Privacy

How Tripto handles your data

Last updated 11 July 2026

Tripto helps families and groups turn scattered bookings into one shared itinerary. We collect as little as possible, never sell your data, and never track you across other apps or websites.

Who we are

Tripto is a personal-scale app operated by navbytes. You can reach us at tripto@navbytes.io.

What we collect and why

Your account. When you sign in with Apple we receive your name and an email address (which may be an Apple private-relay address you can revoke at any time). We use it only to create your account, identify you to people you share trips with, and let invited members recognize you. We never send you marketing email.

Your trip content. The trips, itinerary items (including any locations, confirmation codes, and notes you enter), packing lists, and the profiles you add for travel companions — including family members who don't use the app. This is stored so your trips sync across your devices and to the people you invite, and it is protected by row-level security so only trip members can read it.

We do not collect analytics, advertising identifiers, or location gathered from your device's sensors. Location text and coordinates exist only if you type or pick them for an itinerary item.

When trip data is shared

With people you invite. Trip members you add (as organizer, companion, or viewer) can see that trip's contents according to their role.

Through a share link you create. If you generate an "anyone-can-view" link, anyone holding that unguessable link can see a sanitized version of the itinerary — dates, places, and times only. Confirmation codes, notes, exact coordinates, and member emails are never included on the public link, and you can revoke a link at any time, which disables it immediately.

We never share your data with advertisers or data brokers.

Where it's stored

Trip data is stored in a Supabase (PostgreSQL) database and transmitted over encrypted HTTPS. Your session is kept securely in the iOS Keychain on your device, and the app keeps a local copy of your trips so they work offline.

Importing bookings: AI processing

When you import trip details via paste, Tripto extracts booking information (flights, hotel stays, activities, and confirmation codes). On iPhones with Apple Intelligence enabled (iOS 26+), you choose where processing happens:

On this iPhone (default): extraction runs on your device using Apple's built-in language model. Pasted text never leaves your device and is not sent to any third party.

Cloud AI (optional on capable devices, automatic on others): if you prefer cloud processing or your device doesn't support on-device extraction, your booking text — which may contain confirmation codes, personal names, and email addresses — is sent to a third-party large-language-model provider (currently OpenAI) through Cloudflare's AI Gateway.

Both paths:

• Happens only when you explicitly choose to import; it is never automatic.
• Requires your consent before the first cloud send via any route.
• Extracts and returns structured booking details only; the raw text is not stored in your Tripto account after extraction.
• Is sent over encrypted HTTPS to Cloudflare and the model provider (cloud path only).
• Does not train the provider's models: the current provider, OpenAI, does not use API data to train or improve its models per its data-usage terms. On-device processing uses Apple's first-party model and is not used for training. Request logging is disabled in the Cloudflare gateway (cloud path only).

Cloudflare and the model provider are sub-processors of your data for the cloud import path only. You are not required to use the import feature; you can always enter trips manually.

Deleting your data

You can delete your account from Settings → Delete account in the app. This permanently removes your account and any trips you created, along with their itinerary and packing content; trips you were only invited to simply lose you as a member. Because we offer Sign in with Apple, deleting your account also revokes Tripto's Apple sign-in token. Deletion is immediate and cannot be undone.

Children

Tripto lets you add profiles for children as trip participants, but those profiles are created and managed by an adult account holder; children do not have their own accounts, and we do not knowingly collect data directly from children.

Changes

If this policy changes materially, we'll update the date above and, where appropriate, note it in the app.

Contact

Questions about your data: tripto@navbytes.io.