Privacy Policy

1. Introduction

triprovo is made by ASAR Apps LLC ("we", "us", or "our"), which operates triprovo.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully. By using triprovo, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Information you provide directly:

• Account information: your name and email address. There is no password: you sign in with a one-time code we email you, or with Apple or Google
• Phone number: only if you choose to receive text message alerts. You enter it under Settings → Alerts and confirm it with a code we text you
• Profile data: travel preferences, interests, and travel style
• Trip data: destinations, dates, budgets, itineraries, expenses, saved places, and journal entries you create
• Booking documents: confirmation emails, PDFs, photos, or screenshots you upload or paste to import a booking. These may contain traveller names, confirmation and ticket numbers, flight numbers, and contact details
• Photos: pictures you add to a trip's photo album
• Chat messages: questions and requests you send to the Rovo assistant
• Shared content: links and text you share into the app (for example from the share sheet) so we can find the places they mention
• Payment information: processed by Apple for purchases made in the iOS app, and by RevenueCat and Stripe for purchases made on the website — we never store full card details
• Communications: support messages or feedback you send us

Information collected automatically:

• Usage data: pages visited, features used, and interactions with the service
• Device information: browser type, operating system, and IP address
• Push notification token: if you enable notifications in the mobile app
• Cookies: session cookies for authentication and preference cookies for settings like dark mode

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Generate AI-powered travel itineraries tailored to your preferences
• Answer your questions and make changes to your itinerary through the Rovo chat assistant
• Read booking confirmations you upload and add the details (dates, times, locations, confirmation numbers) to your trip
• Find and add places from links and text you share into the app
• Show flight status, weather, currency rates, and destination photos for your trip
• Send push notifications about your trips, if you enable them
• Send text message alerts about your trips to a phone number you have confirmed, only for the alert types you switch on. At most one text a day; reply STOP at any time to end them. Message and data rates may apply
• Process payments and manage subscriptions, through Apple, RevenueCat and Stripe
• Send transactional emails (welcome, trial expiry, collaboration invites)
• Provide customer support
• Improve and personalize the service
• Monitor for abuse and ensure the security of the service
• Comply with legal obligations

We do not sell your personal data to third parties.

4. Third-Party Services

We use the following third-party services that may process your data:

• AI providers (currently OpenAI) — for AI features: itinerary generation, Rovo chat, booking import, and finding places in shared links. See section 5 for exactly what is sent, and OpenAI's Privacy Policy.
• RevenueCat and Stripe — for purchases made on the website. See RevenueCat's Privacy Policy and Stripe's Privacy Policy.
• Google — if you sign in with Google. See Google's Privacy Policy.
• Apple — if you sign in with Apple. See Apple's Privacy Policy.

We also rely on service providers for hosting, database and file storage, email delivery, push notifications, text message delivery (Amazon Web Services), maps and place search, flight and pricing data, weather, photos, and currency rates. They process data only on our instructions and only as needed to run the service. Those that are not hosting or storage receive search terms, destinations, or flight numbers — not your identity.

Some links to booking sites are affiliate links. Clicking one may share a referral identifier with that site, not your personal data.

5. AI Features and Your Documents

Several features use an AI provider's API (currently OpenAI) to understand text and images. Here is exactly what is sent and what is not:

• Itinerary generation: your destinations, dates, and travel preferences.
• Rovo chat: your messages and the itinerary of the trip you are chatting about.
• Booking import: the confirmation email, PDF, photo, or screenshot you upload, so the details can be read and added to your trip. Because these documents come from your booking provider, they may contain your name, confirmation numbers, and contact details.
• Shared links: the text of the link or page you share, so we can find the places it mentions.

• We never send your account details — your name, email address, or user ID — with these requests. Requests are made from our servers under our own account and are not tied to you by OpenAI.
• OpenAI does not use data sent through its API to train its models.
• OpenAI may retain API content for up to 30 days for abuse monitoring, after which it is deleted.
• The details we extract from a booking are stored in your trip, on our servers, like any other trip data. The original uploaded file is not kept.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where required by law (e.g., financial records retained for tax purposes for up to 7 years).

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Opt out of marketing communications

To exercise any of these rights, contact us at support@triprovo.com.

8. Cookies

We use cookies and similar technologies for authentication (session cookies) and user preferences (e.g., dark mode). We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this may affect the functionality of the service.

9. Security

We implement industry-standard security measures including HTTPS encryption, hashed passwords (bcrypt), and secure session management. However, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password for your account.

10. Children's Privacy

triprovo is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the service. Your continued use of triprovo after changes are posted constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at: