Privacy Policy

1. Scope and Introduction

This Privacy Policy (the "Policy") describes how Tripence (the "App", "we", "us", or "our") collects, uses, stores, and shares information when you access or use the Tripence mobile application, backend services, and any related websites or features (collectively, the "Service"). This Policy is effective as of the "Last updated" date shown above.

By downloading, installing, registering for, or otherwise using the App, you acknowledge that you have read and understood this Policy and agree to the practices it describes. If you do not agree with any part of this Policy, please do not use the App and uninstall it from your device.

The Service is provided "as is". The App is an interface for managing travel budgets and expenses; we do not guarantee permanent storage or availability of any data (trips, expenses, settings) or uploaded images. We encourage you to keep independent records of any information that is important to you.

2. App Functionality and Visibility

Tripence helps you record, organize, and analyze travel expenses. The expenses you record are private to you by default and are not posted to any public feed, directory, or search engine.

Where trip sharing is available, you may choose to share a trip with friends, travel companions, or collaborators by inviting them into that trip. Within a shared trip, every invited participant can view, create, edit, and delete part of the expenses, part of the notes, and part of the trip details. Sharing applies only to the specific trip you choose; your other trips remain private. Once you have shared content with another person, you cannot revoke what they have already seen or copied outside the App.

3. Account Types and Registration

3.1 Registered Account

4. Data We Collect

4.1 User-generated content

We collect the content you create in the App, including trip names, destinations, expense descriptions, amounts, currencies, dates, categories, notes, attached images or receipts, and the contacts or email addresses with whom you choose to share trips.

4.2 Public forums and feedback

If we offer suggestion forums, feature-request boards, blog comments, or other publicly viewable spaces, any personal information you choose to post there is public. We cannot control how third parties read, copy, or reuse what you publish in those spaces, and we are not responsible for that content.

4.3 Usage information

We track aggregated information about how the App is used: which features are opened, which actions are taken (such as adding an expense, creating a trip, exporting a report), how often, and how long sessions last. This is used to improve features, prioritize fixes, and understand stability.

4.4 Device and location data

We collect technical information about the device you use to access the App, including IP address (used for approximate country identification, security/fraud prevention, and location-based features such as default currency), unique device identifiers, operating system version, device model, and the version of the App you are running. We do not collect GPS-precise location unless you explicitly grant location permission for an opt-in feature.

4.5 Payment information

Payments for Tripence Pro and any other premium features are processed entirely by third-party payment providers such as Google Play (Android) and, where applicable, PayPal. We do not ask for, receive, or store your credit-card number, bank account, or other raw financial information. We receive only an anonymized purchase token and order ID, which we use to verify your subscription status, sync cross-device entitlement, and unlock Pro features.

4.6 Other information

We collect any feedback, comments, suggestions, support requests, or correspondence you choose to send us, along with any attachments you include.

5. Third-Party Integrations and AI Features

5.1 Google account sign-in

You may optionally choose to sign in with your Google account. If you do, Google shares basic profile details with us - typically your name, email address, profile picture, and, where you have made them available, age, gender, and birthday. We use this data to create and identify your account. You may revoke Google's permission at any time from your Google account settings.

5.2 AI-assisted Smart Entries

Tripence may offer an optional AI feature that lets you type or speak a free-form description ("Lunch with Maria, €18, yesterday") and have it converted into a structured expense (amount, currency, category, date). If you use this feature, your text or transcribed voice input is sent to an AI provider (such as OpenAI) acting as our data processor.

• Inputs are used only to return the structured result back to you.
• Inputs are not used by us or the provider to identify you personally.
• Inputs are not used to train AI models.
• Do not type sensitive personal information (national identifiers, health details, financial account numbers, passwords) into Smart Entries.

6. How We Use Data

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes without your consent.

We use the data we collect to:

• Record, sync, and display your trips and expenses.
• Where trip sharing is available, allow contacts you share a trip with to identify you, typically by the email address associated with your account.
• Provide customer support - which, with your explicit authorization, may include temporary "administrator mode" access by a support agent to your account to diagnose an issue.
• Verify your identity and protect against fraud or abuse.
• Analyze usage, debug crashes, and improve the App.
• Enforce our Terms of Use and applicable law.

6.1 Communications

We may send you two kinds of email:

• Optional product updates, tips, and marketing messages. You can unsubscribe from these at any time using the link inside the email or from the App's notification settings.
• Mandatory security and account messages, such as password resets, login alerts, billing receipts, and material changes to this Policy or to our Terms.

6.2 Crash and stability data (strictly necessary)

We process crash reports and stability diagnostics (via tools such as Firebase Crashlytics) under the legal basis of legitimate interest (GDPR Art. 6(1)(f)) and as strictly necessary processing under the ePrivacy Directive. This processing is separate from product analytics; it is used solely to identify and fix technical issues. It defaults to ON; where required by law, you may still opt out from the App's privacy settings.

6.3 Usage analytics (consent-based)

Where you provide consent, we collect product-usage analytics via Firebase and via a server-side bridge to Google Analytics 4 (GA4). We use anonymized identifiers (app_instance_id, user_id) to connect sessions and improve features. No personally identifiable information (such as your name or email) is transmitted to the GA4 Measurement Protocol. This tracking is managed under Consent Mode v2 and may be freely opted in or out of from the App's privacy settings.

7. How Data Is Shared With Third Parties

We engage carefully selected third-party service providers to help us operate the Service. They process data on our behalf, under contract, and only as described below.

7.1 Analytics providers (e.g. Amplitude)

We may share behavior events - for example, trip created, expense added, and the associated amounts and trip names - with analytics providers to understand how the App is used. Email addresses are not shared with these providers. Only unique user/device IDs and approximate country (derived from IP) are sent.

7.2 Infrastructure and crash logging (e.g. Google Firebase)

We use Google Firebase for authentication (which stores your email and a securely hashed credential), analytics, crash logging, and push notifications. Firebase processes data under Google's privacy terms in addition to ours.

7.3 Purchase processors (e.g. Google Play, RevenueCat, Apple)

In-app purchases and subscriptions are processed by the platform billing system (Google Play on Android; Apple on iOS, if/when offered) and an entitlement provider such as RevenueCat. We share the minimum data necessary - typically a random app user ID - to verify your subscription. Where required to resolve refund requests, data about purchased content and its consumption may be shared with Apple.

7.4 AI providers (e.g. OpenAI)

If you use Smart Entries (Section 5.2), we send the minimum necessary input to an AI provider acting as our data processor. We do not include your email address unless you have typed it into the prompt yourself. Inputs may be processed on servers located outside your country of residence.

7.5 Promotional codes (Netra)

If you redeem a promotional code (for example, a free "founding member" upgrade), the code and a pseudonymous identifier are sent to Netra, our promotions platform, acting as our data processor. This lets Netra validate the code and prevent it from being reused. Specifically:

• We send a one-way, irreversible token derived from your account id (an HMAC) - never your name, email, or account id itself. Netra cannot identify you from it.
• It is used only to enforce that a code is used once and to return the upgrade to your account — there is no advertising, profiling, or ad targeting.
• If you delete your account, the link is removed and Netra's record can no longer be associated with you.

8. Business Transfers and Aggregate Data

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or part of our assets, your information may be transferred or sold as part of that transaction. We will use reasonable efforts to notify users and ensure that any successor honors this Policy in respect of previously collected information.

We may also create and share anonymous, aggregate, non-identifiable statistics - for example, average monthly spending per country, most popular expense categories, or common trip lengths - publicly or with outside parties such as researchers and partners. Aggregate data cannot be reasonably used to identify you.

9. Security and Tracking

We use industry-standard safeguards to protect your information, including encrypted (HTTPS/TLS) transport for all communication between the App and our servers and one-way password hashing for stored credentials. No system is perfectly secure, but we work continuously to harden ours.

Data breach notification. If we experience a data breach that affects your personal information, we will notify you by email and through the App, in line with applicable law.

Limiting tracking. You can further restrict interest-based advertising and mobile app tracking through your device's operating-system settings - for example, "Opt out of Ads Personalization" on Android, or "Allow Apps to Request to Track" on iOS.

10. Your Choices, Retention, and Account Deletion

Access and export. You can review and update your account information at any time from within the App. You can export your trips and expenses from the App's privacy/data settings, or by contacting us at the address in Section 11.

Location tracking. Location-based features such as automatic currency selection can be turned off from the App's settings or by revoking the location permission from your device's operating system.

Account deletion. You may delete your account and associated personal data at any time from within the App, by following our account deletion instructions, or by emailing the address in Section 11. We will process verified deletion requests within a reasonable time and will clear your information from our active servers within ninety (90) days. Backups may take additional time to expire on their normal rotation.

Retention. We retain personal information for as long as your account is active or as needed to provide the Service. We may retain limited information after deletion where required by law, to resolve disputes, to enforce our agreements, or to prevent fraud.

11. Changes and Contact Information

We may update this Policy from time to time. Changes are effective immediately upon posting the updated Policy at this URL, with a refreshed "Last updated" date. For material changes that meaningfully reduce your rights, we will additionally notify you in the App or by email.

For privacy questions, data-subject requests (access, correction, deletion, portability, objection), or any concern about this Policy, contact us at:

The mailing address above is a placeholder and will be updated before public launch with the registered legal address used for privacy correspondence.