Privacy Policy

Who this policy covers

This policy applies to the Tripumentary mobile app, website, support, and related services. Tripumentary is the service name. The legal developer is identified in the store listing through which you obtained the app.

Data we process

• Account details, including email address, authentication identifier, and an internal account ID.
• Photos, videos, original audio, file details, capture dates, and location metadata only when you select media for a trip.
• Trip titles, dates, companions or names you enter, fact-check responses, narration edits, and other project choices.
• Purchase identifiers, subscription status, product identifiers, and credit-ledger entries. We do not receive complete payment-card details.
• Optional push token and notification preferences after you request notifications.
• A limited allowlist of product events and technical diagnostics. We do not use an advertising identifier or cross-app tracking.
• Messages and contact information you send to support.

How we use data

• Authenticate you and keep each trip tied to its owner.
• Upload, organize, analyze, fact-check, render, store, download, and share the projects you request.
• Synchronize purchases, subscriptions, and episode credits without treating entitlement and credits as the same record.
• Send processing notifications only after opt-in.
• Protect the service, prevent abuse, resolve support requests, and improve reliability.

Media, facts, and automated processing

Tripumentary uses selected media and recorded metadata to propose a chronology and story plan. You must review uncertain people, places, events, emotions, scenes, and narration before a paid render is accepted.

Tripumentary does not intentionally create fictional travel footage or identify a person from their face. Unknown information must remain unconfirmed. External AI and speech providers are not enabled in the current release. This policy will be updated before private media is sent to any additional AI or speech provider.

Service providers and disclosure

We disclose only the data needed to providers that operate the service, including Firebase Authentication, RevenueCat, Apple or Google for store transactions, Expo and platform push services after opt-in, and configured cloud hosting and private storage providers. Providers process data under their own terms and our service arrangements.

We may disclose data when required by law, to protect people or the service, or as part of a business transfer subject to appropriate safeguards. We do not sell personal data.

Sharing

Projects are private by default. A public share link is created only when you ask for one. It exposes a watermarked preview, not source media, full episodes, GPS coordinates, or your email. You can revoke a link at any time.

Retention and deletion

• Original media is scheduled for deletion 30 days after the full episode completes. You may choose earlier deletion after completion.
• Proxies, thumbnails, and extracted audio are scheduled for deletion after seven days.
• Completed outputs remain until you delete the trip or account.
• Deleting a trip revokes its share links immediately and queues its private objects and project records for deletion.
• Deleting an account stops access immediately and queues trips, media, outputs, share links, profile data, push tokens, and eligible analytics for permanent deletion within 30 days.
• Apple, Google, RevenueCat, security, tax, fraud-prevention, and transaction records may be retained when required by law or the applicable provider.

Your choices and rights

You can manage selected media, sharing, notifications, original-media retention, trips, and account deletion in the app. Depending on your location, you may also have rights to access, correct, delete, restrict, object to, or receive a copy of personal data.

Contact [email protected] to make a privacy request. We may need to verify that the request belongs to the account. You may also complain to the privacy authority that applies where you live.

Security and international processing

Tripumentary uses owner authorization, private object storage, short-lived media links, access controls, and deletion workflows. No system can guarantee absolute security.

Providers may process data outside your country. Where required, we rely on applicable contractual or legal safeguards for international transfers.

Children and changes

Tripumentary is not directed to children who cannot legally consent to account data processing in their location. A parent or guardian should contact us if they believe a child submitted data without valid consent.

We may update this policy when the service, providers, or law changes. We will revise the date above and provide additional notice when required.

Contact

Privacy questions and requests: [email protected]