Privacy policy

Joe-Daniel Hadchity, an individual based in Lebanon, operates Tripanize and is responsible for its processing of personal information. Use our privacy contact form for questions or requests. You can use manual planning without enabling optional location sharing. AI features process the trip information relevant to the request.

• Account information: name, email address, protected password information, sign-in sessions and account preferences.
• Trip information: destinations, travel dates, members and travelers, itinerary entries, bookings, notes, budgets, expenses, payment splits, receipt files, packing items, chat messages and activity records that you or your group add.
• Planning preferences: interests, pace, home city, currency, timezone and any dietary or accessibility details you choose to provide. These may reveal sensitive information. Add only what you want processed for planning and shared in the relevant trip.
• Optional location: your latest device coordinates, accuracy and update time while you actively enable sharing for a trip.
• Payment and support records: payment references, purchased trip option, amount, currency and payment status, plus contact messages and the reply address you provide. Paddle handles payment credentials; Tripanize does not store your full payment card number.
• Technical information: request and security data, errors and rate-limit records needed to operate and protect the service. Hosting and email providers may process IP addresses and delivery information.

We use information to create accounts, authenticate users, save and share trips, generate requested suggestions, show maps and weather, calculate expense balances, deliver enabled notifications, confirm paid access and respond to support requests. We also use necessary technical records to prevent abuse, diagnose faults and meet legal or accounting obligations.

Where a lawful basis is required, we rely on providing the requested service, legitimate interests in security and reliable operation, applicable legal obligations, or consent for optional features such as device location. Where sensitive information requires consent, provide it only if you want it used for your requested planning; you can remove it or contact us to withdraw that consent.

Tripanize is collaborative. Trip members can access shared information according to their role, including relevant plans, messages, expenses, uploaded receipts and enabled member locations. Avoid placing private information in shared notes or files. Organizers can manage membership; an invitation link should be treated as private.

Other members can copy, download or export information they can access. Removing a member or stopping sharing cannot recall a copy they already obtained. PDF exports and offline copies should be handled with the same care as the original trip.

Location sharing requires your explicit action and browser permission. While active, your device updates your position for authorized members of that trip. You can stop it from the trip’s chat and locations screen. Tripanize stores the latest position rather than a movement history.

A shared position expires after approximately 2 minutes without a new update. Expired coordinates are cleared by the service’s expiry processing; stopping sharing clears the stored coordinates. The application does not provide continuous background tracking and should not be used for emergencies.

We use Cloudflare to host the application, database and private file storage; Resend for transactional and support email delivery; OpenAI for requested AI planning and assistant features; and Paddle for checkout, payment verification and purchase administration when payments are enabled. Relevant request content is sent to the provider needed to perform that function.

AI requests may include trip dates, destinations, traveler details, preferences, notes, bookings and related planning context. Avoid putting information into AI requests that you do not want processed by the AI provider.

Maps, place search, weather, images and routing can use services including OpenStreetMap, Open-Meteo, Wikipedia and openrouteservice where configured. These services receive the information needed for the lookup; a map or image loaded directly by your browser can also disclose your IP address and the requested region or resource. External booking sites process information under their own privacy notices when you open or use them.

Providers may process data in countries other than your own. The safeguards and processing locations depend on the provider and service. We do not sell your personal information or use the application’s trip content for targeted advertising.

Tripanize uses essential session cookies for sign-in and browser storage for preferences such as theme. Offline trip snapshots can be stored on your device for read-only access. Signing out clears the application’s offline cache on that device; downloaded PDFs or files remain until you delete them.

The application does not currently use advertising trackers or optional analytics cookies. Paddle checkout and external services may use their own necessary technologies when you use them.

We use access controls, protected sign-in credentials, HTTPS and private storage for uploaded files. No system is completely secure. Keep your device and account secure, sign out on shared devices and let us know if you suspect unauthorized access.

Account and trip records are retained while needed to provide the service. Support correspondence is kept as needed to resolve requests and maintain relevant records. Payment, fraud, security and legal records may need to be retained after account closure. Providers may have their own retention periods. Optional live locations follow the short expiry described above.

Depending on applicable law, you may request access, correction, a copy, deletion, restriction or objection to processing, and withdraw optional consent. Use the contact form from the email associated with your account. We may verify your identity before releasing or changing account data; do not send identity documents through the form.

Shared trip records may also concern other members, so we assess deletion requests with their rights and required records in mind. You may also complain to the relevant data protection authority where applicable. Tripanize is not directed at children creating their own accounts; contact us if a child has provided account information without the necessary authorization.

We may update this notice as features or processing change. The latest date appears above. We will communicate material changes through the application or an account message where appropriate. For any privacy concern, contact the Tripanize operator.