Privacy Policy
Effective July 20, 2026. This policy explains how Triplyra processes account, itinerary, purchase, and service data.
Data we process
- Account data: name, email address, optional phone number, avatar photo, and user identifier.
- Travel data: destinations, dates, accommodation or starting points, must-see and excluded places, route preferences, saved routes, and offline plans.
- Purchase data: App Store product, transaction, subscription status, expiration, restore status, and remaining-use entitlement needed to provide paid access. Payment-card details are processed by Apple and are not received by Triplyra.
- Technical data: request status, error information, and place or route queries you submit to map services.
AI trip planning and explicit consent
Only after you explicitly agree before generating an itinerary, Triplyra sends the destination, dates, trip length, daily hours, budget, transport, starting point, must-see and excluded places, interface language, and route preferences to OpenAI through a Supabase Edge Function to generate the itinerary. We do not send your account email, phone number, avatar, or password to OpenAI in this request. You may decline; in that case no trip data is sent and no AI itinerary is generated.
Processors and purposes
We use data to authenticate users, generate itineraries, verify places, synchronize saved routes, provide purchased access, restore entitlements, provide support, and protect the service. Apple processes App Store payments; Supabase provides authentication, cloud data, and Edge Functions; OpenAI processes consented trip-planning requests; Google Maps, Apple Maps, or Amap may process user-selected place and route queries; Netlify hosts the website and server functions.
Avatar photos
Uploading an avatar is optional. A photo you select is compressed and stored in your Supabase user profile, linked to your account, and used only to display your avatar in Triplyra. You can replace it or remove the associated profile through account deletion.
Retention, sharing, and tracking
We do not sell personal data or use it for cross-app tracking. Data is shared with service providers only where needed for the functions above and retained only as long as required to provide the service, comply with law, or resolve disputes. Shared itinerary links do not include an account ID, name, email, phone number, avatar, or password.
Your choices
You can sign out or permanently delete your account in Profile. Deletion removes account and related cloud data that we are not legally required to keep. You may also decline AI processing and continue using non-AI pages.
Contact and changes
Send privacy questions to albert.jaing@onerspace.com or visit Triplyra Support. We will update the effective date and provide an appropriate notice if this policy changes materially.