TripSync Privacy Policy

Last updated: May 1, 2026

TripSync ("we", "our", or "the app") is a group-travel planning app operated by Elev8 Ventures Limited Liability Company. This policy explains what information we collect, how we use it, and the choices you have. We aim to collect only what's needed to make the app work and to be clear with you about the rest.

Information we collect

When you create an account and use TripSync, we collect:

Account information — email address, display name, and a hashed password you choose.
Trip content you create or contribute to — trip names, destinations, dates, stops, notes, preferences, votes, packing lists, and messages shared within a trip.
Travel preferences — answers you give in the trip-planning quiz (style, budget range, interests, pace, accommodation type). These are used to personalize recommendations for your group.
Invitation data — when you're invited to a trip via a shareable link, we associate your account with that invitation after you sign up or log in.
Basic usage data — anonymous analytics about app performance, crashes, and which features are used (no advertising identifiers, no cross-app tracking).

We do not collect precise location, contacts, photos outside those you upload to a trip, microphone data, health data, payment information, or advertising identifiers.

How we use your information

To run the core features of TripSync — trips, members, itineraries, votes, recommendations, and messaging.
To generate personalized trip recommendations (destinations, stops, activities, accommodations) based on the quiz answers and preferences your group provides.
To send transactional emails you request or that relate to your account — password resets, trip invitations, and important service announcements. We don't send marketing emails without explicit opt-in.
To diagnose bugs and improve the product. We review aggregated, de-identified usage data only.

Third-party services we use

TripSync uses a small number of trusted services to deliver core features. We share only the minimum data required.

Google (Gemini AI) — used for personalized recommendations and receipt scanning. See AI processing and your consent below for details on what's sent and when. Query content is processed by Google per the Gemini API terms and Google's privacy policy.
Google Places — used to suggest places, venues, and activities relevant to your trip. See Google's privacy policy.
Viator (Tripadvisor) — used to surface bookable experiences and tours for your trip. See Tripadvisor's privacy policy.
Firebase Crashlytics (Google) — collects anonymous crash reports and diagnostic data when the app crashes, to help us fix bugs. We do not collect advertising identifiers. See Google's Firebase privacy documentation.
Cloud infrastructure (Supabase, Vercel, Railway) — our database, application servers, and web frontend run on these platforms. Supabase also stores files you upload (avatar photos, receipt scans, trip photos). These providers do not use your content for any purpose other than hosting and operating our service.

We do not sell your personal information, and we do not share it with advertisers.

TripSync uses Google's Gemini AI service for two specific features:

Personalized recommendations. When your group fills out the trip-planning quiz, your answers (such as preferred pace, budget tier, food and activity preferences) are sent to Gemini so it can suggest destinations, stops, and activities that fit your group. Your account credentials, email address, and other personal identifiers are not sent.
Receipt scanning. When you scan a receipt to log an expense, the photo of the receipt is sent to Gemini to extract the vendor, amount, and items. The first time you scan a receipt, the app shows an explicit consent prompt — you can decline and enter expenses by hand instead. Account credentials and email addresses are not sent with the photo.

Google processes this data per the Gemini API terms and Google's privacy policy. We do not sell or share your AI query content with any other third party.

Data retention

We retain your account and trip data for as long as your account is active. If you delete your account, we delete your account-linked data within 30 days, except where we're required to keep specific records for legal or accounting reasons. Aggregated, de-identified analytics may be retained longer for product-improvement purposes.

Your rights and choices

Access and correction — you can view and edit your account information and trip content in the app at any time.
Deletion — you can delete your account and associated data from inside the app: tap your profile photo on the My Trips screen, then "Delete Account." Deletion is immediate and permanent. You may also contact us at tech@tripsync.us if you'd prefer assistance.
Data export — you may request a copy of the personal data associated with your account by contacting us at the same address.
Communication preferences — transactional messages are required for the service; you can opt out of any non-essential emails at any time.

Affiliate links and partner sites

TripSync surfaces recommendations for activities, restaurants, and accommodations from third-party providers (for example, Booking.com, Expedia, OpenTable, Viator, and similar travel partners). Some of these recommendations include affiliate links. When you tap a partner link from inside TripSync or from this website, we may earn a commission if you complete a booking or reservation, at no extra cost to you. This commission helps fund the development and operation of TripSync.

When you click through to a partner's site, that partner's own privacy policy and cookies apply once you leave TripSync. We don't control what those partners collect on their own sites; we encourage you to review the partner's privacy policy if that's important to you.

This disclosure is provided in line with the U.S. Federal Trade Commission's Endorsement Guides (16 CFR Part 255). Our recommendations are surfaced based on your trip and your group's preferences — affiliate status doesn't bias which partners we show you.

Children's privacy

TripSync is not intended for use by children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it.

Security

We use industry-standard practices to protect your data — encrypted connections (HTTPS/TLS), salted-and-hashed passwords, access-controlled infrastructure, and regular security reviews. No system can be perfectly secure, but we take this seriously.

International users

TripSync is operated from the United States. By using the app, you acknowledge that your information may be processed in the U.S. or other countries where our service providers operate. We take steps to ensure that transfers comply with applicable data-protection laws.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated in the app or by email to your account address. The "Last updated" date at the top of this page reflects the most recent revision.

Contact us

Questions, requests, or concerns about this policy or your data can be sent to:

tech@tripsync.us