Privacy Policy

Effective Date: August 11, 2026

TripSatchel respects your privacy.

This Privacy Policy explains how TripSatchel Inc., operating as TripSatchel (“TripSatchel,” “we,” “us,” or “our”), collects, uses, discloses, stores, and protects personal information when you use the TripSatchel mobile application, tripsatchel.com, and related services.

It also explains the choices and rights available to you.

1. Scope of This Policy

This Privacy Policy applies to personal information processed through:

• the TripSatchel mobile application;
• tripsatchel.com;
• TripSatchel accounts;
• TripSatchel support communications;
• social and messaging features;
• trip-planning and collaboration features;
• AI-assisted TripSatchel features; and
• other TripSatchel services that link to this Privacy Policy.

Third-party services have their own privacy practices and are not governed by this Privacy Policy.

2. Who Is Responsible for Your Information

TripSatchel is operated by:

TripSatchel Inc.

The person responsible for the protection of personal information at TripSatchel is:

Privacy Officer: [PRIVACY OFFICER NAME/TITLE]
Email: privacy@tripsatchel.com
Mailing address: [MAILING ADDRESS]

You may contact the Privacy Officer regarding access, correction, deletion, consent, complaints, or any other privacy question.

3. Information We Collect

The information TripSatchel collects depends on which features you use.

3.1 Account Information

When you create or maintain an account, we may collect:

• your name;
• username;
• email address;
• authentication information;
• profile photograph;
• biography;
• profile preferences;
• account settings; and
• account identifiers.

Passwords may be processed through our authentication provider rather than being visible to TripSatchel personnel in readable form.

3.2 Profile and Social Information

If you use TripSatchel's social features, we may process:

• your profile;
• users you follow;
• users who follow you;
• friend or collaboration relationships;
• likes;
• reactions;
• reposts;
• saved posts;
• comments;
• content interactions;
• blocks;
• reports; and
• other social activity.

Some of this information may be visible to other users depending on your settings and the feature involved.

3.3 User Content

We may collect and store content you choose to upload or create, including:

• photographs;
• videos;
• posts;
• stories;
• Zips;
• Roams;
• captions;
• comments;
• reviews;
• trip names;
• itineraries;
• saved places;
• travel notes;
• collaboration content; and
• other material you submit.

You decide what content to upload.

Do not upload content containing personal information about another person unless you have an appropriate right or permission to do so.

3.4 Messages

If you use TripSatchel messaging, we may process:

• message content;
• sender and recipient identifiers;
• message timestamps;
• replies;
• reactions;
• attachments; and
• information necessary to deliver and secure messages.

Messages may be stored so that participants can access their conversations.

TripSatchel personnel do not routinely read private messages. We may, however, access or preserve information when reasonably necessary for security, abuse investigations, user reports, technical support, legal compliance, or protection of users.

3.5 Location Information

With your device permission, TripSatchel may collect or process location information to provide features such as:

• showing your location on a map;
• finding places near you;
• searching an area;
• planning a route;
• calculating detours;
• identifying nearby businesses or attractions;
• creating travel recommendations;
• displaying location-relevant content; and
• organizing trips.

Depending on the permission you grant, this may include precise location information.

You can control location permissions through your device settings.

Certain TripSatchel features may not work properly if location access is disabled.

TripSatchel does not require you to publicly display your real-time location merely because location permission is enabled. Any feature that shares location with another user should be treated separately from device location used to provide maps or recommendations.

3.6 Trip and Travel Information

When you create or plan a trip, we may process:

• destinations;
• starting locations;
• trip dates;
• route information;
• stops;
• places you save;
• itinerary information;
• travel preferences;
• budget preferences;
• pace preferences;
• food or activity preferences;
• detour preferences;
• collaborative trip participants; and
• other trip-planning information you provide.

3.7 Search and Discovery Activity

We may process searches and interactions such as:

• places you search for;
• categories you select;
• map areas you explore;
• filters you use;
• content you view;
• places you save;
• recommendations you interact with; and
• other actions needed to personalize and improve the TripSatchel experience.

3.8 Device and Technical Information

When you use TripSatchel, certain technical information may be collected automatically, including:

• device type;
• operating system;
• app version;
• language;
• IP address;
• device or installation identifiers;
• session information;
• crash information;
• diagnostic information;
• timestamps;
• network information; and
• security or fraud signals.

We use this information primarily to operate, troubleshoot, secure, and improve TripSatchel.

3.9 Support Communications

If you contact us, we may collect:

• your name;
• email address;
• account information;
• the content of your request;
• screenshots or attachments you provide; and
• information necessary to respond.

4. How We Collect Information

We may collect personal information:

Directly from you

For example, when you:

• create an account;
• edit your profile;
• upload a photograph or video;
• create a trip;
• send a message;
• contact support;
• save a place; or
• provide preferences.

Automatically through the Service

For example, through app interactions, device information, diagnostics, or security logs.

From your device

For example, location, photos, camera, or other information when you grant permission for a TripSatchel feature to access it.

From other users

For example, if another user:

• follows you;
• sends you a message;
• shares an itinerary with you;
• tags or mentions you;
• reports content; or
• interacts with your account.

From service providers

We may receive information necessary to operate TripSatchel from hosting, authentication, mapping, infrastructure, security, analytics, AI, or other providers acting on our behalf.

5. Why We Use Your Information

We may use personal information to:

Provide TripSatchel

Including to:

• create and maintain accounts;
• display profiles;
• deliver posts and media;
• enable social features;
• provide maps;
• create and save trips;
• provide itineraries;
• send messages;
• enable collaboration;
• synchronize content across devices; and
• provide requested functionality.

Personalize Your Experience

For example, to:

• recommend places;
• suggest trips;
• rank relevant content;
• remember preferences;
• personalize discovery; and
• show information relevant to your travel interests.

Operate AI Features

We may process information you submit to an AI-powered feature to generate the response or recommendation you requested.

Protect Users and TripSatchel

We may use information to:

• detect abuse;
• investigate reports;
• enforce our Terms;
• prevent spam;
• prevent fraud;
• protect accounts;
• detect unauthorized access;
• address security incidents; and
• protect the rights and safety of users and others.

Provide Customer Support

We use information necessary to respond to questions, troubleshoot problems, and resolve complaints.

Improve TripSatchel

We may use usage, technical, and feedback information to understand how features work, identify bugs, evaluate performance, and develop improvements.

Comply With Legal Obligations

We may process information where reasonably necessary to comply with applicable law, lawful requests, court orders, regulatory requirements, or legal proceedings.

6. Consent and Your Choices

Where consent is required, TripSatchel will seek consent in a manner appropriate to the nature and sensitivity of the information and the purpose for which it is collected.

You may be able to withdraw consent to certain processing, subject to legal or contractual restrictions and reasonable notice.

For example, you may revoke device permissions for:

• precise location;
• camera access;
• photo-library access; or
• notifications

through your device settings.

Withdrawing permission may prevent certain features from working.

7. AI-Assisted Features

TripSatchel may use third-party artificial-intelligence service providers, including OpenAI, to power certain trip-planning, recommendation, description, or question-answering features.

When you intentionally use an AI-powered feature, we may send information necessary to process your request, such as:

• your prompt;
• selected travel preferences;
• destination or route information;
• selected places;
• relevant trip context; and
• other information required to generate the requested result.

We seek to limit information sent to AI providers to what is reasonably necessary for the requested feature.

Do not enter highly sensitive personal information into AI prompts unless it is necessary for the feature you are intentionally using.

TripSatchel may change or add AI service providers as the Service evolves.

8. Maps and Location Providers

TripSatchel may use Apple technologies such as Apple Maps or MapKit to display maps, locations, search results, routes, or information about places.

When you interact with third-party platform services, those providers may separately process information according to their own privacy policies and platform rules.

9. Service Providers

We use service providers to operate TripSatchel.

These may include providers of:

• database hosting;
• cloud infrastructure;
• authentication;
• file and media storage;
• content delivery;
• maps and place information;
• artificial intelligence;
• communications;
• analytics;
• crash reporting;
• security;
• customer support; and
• other technical services.

For example, TripSatchel may use Supabase for database, authentication, backend, and storage-related functionality and OpenAI for certain AI-powered functionality.

Service providers receive only information reasonably required for the services they provide and are expected to handle information consistently with applicable contractual and legal requirements.

10. When We May Disclose Information

We may disclose information in the following circumstances.

With Other Users

Information you intentionally make public may be visible to other users.

Information you share with a specific person or collaboration group may be made available to those recipients.

With Service Providers

We may disclose information to companies that process it for TripSatchel as described above.

For Safety and Security

We may disclose information when reasonably necessary to detect, prevent, investigate, or respond to fraud, security threats, abuse, or dangerous conduct.

For Legal Reasons

We may disclose information where we reasonably believe disclosure is required or permitted by applicable law, legal process, court order, or lawful government request.

Business Transactions

If TripSatchel is involved in a merger, financing, acquisition, restructuring, bankruptcy, sale of assets, or similar business transaction, personal information may be disclosed where permitted by law and subject to applicable confidentiality and privacy requirements.

11. We Do Not Sell Your Personal Information

TripSatchel does not currently sell personal information to data brokers or third parties for their own independent marketing purposes.

If our practices materially change, we will update this Privacy Policy and obtain consent or provide choices where required by law.

12. Advertising

TripSatchel does not currently use personal information for third-party behavioural advertising.

If advertising functionality is introduced in the future, this Privacy Policy and any required consent mechanisms will be updated before those practices begin.

13. Website Cookies and Similar Technologies

The TripSatchel website may use cookies or similar technologies that are reasonably necessary to:

• operate the website;
• remember preferences;
• maintain security;
• understand website performance; or
• provide functionality.

If TripSatchel introduces non-essential analytics, advertising, or tracking technologies, we will provide notices and choices where required by applicable law.

14. International Processing

TripSatchel and its service providers may process or store information in Canada, the United States, or other jurisdictions where our service providers maintain infrastructure.

As a result, personal information may be subject to the laws of a jurisdiction other than the one in which you live and may lawfully be accessible to courts, law enforcement, or governmental authorities in that jurisdiction.

Where required, TripSatchel assesses privacy and security considerations associated with transferring personal information outside Quebec or Canada and uses appropriate contractual or organizational safeguards.

15. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to legal, security, operational, and legitimate recordkeeping requirements.

Retention periods vary depending on the type of information.

For example:

• Account information may be retained while your account remains active.
• Profile information and content generally remain until deleted by you, removed by us, or your account is deleted.
• Messages may remain available to conversation participants according to product functionality.
• Trip information may remain until you delete the trip or your account.
• Security and abuse records may be retained for a reasonable period necessary to protect TripSatchel and its users.
• Support records may be retained long enough to resolve your request and maintain reasonable records.
• Information required by law may be retained for the legally required period.

When information is no longer required, we may delete it, securely destroy it, or anonymize it in accordance with applicable law.

Deleted information may remain temporarily in secure backups until those backups are overwritten in the ordinary course.

16. Account and Data Deletion

TripSatchel users may request deletion of their account through the account deletion functionality provided inside the app or by contacting us where necessary.

Deleting your account generally begins the process of deleting or de-identifying personal information associated with the account, except where retention is reasonably necessary or legally required for purposes such as:

• fraud prevention;
• abuse prevention;
• security;
• legal compliance;
• dispute resolution;
• accounting obligations;
• enforcement of our Terms; or
• protection of users.

Deleting your account does not necessarily delete information independently retained by other users, such as screenshots, copied information, or messages that form part of another user's conversation record where retention is legally and technically appropriate.

17. Security

TripSatchel uses administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, loss, misuse, alteration, or destruction.

Security measures may include, where appropriate:

• access controls;
• authentication;
• encrypted communications;
• restricted administrative access;
• infrastructure security;
• backups;
• monitoring; and
• security procedures.

No internet-connected system can guarantee absolute security.

You should use a strong password, protect your device, and notify us promptly if you suspect unauthorized access to your account.

18. Privacy and Security Incidents

If TripSatchel becomes aware of a privacy or security incident involving personal information, we will investigate and take reasonable steps to reduce the risk of harm.

Where required by applicable law, we will notify affected individuals and the appropriate privacy authority.

19. Your Privacy Rights

Depending on where you live, you may have rights relating to your personal information.

These may include the right to:

• request access to personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion in applicable circumstances;
• withdraw consent where processing is based on consent;
• ask questions about how information is collected, used, or disclosed;
• obtain information about categories of service providers or third parties receiving information; and
• raise a complaint about our privacy practices.

To make a privacy request, contact:

privacy@tripsatchel.com

We may need to verify your identity before fulfilling certain requests.

We will respond within the timeframe required by applicable law.

20. Quebec Privacy Rights

If Quebec privacy law applies to you, you may have rights including access to and correction of your personal information and other rights provided by the Act respecting the protection of personal information in the private sector.

Questions and requests may be directed to TripSatchel's Privacy Officer.

21. Children and Minors

TripSatchel is not intended for children under 14 years old, and users under 14 may not create a TripSatchel account.

If the applicable law where you live requires a higher age before you may independently consent to an online service or its processing of personal information, that higher age applies.

If we learn that an account was created by a person who does not meet the applicable minimum age, we may suspend or delete the account and associated information as appropriate.

Parents or legal guardians who believe a child has provided personal information in violation of this policy may contact:

privacy@tripsatchel.com

22. Your Posts and Public Information

TripSatchel includes social features.

If you publish information publicly, other users may be able to:

• view it;
• react to it;
• save it;
• share it;
• repost it;
• comment on it; or
• otherwise interact with it according to the functionality available in the app.

Consider this before publishing information about:

• your travel schedule;
• your current location;
• your home;
• personal contact information; or
• other sensitive information.

You are responsible for choosing what you publicly share.

23. Changes to This Privacy Policy

We may update this Privacy Policy as TripSatchel evolves or as legal, technical, or business requirements change.

When we make material changes, we will provide notice in a manner appropriate to the change and as required by applicable law.

Where renewed consent is legally required, we will request it.

The “Effective Date” at the top identifies the current version.

24. Contact TripSatchel

For privacy questions, requests, or complaints:

TripSatchel
Privacy email: privacy@tripsatchel.com
Support: support@tripsatchel.com
Website: https://tripsatchel.com