Privacy Policy

Last updated: February 7, 2026

Introduction

TripStash ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

Please read this Privacy Policy carefully. By using TripStash, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

When you create an account using Apple Sign-In, we collect:

  • Email address (as provided by Apple)
  • Name (optional, if you choose to provide it)
  • Profile image (optional)

Content You Create

When you use TripStash, we store:

  • Places: Location names, addresses, coordinates, ratings, and any notes you add
  • Trips: Trip names, destinations, dates, itineraries, and notes
  • Extraction History: URLs you submit for place extraction and the results

Technical Information

We automatically collect:

  • Device push notification tokens (for sending you notifications)
  • Session information (IP address, user agent) for security purposes

Information We Do NOT Collect

  • We do not access your device's GPS location
  • We do not access your camera or microphone
  • We do not access your contacts or photos library
  • We do not use analytics or behavioral tracking SDKs
  • We do not serve advertisements

How We Use Your Information

We use your information to:

  • Provide and maintain the TripStash service
  • Process URLs you submit to extract place information
  • Store and organize your saved places and trips
  • Send push notifications when extractions are complete
  • Manage your subscription and account
  • Respond to your support requests
  • Improve and optimize our service

AI-Powered Place Extraction

When you submit a URL from TikTok, Instagram, YouTube, or other supported platforms, our service uses artificial intelligence to analyze the content and extract place information.

  • Processing: Video content is analyzed using Google's Gemini AI to identify locations, restaurants, and attractions mentioned
  • Temporary Processing: Video files are processed temporarily and are NOT stored on our servers
  • Verification: Extracted places are verified against Google Places API for accuracy
  • Your Control: You review and approve which extracted places to save to your account

Third-Party Services

We use the following third-party services to operate TripStash:

Apple Sign-In

For secure authentication. Apple's privacy policy applies to this service.

Google Places API

To verify and enrich place information with ratings, hours, and photos.

Google Generative AI (Gemini)

To analyze video content and extract place information.

RevenueCat

To manage subscriptions and in-app purchases securely.

Expo Push Notifications

To deliver notifications when your extractions are complete.

Unsplash

To provide cover images for your trips.

Neon PostgreSQL

For secure, encrypted database storage.

Data Storage and Security

We take the security of your data seriously:

  • All data is transmitted over HTTPS encryption
  • Authentication tokens are stored in iOS Keychain (encrypted storage)
  • Your data is stored in secure, encrypted databases
  • We use industry-standard security practices
  • Your data is isolated and only accessible to your account

Data Retention

We retain your data for as long as your account is active. You can delete individual places and trips at any time. When you delete your account, all associated data is permanently deleted, including:

  • Your profile information
  • All saved places and their sources
  • All trips and itineraries
  • All extraction history
  • All session data

Your Rights

You have the right to:

  • Access: View all data associated with your account within the app
  • Correction: Edit your places, trips, and profile information
  • Deletion: Delete individual items or your entire account
  • Portability: Your data is accessible through the app interface

To exercise these rights or for any privacy-related questions, contact us at [email protected].

Children's Privacy

TripStash is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us: