Privacy policy

TrippyDory is a trip planner for Android and the web, run by Nikola Zivanovic (Bulevar Kralja Petra I 27, Novi Sad, 21000, Serbia). This policy explains what it stores about you, why, who else is involved in handling it, and how to have it deleted. Questions: trippydory@gmail.com.

What TrippyDory stores

• Your account: username, email address, first and last name, birthday and nationality (if you give them), and a password, which is stored only as a one-way hash.
• If you sign in with Google: your Google account’s ID, to recognise it next time, and the name, email address and profile photo Google gives when you sign up with it. Nothing else from your Google account.
• Your profile photo, if you add one.
• Your trips: destinations, dates, where you stay (address and location), how you arrive and leave, the places and activities you plan, ideas and votes, and your budgets and expenses.
• Bookings: booking references and files (tickets, confirmations) you add to your plans.
• Journal photos you add to the days of a trip, with their captions.
• Travel documents (photos of passports, IDs, visas, boarding passes, tickets), if you add them. They’re encrypted (AES-256-GCM) before they’re stored, and only you can see them.
• Friends and sharing: who you’re friends with, which trips you share with whom, and which trips you show in Explore.
• Pro: whether you have a subscription or trip pass, until when, and how many AI plans you’ve used. Card and payment details are handled by Google Play or Paddle, never by TrippyDory.
• Notifications: if you allow them in the app, a token for your phone, and which notifications you want. It’s forgotten when you log out.
• Your language, so notifications that others’ actions send you are in it.

The website keeps your login, and your choice of language and appearance, in your browser’s storage. It doesn’t use cookies for tracking. TrippyDory doesn’t track your device’s location, show ads, use analytics, or sell or share your data for advertising.

Who sees your trips

Your trips are private until you share them. Friends you share a trip with see its plan and journal; those you add as travelling with you also see it among their trips. If you show a finished trip in Explore, everyone on TrippyDory can see its places and dates, but not your own notes, bookings or documents, and not where you stayed unless you choose to show it.

Why

Only to run TrippyDory: to let you log in, plan and show your trips, suggest plans with AI, share trips with the people you choose, give you Pro when you’ve paid for it, tell you about friend requests and shared trips, and email you a welcome and the codes for signing up and resetting your password.

Who else handles it

• Render runs TrippyDory’s server, Supabase hosts its database, and Cloudflare hosts the website and stores booking files and journal photos.
• Google Maps Platform provides place search, place details, photos, travel times and maps. For these, Google receives what’s needed to answer: what you search for, and the locations of the places, your stay and the legs between them.
• Google Gemini makes AI plans and suggestions. When you ask for one, it receives the trip’s cities and dates, the area where you stay, what’s already planned, the kinds of places you like, and anything you write for it (such as must-see places or notes). Not your name or contact details.
• Visual Crossing provides weather forecasts, receiving only the destination’s location.
• Wikimedia provides some places’ photos, receiving only the place’s name and location.
• Gmail sends TrippyDory’s emails.
• Firebase Cloud Messaging (Google) delivers notifications to your phone, receiving its token and the notification’s text.
• Google Sign-In, if you use it, confirms which Google account you are.
• Google Play and RevenueCat handle Pro bought in the Android app, and Paddle (our reseller and merchant of record) handles Pro bought on the web, with the details needed to take payment and send receipts.

Google’s privacy policy: policies.google.com/privacy. Everything travels over encrypted connections (HTTPS).

How long it’s kept, and deleting it

Your data is kept for as long as you have an account. Deleting your account deletes all of it for good: in the app or on the web under Profile → Delete account, or at myperfecttrip.onrender.com/account/delete. Trips you shared stop being visible to your friends. You can also delete single trips, photos, files and travel documents at any time. Payment records kept by Google Play or Paddle follow their own retention rules.

Your rights

You can see and change your details in the app, and delete them as above. To ask for a copy of your data or about anything else in this policy, email trippydory@gmail.com.

Children

TrippyDory isn’t meant for children under 13, and doesn’t knowingly collect their data.

Changes

If this policy changes, the new version is published here with a new date. See also the terms of service.