Privacy Policy

1. Who we are

TripsHub ("we", "us", "our") is a travel itinerary service operated by Pablo Mincz. We are reachable at hello@tripshub.app.

2. What data we collect

We collect only what is necessary to provide the service:

• Account information — your name and email address when you sign in with Apple, Google, or email.
• Email content — the body of booking confirmation emails you forward to your personal TripsHub address. We read these to extract your travel details and then store the structured data (flight numbers, dates, hotel names, etc.).
• Trip data — bookings, notes, expenses, documents, and packing lists you create or upload inside the app.
• Usage data — basic analytics (via PostHog) such as which features are used, plus server logs for debugging and security purposes.

3. How we use your data

• To build and display your trip itineraries.
• To power the AI assistant, which reads your trip data to answer your questions.
• To send push notifications you have opted into (e.g. flight status alerts).
• To improve the service — we may review anonymised, aggregated data to understand how features are used.

We do not sell your data. We do not use your data for advertising.

4. Email forwarding

When you forward a booking email to your personal TripsHub address (e.g. abc123@tripshub.app), the raw email is passed to our backend, processed by an AI model to extract structured booking data, and then discarded. We do not store the raw email content beyond what is needed for processing (typically a few seconds).

We never access your email inbox directly. You grant us no inbox permissions. Forwarding is always a deliberate action you initiate.

5. Third-party services

We use the following sub-processors to deliver the service:

• Supabase — database and authentication (data stored in the EU/US depending on region).
• Anthropic — AI model used for email parsing and the trip assistant. Email content is sent to Anthropic for processing and is subject to their privacy policy.
• Cloudflare — email routing and CDN.
• Railway — backend hosting.
• AirLabs — live flight status data (only flight numbers are sent, no personal data).
• Ticketmaster — local events data (only destination and dates are sent).
• Unsplash — destination photography.
• PostHog — product analytics to help us understand feature usage and improve the app. No personal data beyond a user identifier is sent.

6. Data retention

Your data is retained for as long as your account is active. You can delete individual trips, bookings, documents, and notes at any time within the app. To delete your entire account and all associated data, email us at hello@tripshub.app and we will process your request within 30 days.

7. Security

All data is transmitted over HTTPS. Your trip data is stored in Supabase with row-level security enabled, meaning each user can only access their own data. We use industry-standard practices for authentication (OAuth via Apple and Google) and secret management.

8. Your rights

Depending on where you are located, you may have rights to access, correct, export, or delete your personal data. To exercise any of these rights, contact us at hello@tripshub.app. We will respond within 30 days.

9. Cookies

TripsHub uses only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.

10. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests, email us at hello@tripshub.app.