Privacy

Privacy Policy

Effective: 14 September 2026

Trip Pinned is a personal travel planner and diary. This policy explains what information we handle, why we use it, and the choices available to you.

1. Who we are

Trip Pinned provides the Trip Pinned web application. For privacy questions or requests, contact trippinned@gmail.com.

2. Information we collect

• Account information: your name, email address, account identifier and, when supplied by a sign-in provider, profile image.
• Travel content: trips, dates, places, itineraries, activities, notes, bookings, checklists, saved links, costs, expense splits, photos, documents and other content you choose to add.
• Share information: the content included in read-only share links you create, plus information needed to create, manage and revoke those links.
• Technical information: authentication and session information, browser storage, and routine service and security logs that may include IP address, device/browser details, timestamps and error information.
• Messages to us: information you include when contacting support or making a privacy request.

3. Google sign-in data

If you choose Continue with Google, Google provides the basic profile information you approve, typically your name, email address, profile image and Google account identifier. We use it only to create or access your Trip Pinned account, identify you in the app and protect the sign-in process. Trip Pinned does not request access to your Gmail, Google Drive, Google Calendar, contacts or Google password.

4. How we use information

• Provide authentication, account access, private travel planning, cloud sync and backup features.
• Save and display the content you create across supported sessions and devices.
• Create read-only snapshots when you deliberately generate a share link.
• Maintain, secure, troubleshoot and improve the service.
• Respond to support, privacy, safety and legal requests.

We do not currently sell personal information or use it for targeted advertising.

5. Browser storage and cloud storage

Trip Pinned keeps an account-scoped browser copy on your device so the app can restore your diary quickly. Signing out clears the active session but may leave this browser copy on that device. You can remove it by clearing site data in your browser. Private browsing, another browser, another device and another website address use separate browser storage.

When cloud features are active, account data is also processed and stored through Supabase. Content you add, including images or documents, may be included in your cloud-synced account data as applicable.

6. Service providers

We use service providers only as needed to operate Trip Pinned:

• Supabase for authentication, database, storage and related backend services.
• Google when you choose Google sign-in.
• Email delivery services to send one-time login codes and account messages.
• Cloudflare to host and deliver the web application and help protect it from abuse.

These providers process information under their own terms and privacy policies and may process data in countries other than yours.

7. Sharing and public links

Your account is private by default. Trip Pinned shares trip information only when you create a share link or direct us to disclose information. Share links are read-only snapshots and may be forwarded by anyone who receives them. Review the preview and recipients carefully, and revoke a link if it should no longer open.

Trip Pinned is designed to exclude private costs, personal notes, private photos, documents, checklists and booking references from shared snapshots. You remain responsible for checking the content presented for sharing before sending a link.

We may also disclose information when required by law, to protect rights or safety, or as part of a business reorganisation where appropriate safeguards apply.

8. Retention and deletion

We keep account information and cloud content while your account is active or as needed to provide the service, resolve disputes, meet legal obligations and protect the service. Retention can vary by data type and by service-provider backup cycles.

You can delete individual content in the app where that option is available. To request deletion of your cloud account and associated personal data, email trippinned@gmail.com from your account email. Clearing browser site data is a separate step needed to remove any browser copy from that device.

9. Security

We use reasonable technical and organisational safeguards, including authenticated access and account-scoped data controls. No internet service or storage method is completely secure, so we cannot guarantee absolute security. Keep your email account and devices secure, and do not share login codes.

10. Your choices and rights

You may ask to access, correct or delete personal information we hold about you, or raise a privacy concern, by emailing us. We may need to verify your identity before completing a request. Depending on where you live, additional privacy rights may apply.

11. Children

Trip Pinned is not directed to children who cannot legally consent to data processing in their location. We do not knowingly seek their personal information. A parent or guardian who believes a child has provided personal information should contact us.

12. Changes to this policy

We may update this policy as Trip Pinned changes. We will publish the revised version here and change the effective date. If a change materially affects how we handle personal information, we will provide additional notice where reasonably possible.