Skip to content
TripTap

TripTap Privacy Policy

Effective date: 22 July 2026

This Privacy Policy explains how TripTap (“TripTap,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects information when you use the TripTap mobile application, related websites, services, artificial-intelligence features, and support channels, collectively referred to as the “Service.”

TripTap is operated from the Republic of Moldova. For privacy questions or requests, contact us at support@triptap.app.

By using the Service, you acknowledge the practices described in this Privacy Policy. Where consent is required by applicable law, we will request it separately through the Service or your device settings.

1. Scope

This Privacy Policy applies to information processed through TripTap.

It does not govern third-party websites, applications, social-media platforms, mapping providers, payment services, or other services that may be linked to or integrated with TripTap. Those third parties process information under their own terms and privacy policies.

2. Information We Collect

Depending on how you use TripTap, we may collect the following categories of information.

2.1 Account and identity information

We may collect:

  • Email address;
  • Display name;
  • Profile biography;
  • Avatar or profile photo;
  • Google account identifier or Apple account identifier when you use third-party sign-in;
  • Age range;
  • Travel preferences;
  • Interests; and
  • Account creation date.

When you use Sign in with Apple, Apple may provide a private relay email address instead of your regular email address.

2.2 Authentication and session information

To keep you signed in and protect your account, we process authentication and session information, including:

  • Access tokens;
  • Refresh tokens;
  • Token status and expiration information;
  • Authentication-provider information; and
  • Session and security records.

Access tokens generally expire after approximately one hour. Refresh tokens are hashed before storage and are generally configured for automatic deletion after approximately 14 days.

Certain authentication credentials may also be stored securely on your device through the device’s secure storage system.

2.3 Profile, preference, and personalization information

We may process information you provide about your travel style, interests, preferences, age range, saved destinations, and prior interactions to personalize recommendations, organize content, and improve the relevance of AI-generated responses.

2.4 Saved spots and travel content

When you create or save a spot, we may collect and store:

  • Spot name;
  • Category;
  • Notes;
  • Rating;
  • Geographic coordinates;
  • Address;
  • Source URL;
  • Source platform, such as TikTok, Instagram, or YouTube;
  • City and country information; and
  • Related metadata.

2.5 Trips and itinerary information

When you create or manage a trip, we may collect and store:

  • Trip title;
  • Destination;
  • Travel dates;
  • Day-by-day itinerary;
  • Saved spots;
  • Geographic coordinates;
  • Route information;
  • Ordering and optimization data; and
  • Notes or other information you add.

Trip information may reveal sensitive details about your location, intended travel, habits, associations, or future plans. You should only add information you are comfortable storing in the Service.

2.6 AI conversations and submitted content

When you use TripTap’s AI features, we may collect and store:

  • Your messages and prompts;
  • The AI assistant’s responses;
  • Conversation history;
  • Images you upload or share;
  • Video frames extracted or submitted for analysis;
  • Article or webpage text;
  • Social-media or other linked content;
  • Spot information;
  • Travel preferences and interests; and
  • Other information included in your request.

Do not submit passwords, payment-card details, government identification documents, medical information, confidential business information, highly sensitive personal information, or information you do not have permission to share.

2.7 Location information

With your device permission, TripTap may access precise or approximate device location to:

  • Identify nearby places;
  • Save or organize spots;
  • Determine city and country;
  • Improve recommendations;
  • Display relevant map information; and
  • Create or optimize routes.

We may also store geographic coordinates associated with spots and trips.

You can disable device-location access through your device settings, but some features may no longer function correctly.

TripTap does not need to continuously track your location when the Service is not being used unless a separate feature expressly requests background-location permission and explains its purpose.

2.8 Photos and media

We may collect avatar images and images shared in AI conversations.

Images may be resized or compressed before storage, including:

  • Avatar images resized to approximately 400 × 400 pixels in JPEG format; and
  • Chat images resized to a maximum dimension of approximately 1024 pixels in JPEG format.

Media files may be stored using third-party cloud-storage infrastructure.

2.9 Subscription and purchase information

If you purchase a subscription or another digital product, we may receive and store limited purchase information, including:

  • Subscription plan;
  • Billing provider;
  • Transaction identifier;
  • Purchase token;
  • Subscription expiration date;
  • Auto-renewal status;
  • Verification status; and
  • A limited portion of a purchase receipt used for verification.

We do not directly receive or store your full payment-card number. Payments made through Apple are processed by Apple under Apple’s own terms and privacy practices.

2.10 Technical, device, and log information

When you use the Service, we may automatically collect technical information such as:

  • Internet Protocol address;
  • User agent;
  • Device or operating-system information;
  • App version;
  • User or account identifier;
  • Request date and time;
  • Requested endpoint;
  • Request and response data;
  • Error and diagnostic information;
  • Rate-limit activity; and
  • Security events.

Request or response logs may contain information included in requests submitted to the Service.

We use IP addresses and user identifiers for security, abuse prevention, and rate limiting. We do not use device fingerprinting for advertising.

2.11 Information from third parties

We may receive information from:

  • Google, when you use Google sign-in;
  • Apple, when you use Sign in with Apple or make an App Store purchase;
  • Social-media platforms or websites when you provide a link for extraction or analysis;
  • Mapping and place-information providers;
  • Subscription-verification services; and
  • Service providers that help us operate, secure, or support the Service.

The information received depends on the permissions you grant, the third party’s rules, and your settings with that third party.

3. How We Use Information

We may use information to:

  • Create, authenticate, maintain, and secure accounts;
  • Provide TripTap’s features;
  • Save spots, trips, itineraries, conversations, and preferences;
  • Generate AI responses, recommendations, summaries, and extracted place information;
  • Analyze images, video frames, article text, and user-provided links;
  • Geocode locations and convert place names into coordinates;
  • Display maps and calculate or optimize routes;
  • Personalize the Service;
  • Process and verify subscriptions;
  • Restore purchases and determine subscription status;
  • Respond to support requests;
  • Detect fraud, abuse, security incidents, and violations of our Terms;
  • Apply rate limits and protect infrastructure;
  • Debug errors and maintain Service reliability;
  • Enforce our agreements and protect our legal rights;
  • Comply with legal obligations and lawful requests; and
  • Develop, test, and improve the Service.

We do not sell personal information.

We do not use personal information for third-party targeted advertising or cross-context behavioral advertising.

TripTap does not currently use advertising SDKs, third-party analytics SDKs, device fingerprinting, or browser cookies for app authentication.

4. Legal Bases for Processing

Where applicable law requires a legal basis, we rely on one or more of the following.

4.1 Performance of a contract

We process information when necessary to provide the Service you request, including account creation, saving trips, AI features, route planning, subscription access, and customer support.

4.2 Consent

We rely on consent where required, including for device permissions such as location, photos, camera, or notifications.

You can withdraw device permission through your device settings. Withdrawal does not affect processing that occurred before consent was withdrawn.

4.3 Legitimate interests

We may process information for legitimate interests such as:

  • Securing the Service;
  • Preventing fraud and abuse;
  • Improving reliability;
  • Understanding and correcting errors;
  • Providing support;
  • Enforcing our Terms; and
  • Protecting users and TripTap.

We rely on these interests only where they are not overridden by your rights and interests.

4.4 Legal obligations and legal claims

We may process information to comply with applicable law, lawful government requests, tax or accounting requirements, court orders, or to establish, exercise, or defend legal claims.

4.5 Protection of vital interests

In limited circumstances, we may process information where necessary to protect someone’s life, health, or safety.

5. Artificial Intelligence Processing

TripTap uses third-party artificial-intelligence services, including Gemini, to provide AI chat, recommendations, content extraction, image or video-frame analysis, and related features.

Depending on the feature, TripTap may send Gemini:

  • Chat messages and conversation context;
  • Images or video frames;
  • Article or webpage text;
  • User interests and travel preferences;
  • Spot and itinerary information;
  • Geographic or destination information; and
  • Other content you submit for AI processing.

Gemini processes this information as a service provider under its applicable business terms, data-processing terms, retention settings, and security practices.

Gemini may temporarily retain API inputs and outputs for service operation, safety, or abuse monitoring, subject to the configuration and terms applicable to TripTap.

AI outputs are generated automatically and may be inaccurate, incomplete, outdated, offensive, or unsuitable.

TripTap does not use AI to make decisions that produce legal or similarly significant effects about you.

You should independently verify travel, safety, visa, health, financial, legal, opening-hours, transportation, and booking information before relying on an AI response.

Do not include personal information about another person in an AI request unless you have permission and a lawful basis to do so.

6. How We Share Information

We may share information only as described below.

6.1 Service providers

We may share information with vendors that process it on our behalf, including:

  • Gemini for AI chat, recommendations, extraction, image or video analysis, and related AI functionality;
  • Google OAuth for Google account sign-in;
  • Apple for Sign in with Apple, App Store distribution, subscription processing, purchase verification, and related platform services;
  • Google Places API for place search, place information, geocoding, and location matching;
  • Google Directions API for routing and route optimization;
  • Amazon Web Services S3 and/or Cloudflare R2 for image and file storage; and
  • Hosting, database, infrastructure, email, security, and support providers required to operate the Service.

These providers may process information in countries other than Moldova.

6.2 Legal, safety, and enforcement disclosures

We may disclose information when we reasonably believe it is necessary to:

  • Comply with applicable law, legal process, or a lawful government request;
  • Protect the rights, property, security, or safety of TripTap, users, or others;
  • Investigate fraud, abuse, security incidents, or violations of our Terms;
  • Enforce agreements; or
  • Establish, exercise, or defend legal claims.

6.3 Business transfers

If TripTap or its assets are involved in a merger, acquisition, financing, reorganization, insolvency, sale, transfer, or similar transaction, information may be disclosed to advisers, counterparties, and successors as part of that transaction, subject to applicable law.

6.4 At your direction

We may share information when you direct us to do so, use a sharing feature, connect a third-party service, or otherwise consent to disclosure.

7. Public or Link-Accessible Media

Avatar images and images submitted through AI chat may currently be stored with public-read or link-accessible permissions.

This means:

  • We do not necessarily display the image publicly inside TripTap;
  • The image may not be intentionally indexed or promoted;
  • However, any person who obtains or guesses the exact file URL may be able to access the image without signing into your TripTap account; and
  • A copied URL may continue to exist outside our control even after the original file is removed.

Do not upload private, confidential, intimate, identifying, financial, medical, or otherwise sensitive images.

By uploading an image, you acknowledge this storage risk.

We may change storage architecture, file permissions, delivery methods, or security controls as the Service develops.

8. International Data Transfers

TripTap is operated from the Republic of Moldova, while service providers may process information in the United States, the European Economic Area, and other countries.

These countries may have data-protection laws that differ from those in your country.

Where required, we use contractual, organizational, or other legally recognized safeguards for international transfers.

By using features that require international processing, your information may be transferred and processed in these locations subject to applicable law.

9. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to legal, security, dispute-resolution, fraud-prevention, backup, and enforcement requirements.

Current retention practices include:

  • Account, profile, saved spots, trips, itineraries, and AI chat history: generally retained until you delete the information or your account, unless a longer period is legally required;
  • Uploaded avatar and chat images: generally retained while associated content or the account remains active and deleted or de-associated following a valid deletion request, subject to backup and legal-retention limitations;
  • Refresh tokens: generally configured to expire and be automatically deleted after approximately 14 days;
  • Access-token blacklist records: generally retained until the relevant token expires, usually approximately one hour;
  • Extracted URL cache: generally configured for automatic deletion after approximately 90 days;
  • Idempotency records: generally configured for automatic deletion after approximately 24 hours;
  • Rate-limit counters: retained temporarily in a sliding in-memory window;
  • Subscription and transaction records: retained as necessary to verify access, handle disputes, prevent fraud, and comply with financial or legal obligations; and
  • Technical, request, security, and support logs: retained for a limited period reasonably necessary for security, debugging, abuse prevention, support, and legal obligations.

Deletion from active systems may not immediately remove information from encrypted backups, disaster-recovery systems, security logs, records required by law, or copies retained by third parties under their own lawful retention requirements.

Such information will be isolated from ordinary use and removed or overwritten in accordance with applicable retention cycles where reasonably possible.

10. Your Choices and Rights

Depending on where you live, you may have the right to:

  • Know whether we process your personal information;
  • Request access to personal information we hold about you;
  • Request correction of inaccurate or incomplete information;
  • Request deletion of personal information;
  • Restrict or object to certain processing;
  • Withdraw consent where processing is based on consent;
  • Request a portable copy of certain information;
  • Object to direct marketing;
  • Request information about recipients or categories of recipients;
  • Lodge a complaint with a competent data-protection authority; and
  • Appeal a refusal where applicable law provides an appeal right.

You may update certain account and profile information through the Service.

You may initiate account deletion using the account-deletion control provided inside the app. You may also contact support@triptap.app for assistance with privacy requests.

We may need to verify your identity before completing a request.

We may deny or limit a request where permitted by law, including when:

  • We cannot verify your identity;
  • The request would adversely affect another person’s rights;
  • Information must be retained by law;
  • The request is manifestly unfounded or excessive; or
  • Another lawful exception applies.

Authorized agents may submit requests where permitted by law, but we may require proof of authority and verification of the user’s identity.

Users in the Republic of Moldova may also contact or lodge a complaint with the National Center for Personal Data Protection of the Republic of Moldova.

Users elsewhere may contact the supervisory authority responsible for data protection in their location.

11. Account Deletion

When you request account deletion, we will take reasonable steps to delete or de-identify the account and associated personal information that we are not legally required or otherwise permitted to retain.

Deletion may include:

  • Account and profile information;
  • Saved spots;
  • Trips and itineraries;
  • AI conversation history;
  • Uploaded media controlled by TripTap;
  • Active authentication credentials; and
  • Other information directly associated with the account.

We may retain limited information where necessary for fraud prevention, security, dispute resolution, subscription verification, compliance with law, enforcement of agreements, or protection of legal rights.

Deleting the TripTap application from your device does not by itself delete your account or server-side information.

12. Device Permissions

TripTap may request access to:

  • Location;
  • Photos or media library;
  • Camera;
  • Notifications; and
  • Other device features needed for a feature you choose to use.

You can manage permissions through your device settings. Denying or revoking permission may prevent certain features from working.

13. Security

We use administrative, technical, and organizational measures designed to protect information, including secure transport, hashed refresh tokens, access controls, token expiration, rate limiting, and restricted operational access where appropriate.

However, no system, network, database, transmission, or storage method is completely secure.

We cannot guarantee that unauthorized access, loss, misuse, alteration, or disclosure will never occur.

You are responsible for protecting access to your device, email account, Apple or Google account, authentication credentials, and any links you share.

If you believe your TripTap account or information has been compromised, contact support@triptap.app.

14. Children’s Privacy

TripTap is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13.

Where local law requires a higher age for a child to consent to data processing, a parent or legal guardian must provide any required authorization.

If you believe a child has provided personal information without valid authorization, contact support@triptap.app. We may delete the information and terminate the associated account.

15. Information About Other People

TripTap allows users to add notes, share images, submit links, and communicate with AI.

You must not upload or submit another person’s personal information, image, private communication, location, or confidential material unless you have permission and a lawful basis to do so.

You are responsible for information you submit about other people.

16. Third-Party Links and Content

The Service may contain links to or process content from TikTok, Instagram, YouTube, websites, map services, booking services, and other third parties.

TripTap does not control the privacy, security, availability, or accuracy of those third parties.

Opening a link or using a third-party service may allow that third party to collect information directly from you.

You should review the privacy policy of each third-party service you use.

17. No Sale or Targeted Advertising

TripTap does not sell your personal information for money.

TripTap does not share personal information for third-party cross-context behavioral advertising and does not currently display third-party advertising.

If these practices materially change, we will update this Privacy Policy and provide any legally required choices or notices before using information for the new purpose.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Service, technology, legal requirements, providers, security practices, or data-processing activities.

When we make changes, we will update the effective date.

Where required by law, we will provide additional notice or request consent.

Your continued use of the Service after an updated policy becomes effective means that the updated policy applies to subsequent use, except where applicable law requires a different form of acceptance.

19. Contact

For privacy questions, account-deletion assistance, rights requests, or complaints, contact:

Email: support@triptap.app

TripTap is operated from the Republic of Moldova.

Available now for iPhone

Your saved folder deserves a departure date.

Download TripTap for iPhone and turn your saved travel finds into a trip you can follow.