Effective Date: August 3, 2025
Last Updated: August 3, 2025
1. Who We Are
Trip Tale ("we," "our," or "us") is a travel tracking application that helps you document and share your travel experiences. This privacy policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).
Data Controller: Trip Tale LLC
Contact: privacy@triptale.com
2. What Personal Data We Collect
We collect the following types of personal data:
Travel Information
- Flight details, hotel bookings, and itineraries
- Trip dates, destinations, and travel statistics
- Reviews and feedback about flights, hotels, and excursions
Account Information
- Email address and account credentials
- Profile information and preferences
- Social media account details (when you choose to connect them)
Usage Data
- App usage analytics and performance data
- Device information and technical logs
3. How We Collect Your Data
We collect personal data through:
- Information you provide directly when using our app
- Third-party integrations with travel booking platforms
- Cookies and similar tracking technologies
- Social media platforms when you share content
4. Legal Basis for Processing
We process your personal data based on:
- Consent: Social media sharing and marketing communications
- Contract performance: Providing our travel tracking services
- Legitimate interests: App improvement and customer support
5. How We Use Your Personal Data
We use your data to:
- Track and organize your travel history
- Generate content and summaries using automated tools
- Create personalized travel statistics and insights
- Provide travel recommendations
- Facilitate sharing to social media platforms
- Improve our services
- Respond to customer support requests
6. Data Sharing and Third Parties
We may share your data with:
Service Partners
- Aggregated, anonymized data may be shared with travel service providers
- Anonymous performance metrics with select partners
- Third-party booking platforms for service enhancement
Social Media Platforms
- Content you choose to share on social platforms
- Only shared with your explicit consent for each post
We never sell your personal data to third parties.
7. International Data Transfers
Your data may be transferred outside the European Economic Area (EEA) to:
- Cloud service providers (with appropriate safeguards)
- Social media platforms when you choose to share content
8. Data Retention
We retain your personal data for:
- Travel data: As long as your account is active, plus 2 years after deletion
- Usage analytics: 2 years from collection
- Marketing data: Until you withdraw consent
9. Your Rights Under GDPR
You have the right to:
- Access: Request copies of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restrict processing: Limit how we use your data
- Data portability: Receive your data in a portable format
- Object: Object to processing based on legitimate interests
- Withdraw consent: For processing based on consent
To exercise these rights, contact us at privacy@triptale.com
10. Data Security
We implement appropriate technical and organizational measures including:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication systems
- Employee training on data protection
11. Cookies and Tracking
We use cookies and similar technologies for:
- Essential app functionality
- Performance analytics
- User preferences
You can manage cookie preferences through your device settings.
12. Children's Privacy
Our service is not intended for children under 16. We do not knowingly collect personal data from children under 16.
13. Changes to This Policy
We may update this privacy policy periodically. We will notify you of material changes via email or app notification.
14. Contact Us
For privacy-related questions or to exercise your rights:
15. Supervisory Authority
You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately.