Privacy Policy

This is currently a client-side demo build: your account and trip data live in your browser's local storage, not on a server we control. The rest of this section describes what the product collects today, and how that will work once a server-side backend is introduced.

Account data: name, email, and the home currency and language you choose.

Trip data: destinations, dates, itinerary items, budget entries, and any travel documents you choose to upload (for example, a photo or PDF of a passport, visa, or insurance policy) — visible to you and to anyone you invite to that trip.

Usage data: this build doesn't use any analytics or tracking tooling — we don't collect data about how you use the app beyond what's needed to run it. If we add analytics later, we'll update this policy first.

Gmail sync is shown in this build as a preview of a planned Pro feature. It isn't connected to a real Google account, and no email data is read, transmitted, or stored. A future version would use a read-only, revocable Google OAuth connection scoped to travel confirmation emails.

made by tripper never sees or stores your payment card details, bank information, or booking payment data — checkout always happens on the partner's own site.

Collaborators you invite to a trip see that trip's itinerary, budget, and bookings, according to the role (editor or viewer) you assign them.

Service providers that host our infrastructure, process analytics, or provide the flight/hotel/currency data shown in search results — bound by contract to only use your data to provide that service to made by tripper.

We do not sell your personal data to third parties.

You can download a copy of your data, or delete your account and its associated data, at any time from your Account page — or by emailing privacy@madebytripper.com. Deleting your account removes your trips, itinerary, budget, and documents immediately from this device. For any other verified request, we respond within the timeframe required by applicable law (Brazil's LGPD and, for users in the EU/EEA, GDPR).

You can withdraw consent for optional data uses (like Gmail sync, once it's connected) at any time without affecting the rest of your account.

We currently use only essential cookies and local storage — to keep you signed in and remember your language and currency preference. We don't set analytics or advertising cookies today; if that changes, we'll ask for your consent first.

In this build, your data lives only in your browser's local storage: deleting your account removes it immediately from this device. Once a server-side backend is introduced, we'll keep your data only for as long as your account is active, and delete it within 30 days of a deletion request, except where we're required to keep records for legal or accounting reasons.

Privacy questions or requests: privacy@madebytripper.com.