are carried out in accordance with appropriate safeguards, including the use of Standard Contractual Clauses (SCCs) or equivalent mechanisms recognized under applicable data protection laws

9. Data Retention

  • Account data is retained while your account is active.

  • Upon account deletion:

    • Data is deleted from active systems within 24 hours.

    • During this 24-hour period, you may restore your account.

    • Automated encrypted backups are purged in accordance with standard infrastructure retention cycles (up to 7 days).

Some data may be retained longer where required by law or for legitimate interests.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your data,

  • Rectify inaccuracies,

  • Erase data,

  • Restrict or object to processing,

  • Data portability,

  • Withdraw consent,

  • Opt-out of sale or sharing (CCPA/CPRA),

  • Lodge a complaint with a supervisory authority.

If you are located in the EU, you have the right to lodge a complaint with your local supervisory authority. The supervisory authority for Tripprof OÜ is:

  • Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate)

  • Tatari 39, 10134 Tallinn, Estonia

  • https://www.aki.ee

Requests may be submitted to [email protected].

11. Security

We implement appropriate technical and organizational security measures.
However, no system is completely secure, and we cannot guarantee absolute security.

12. Children

The Services are not intended for children under 16 (or the minimum age required by applicable law). We do not knowingly collect such data.

13. Changes to This Policy

We may update this Policy from time to time.

Material changes will be communicated through the Services.

14. Contact Us

For questions or requests regarding this Policy:

[email protected]

Versie 21 · EN