Privacy Policy
Effective August 9, 2026. This policy explains how Triplyra processes account, itinerary, and service data.
Data we process
- Account data: name, email address, avatar photo, and user identifier.
- Travel data: destinations, dates, accommodation or starting points, must-see and excluded places, route preferences, saved routes, and offline plans.
- Purchase data: Apple product and transaction identifiers, purchase environment, subscription expiration or revocation status, and the planning-credit balance linked to your user ID. Triplyra does not receive your complete payment-card information.
- Technical data: request status, error information, and place or route queries you submit to map services.
AI trip planning and explicit consent
Only after you explicitly agree before generating an itinerary, Triplyra sends the destination, dates, trip length, daily hours, budget, transport, starting point, must-see and excluded places, interface language, and route preferences to OpenAI through a Supabase Edge Function to generate the itinerary. We do not send your account email, phone number, avatar, or password to OpenAI in this request. You may decline; in that case no trip data is sent and no AI itinerary is generated.
Processors and purposes
We use data to authenticate users, generate itineraries, verify places, synchronize saved routes, verify purchases, maintain entitlements, provide support, and protect the service. Supabase provides authentication, cloud data, and Edge Functions; Apple processes App Store purchases and provides signed transaction status; OpenAI processes consented trip-planning requests; Google Maps, Apple Maps, or Amap may process user-selected place and route queries; Netlify hosts the website and server functions.
Avatar photos
Uploading an avatar is optional. A photo you select is compressed and stored in your Supabase user profile, linked to your account, and used only to display your avatar in Triplyra. You can replace it or remove the associated profile through account deletion.
Retention, sharing, and tracking
We do not sell personal data or use it for cross-app tracking. Data is shared with service providers only where needed for the functions above and retained only as long as required to provide the service, comply with law, or resolve disputes. Shared itinerary links do not include an account ID, name, email, phone number, avatar, or password.
Your choices
You can sign out or permanently delete your account in Profile. Deletion removes account and related cloud data that we are not legally required to keep. You may also decline AI processing and continue using non-AI pages.
Contact and changes
Send privacy questions to albert.jaing@onerspace.com or visit Triplyra Support. We will update the effective date and provide an appropriate notice if this policy changes materially.