Privacy policy
Effective 14 September 2026. Applies to the TipiTrip mobile app and this website.
TipiTrip is built to need as little about you as possible. There is no account, no email sign-up and no advertising. This page lists everything the app handles and why.
What the app collects
- An anonymous device identifier
- A random ID created on your phone the first time the app opens. It is not tied to your name, email or Apple/Google account. It is used to keep your credit balance and to match a purchase to your device.
- Your location, only while you plan
- When you use Plan Now, or ask for places near you, the app sends your current position to our server so it can find nearby places and routes. The position is used for that request and is not kept as a history of where you have been. You can decline location access; guided trip planning works without it.
- Your trip inputs
- Destination, dates, who is travelling (for example the ages of children), walking preference, and the changes you ask for. They are needed to build the plan. Saved plans are stored on your phone.
- Household profile
- If you tick "Remember for next time", the app keeps your party details on the device so the next intake is prefilled. You can clear it from the Profile screen.
- Purchases
- Credit packs are sold by Apple or Google through their in-app purchase systems. We never see your card. We receive a purchase event with the product bought and your device identifier so we can add the credits.
- Usage events
- The app records a small set of product events, such as "plan generated" or "purchase completed", against the device identifier. We use them to see where the flow breaks and to count usage. They contain no names, contacts or message text.
The website waitlist
If you leave your email on tipitrip.com, we store it (and the time you signed up) in a database hosted by Cloudflare, and use it for one launch announcement and, if you ask, a test invite. Reply to any message, or email support, and we delete it.
Who processes data for us
| Service | Purpose | Data involved |
|---|
| Cloudflare (Workers, D1, Workers AI) | Runs our server and the AI that writes plans; stores credit balances and purchase records | Device identifier, trip inputs, balances |
| Google Maps Platform (Places, Routes, Weather) | Finds real places, travel times and forecasts | Search text, coordinates and dates from your trip; sent by our server, not from your phone |
| Apple App Store / Google Play, via RevenueCat | Sells credit packs and reports purchases to us | Purchase events with product and device identifier |
| PostHog (EU cloud) | Product analytics | Usage events with device identifier |
| Booking.com, via Travelpayouts | Hotel search links you can choose to open | Nothing until you tap a link; then Booking.com's own policy applies, and the link carries our affiliate marker |
What we do not do
- We do not sell or rent data.
- We do not use data for advertising or track you across other apps or sites.
- We do not collect names, email addresses, contacts, photos or precise location history.
How long we keep things
Plans and profile live on your phone until you delete them or the app. On our server, the credit balance and purchase records for a device identifier are kept while that device has a balance, and for as long as store rules require us to be able to answer refund events. Usage events are kept for up to 24 months.
Your choices and rights
- Location: allow or deny in your phone's settings at any time.
- Delete on device: uninstalling the app removes plans, profile and the device identifier. Note that credits are tied to that identifier; use "Restore purchases" after reinstalling to move a paid balance to the new identifier.
- Delete on our server: email support@tipitrip.com from the app's Support screen and we will erase the balance, purchase and usage records for your device identifier.
- If you are in the EU/EEA or UK you also have the rights of access, rectification, restriction, portability and objection, and the right to complain to your data protection authority.
Children
TipiTrip is for parents and carers planning trips. It is not directed at children and we do not knowingly collect data from anyone under 13. Children's ages you enter are trip parameters, not profiles of your children.
Changes
If this policy changes in a way that matters, the app will show the new version before you plan again, and the date at the top of this page will change.
Contact
TipiTrip, support@tipitrip.com.