Privacy Policy

TripLock Inc. ("TripLock," "we," "us") respects your privacy. This policy explains what we collect, how we use it, who we share it with, and the choices you have.

1. Scope

This policy covers the TripLock mobile app, the triplock.app website, and our waitlist (together, the "Services"). TripLock is a group trip planning, savings tracking, and booking tool. TripLock is not a bank and does not hold customer funds.

2. What we collect

• Account information. Your email address, password, and display name. Passwords are stored in hashed form by our authentication provider. We never see or store your password in plain text.
• Sign-in identifiers. If you sign in with Apple or Google, we receive an account identifier from that provider and, depending on your settings with them, your name and email address (or an Apple private relay address).
• Traveler details. When you book travel, the legal name, date of birth, and phone number of each traveler. Booking suppliers require this to issue a reservation.
• Trip content. Trip names, destinations, savings goals, chat messages, and expenses that you and your group add.
• Ledger entries. Records of contributions that members log toward a trip goal. The ledger is a record for your group. It is not a bank balance, and TripLock does not hold the money it describes.
• Payment information. When you pay for a booking, the card details you enter are sent to the booking supplier or its payment processor to complete the purchase. TripLock does not store your full card number or security code.
• Device and notification data. A push notification token if you allow notifications, plus basic device information such as device model and operating system version.
• Crash diagnostics. If the app crashes or hits an error, we collect diagnostic data such as the error details, device type, operating system, and app version.
• Waitlist information. Your email address when you join the waitlist, and any optional answers you choose to share.
• Signup security data. When you join the waitlist, we record the IP address and signup source (for example, which link brought you here) alongside your email. We use this solely to prevent spam and abuse (such as rate-limiting automated signups) and to understand which channels people find us through.
• Basic technical data. Like most websites and apps, our hosting providers may automatically receive standard log data such as IP address, browser or device type, pages viewed, and referral source.
• Communications. If you email us at info@triplock.app, we keep the correspondence.

We do not collect government IDs, Social Security numbers, or bank login credentials. See Section 3.

3. Money and banking

TripLock does not connect to your bank account, does not hold customer funds, and does not move money. Savings progress in the app comes from what you and your group record.

We are working toward savings features provided through a licensed U.S. banking partner. Those features are not live. Before they launch, we will update this policy to explain what additional information is collected (such as the identity verification that banks are required to perform), who receives it, and how it is protected, and we will ask for your consent in the app at that time.

4. How we use it

• To create and secure your account and sign you in.
• To run your trips: show your group its goal, progress, ledger, chat, and expenses.
• To complete bookings you request, by passing traveler and payment details to the booking supplier.
• To send push notifications you have allowed, and service emails about your account or bookings.
• To fix crashes, prevent abuse, and improve the Services.
• To maintain the waitlist and send launch and product updates.
• To understand usage in aggregate (for example, counts of signups or popular destinations).

5. What we don't do

• We do not sell your personal information, and we do not share it with third parties for their own marketing.
• We do not send marketing email without a way to opt out.

6. Who we share it with

Other members of your trips. Your display name, contributions and ledger entries, chat messages, and expenses are visible to the members of the trips you join. Your payment and traveler details are not shown to other members.

Service providers. These vendors process data on our behalf to run the Services:

• Supabase (database, authentication, and backend hosting)
• Expo (delivery of push notifications, through Apple and Google push services)
• Sentry (crash and error reporting)
• Apple and Google (sign-in, if you choose those options)
• Pexels (destination imagery; when images load, Pexels may receive standard request data such as your IP address)
• Resend (email delivery), Vercel (website hosting), and GitHub (code hosting)

Booking suppliers. When you book, we send the traveler details, payment details, and booking information the supplier needs: Duffel (flights), LiteAPI (hotels), and Viator (tours and activities). Those suppliers, and the airlines, hotels, and operators they work with, handle that information under their own privacy policies.

Affiliate partners. Some links, such as car rentals through DiscoverCars, are affiliate links. If you tap one, the partner receives standard referral data so the booking can be attributed to TripLock. We do not send them your account information.

Legal and safety. We may disclose information if required by law, or to protect the rights, safety, and security of TripLock, our users, or others. If TripLock is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that deal, and this policy will continue to apply to it.

7. Your choices & rights

• Notifications. Push notifications are optional. The app asks for your permission first, and you can turn them off at any time in your device settings.
• Email. Unsubscribe from marketing email via the link in any message or by writing to info@triplock.app.
• Access and correction. You can edit most of your information in the app. For anything else, email info@triplock.app and we will confirm or correct what we hold.
• Deletion. See Section 8.
• California residents. You may request disclosure, correction, or deletion of your personal information as provided by the CCPA/CPRA, and we will not discriminate against you for doing so. We do not sell or "share" personal information as those terms are defined in California law, and we use sensitive personal information (such as account login details) only to provide the Services.

8. Deleting your account

You can delete your account in the app, from your account settings. If you cannot access the app, email info@triplock.app from the address on your account and we will delete it for you.

When you delete your account, we delete your profile, email address, display name, sign-in identifiers, saved traveler details, push notification tokens, and the chat messages and expenses you posted.

What is kept. Ledger entries you made in shared trips are detached from your identity, not deleted. They stay in the trip's history with no name attached, so that other members' totals and records do not change. Bookings already made stay with the supplier under its own policies. We may also keep limited records where the law requires it.

9. Data retention

• Account and trip data is kept while your account is open, and deleted or detached as described in Section 8 when you delete it.
• Payment card details are passed to the booking supplier at checkout and are not stored by TripLock.
• Traveler details are kept while your account is open so you do not have to re-enter them. You can remove them at any time.
• Crash diagnostics are kept for a limited period needed to investigate and fix issues, then deleted.
• Push notification tokens are kept until you turn off notifications, sign out, or delete your account.
• Waitlist data is kept until launch-related communications conclude or you ask us to delete it.

10. Security

We use reputable infrastructure providers, encryption in transit, and access controls that limit each user to their own data and their own trips. No method of transmission or storage is 100% secure.

11. Age requirement

The Services are for adults. You must be at least 18 years old to create an account or join the waitlist, and we do not knowingly collect information from anyone under 18. An adult may enter a minor's traveler details when booking travel for them. If you believe a minor has created an account, contact us and we will delete it.

12. International visitors

Our Services are operated from the United States. If you use them from elsewhere, your information will be processed in the U.S.

13. Changes

We will post any updates to this policy on this page with a new effective date. Material changes will be flagged in the app or by email when appropriate.

14. Contact

TripLock Inc. · info@triplock.app