Privacy Policy

Scope

This Privacy Policy applies to Tripmunk’s website, mobile apps, and related services. It explains the information processed when you browse public pages, create an account, save places, share content, collaborate, or contact Tripmunk.

Information Tripmunk processes

• Account information, including email address, sign-in provider, account identifiers, username, display name, bio, profile image, and account settings.
• Saved places, custom entries, collections, trips, itineraries, photos, captions, comments, tags, links, collaboration activity, and audience choices.
• Social activity, including follows, likes, bookmarks, invitations, blocks, reports, appeals, and notifications.
• Place searches, selected locations, map interactions, and cached place details. Tripmunk does not require continuous background location access.
• Support messages and safety reports, including the information you choose to provide and evidence needed to review a report.
• Push notification registration, including a device push token, device platform, and app installation identifier, created only when you turn push notifications on.
• Technical information such as device and browser details, IP address, request logs, diagnostics, security events, and product usage events.

Where information comes from

Information comes from you, people who interact or collaborate with you, sign-in providers you choose, service providers, and place-information providers such as Google Places and Google Maps.

How information is used

• Provide accounts, saves, collections, trips, posts, profiles, collaboration, search, maps, and sharing.
• Apply the audience and privacy choices selected for each post, collection, or trip.
• Screen exposed user content, investigate reports, enforce rules, process appeals, prevent abuse, and protect the service.
• Send service, collaboration, security, moderation, and support messages, and deliver the push notifications you turn on, honoring your category choices.
• Measure reliability and product use, diagnose problems, and improve Tripmunk.
• Comply with legal obligations and respond to valid legal process.

Audience choices and public information

Your username, display name, profile image, bio, and profile statistics are public. Posts, collections, and published trips can be limited to everyone, accepted followers, or only you and permitted collaborators. A separate link-sharing control can grant access to a collection or trip through its link.

People with access may copy, capture, or share information they can see. Changing an audience can limit future access in Tripmunk, but it cannot recall copies another person already made outside the service.

Push notifications

Push notifications are off until you turn them on. When you opt in, Tripmunk stores a push token for your device and delivers notifications through Expo’s push service and the notification service for your device platform, operated by Apple or Google. Notification content follows the same audience and privacy rules as your in-app notifications: a push never shows you something you could not see inside Tripmunk.

You can turn push notifications off at any time, overall or by category, in Tripmunk’s Settings or in your device’s settings. Signing out detaches the device, and tokens for devices that can no longer receive notifications are removed.

Service providers and disclosures

Tripmunk uses service providers to host the application, store accounts and content, deliver maps and place information, authenticate accounts, screen content, send email, deliver push notifications, measure product use, and diagnose errors. Current systems include Supabase, Vercel, Google services, OpenAI, Expo, PostHog, Sentry, and configured email delivery providers.

Information may also be disclosed when you direct Tripmunk to share it, when needed to protect people or the service, during a business transaction subject to appropriate safeguards, or when required by law or valid legal process.

Content screening and safety records

Content that may become visible to other people can be checked by automated systems before exposure. Relevant text or image data may be sent to a screening provider. Reports and moderation actions can create restricted evidence, audit, enforcement, and appeal records available only to authorized reviewers.

Automated checks can produce false positives and false negatives. Tripmunk combines them with user reports, blocking, review, enforcement, and appeals.

Retention

Tripmunk keeps information while it is needed to provide the service and for legitimate safety, security, fraud-prevention, dispute, and legal purposes. Different records require different periods. Notifications and pending tag records have product-specific expiry rules; safety evidence and audit records may need to outlast an account when identity is removed or when preservation is legally required.

Provider logs, backups, and cached copies may be removed on their normal secured schedules rather than at the moment an account is deleted. The final retention schedule remains subject to counsel review before this policy is approved.

Your choices

• Edit profile and account settings in Tripmunk.
• Choose the audience for posts, collections, and trips and control link sharing for collections and trips.
• Manage follow approval, tags, activity sharing, blocks, hidden content, and connected sign-in methods.
• Turn push notifications on or off, overall or by category, in Settings.
• Request help with access, privacy, or account information through the Support page.
• Permanently delete your account through Settings or the account-deletion resource.

Account deletion

Account deletion removes the account and account-owned content through Tripmunk’s deletion process. Some safety, security, fraud-prevention, legal-hold, and audit records may be retained with account identifiers removed where possible. A custom-entry image can remain when a surviving shared-board entry still references that copy. These exceptions require final legal and retention review before publication.

Age eligibility

Tripmunk is for people who are at least 18 years old. It is not directed to children. If you believe a person under 18 has created an account, contact safety@tripmunk.app without sending sensitive or illegal imagery.

Security

Tripmunk uses access controls, private storage for unreviewed media, restricted moderation records, authentication checks, and other safeguards designed to protect information. No online service can guarantee complete security.

Privacy contact

Send privacy questions or requests to privacy@tripmunk.app. Include enough information to identify your account and request, but do not send your password or illegal material.