Privacy Policy

1. Introduction

Welcome to TripBau (“we,” “our,” or “us”). We built TripBau to be the travel agent in your pocket — helping you plan trips and life's biggest moments with your crew. This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application.

By using TripBau, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Information you provide directly:

• Email address (for account creation)
• Display name
• Travel preferences (via swipe deck)
• Trip details (destination, dates, group members)
• Activity ratings and reviews
• Must-visit places you add manually

Information collected automatically:

• Device type and operating system
• Push notification token (for morning briefings)
• App usage patterns and feature interactions

Information from third parties:

• Google Places data (venue information)
• Weather data from Open-Meteo
• Ride time estimates (for morning briefings)

3. How We Use Your Information

We use your information to:

• Create and manage your TripBau account
• Build and refine your personal taste profile
• Generate AI-powered trip itineraries
• Send morning push notifications during active trips
• Coordinate group trips with your crew
• Improve our AI recommendations over time
• Provide customer support

We do NOT:

• Sell your personal information to third parties
• Share your data with advertisers
• Use your data for targeted advertising
• Share your trip details with other users without your explicit invitation

4. AI and Data Processing

TripBau uses artificial intelligence to power its core features. Your swipe preferences, ratings, and trip history are used to build your personal taste vector, generate personalized itinerary recommendations, and improve future trip suggestions.

Our AI providers include:

• Anthropic (Claude) — itinerary building and trip planning
• Groq — fast AI responses and notifications
• Google (Gemini) — structured data processing

These providers process data on our behalf and are bound by data processing agreements.

5. Third-Party Services

TripBau integrates with the following third-party services: Supabase (database/auth), Anthropic (AI generation), Google Places (venue discovery), Expo (push notifications), Booking.com, Skyscanner, Viator (affiliate booking links), and Open-Meteo (weather data).

When you tap affiliate booking links, you are directed to third-party websites governed by their own privacy policies.

6. Data Storage and Security

Your data is stored securely using Supabase, hosted on AWS infrastructure. We implement:

• Row-level security on all database tables
• Encrypted connections (TLS) for all data transmission
• Secure authentication via Supabase Auth
• No storage of payment card information

7. Data Retention

• Account data: Retained until you delete your account
• Trip data: Retained until you delete individual trips
• Taste profile: Retained and updated with each trip

8. Your Rights

You have the right to access your personal data, correct inaccurate information, delete your account and associated data, export your trip history and taste profile, and opt out of push notifications at any time. Under GDPR (EEA/UK) and CCPA (California), you may also request a copy of your data, object to certain processing, and ask us not to sell your information — we never do. To exercise any of these rights, contact us at privacy@astragic.com.

9. Children's Privacy

TripBau is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes via push notification or email. Continued use of TripBau after changes constitutes acceptance of the updated policy.

11. Contact Us

Questions about your privacy? Reach us at privacy@astragic.com or hello@astragic.com.