Privacy Policy

Who we are#

TripMate is provided by WARMCAMERA, based in the United Kingdom (“we”). We are responsible for your personal data under UK and EU data protection law. Contact us at support@warmcamera.com.

What we collect#

• Account: your email and name, and optionally a username, profile photo, home town and travel style. If you sign in with Apple or Google, we get your name and email from them (Apple may give us a private relay address instead).
• What you add: trips, plans, packing lists, bookings, spending, notes, chat messages, polls, and the photos, videos, documents and passes you upload.
• Location: your precise location, only while you use nearby search, to find places around you. We don’t keep a history of where you’ve been.
• Notifications: a push token for your device, if you allow notifications.
• Device and usage: device type, app version and the days you open the app; crash reports (device model, app version and your account ID); and anonymous counts of steps like finishing onboarding, tied to a random ID for your install.
• Purchases: whether you have TripMate Pro, through RevenueCat. Payments are handled by the App Store or Google Play; we never see your card.
• Booking emails: the booking emails you forward to your TripMate address (see Booking emails).

How we use it and why#

We use your data only for these purposes, each with a legal basis under UK and EU data protection law:

• To provide TripMate (contract): your account, keeping trips in sync and sharing them with the people you invite, the reminders you ask for, search, flight features, Orbit when you use it, TripMate Pro and booking emails.
• With your permission (consent): notifications, location and, on iPhone, ad tracking. You can withdraw it at any time in Settings or your phone’s settings.
• To keep TripMate working and safe (legitimate interests): rate limits and reviewing reports, crash reports to fix problems, and anonymous usage counts to understand which features help. You can object by emailing us.
• To meet legal obligations: for example tax records and lawful requests.

We don’t sell your data or show ads in TripMate. On iPhone, Meta’s SDK tells Meta (Facebook and Instagram) about app installs, sign-ups and Pro purchases, so we can see whether our ads work. Only if you allow tracking when iOS asks is this linked to your device’s advertising identifier; otherwise Meta gets it only in aggregate, through Apple’s SKAdNetwork. Nothing in TripMate depends on your answer, and you can change it at any time in your iPhone’s Settings → Privacy & Security → Tracking.

Who we share it with#

Only what each service needs, only for the feature you use:

• Supabase (our database, storage and servers)
• OpenAI, when you use Orbit, TripMate’s AI: your request and the trip details it needs (see Orbit). OpenAI doesn’t use it to train models.
• Google Places, Mapbox and Open-Meteo: searches and the area you’re looking at
• Unsplash: the words you search for a trip cover photo; the photo you pick is loaded from Unsplash
• RouteStack and AeroDataBox: flight and hotel searches and flight numbers
• RevenueCat, Apple and Google: subscriptions
• Apple and Google: sign-in, if you use it
• Sentry: crash reports
• Meta: on iPhone, app installs, sign-ups and Pro purchases, to measure our ads (see “How we use it and why”)
• Expo: delivering notifications (your push token and the notification)
• Cloudflare: receives the booking emails you forward and passes them to us
• Travelpayouts, GetYourGuide, Viator and other partners: when you tap a partner link, the partner sees the destination and dates in the link and that you came from TripMate

People on a trip see that trip’s content. We may disclose data if the law requires it.

Orbit (AI)#

When you use Orbit, TripMate’s AI, TripMate sends OpenAI what you ask and the trip details it needs: places, dates, plans, bookings and budgets, your home town and travel style for trip plans, and any confirmation or receipt you choose to have read (sent as it is, so it may include names on it). Your email and account details aren’t sent, and OpenAI doesn’t use this data to train its models. You can turn this off at any time with Share with Orbit in Settings; Orbit then stops working until you turn it back on.

Booking emails#

With TripMate Pro you can add bookings from your email by forwarding booking emails (from Gmail, Outlook or another provider) to your private TripMate address. We only keep emails that look like travel bookings (from travel companies or with words like confirmation, itinerary or reservation) and delete the rest straight away. The emails we keep are read by Orbit to create the booking in the matching trip, and their text is deleted after 30 days. You can stop at any time by removing the forwarding rule in your email provider; deleting your account deletes them too.

Where it’s stored and how long#

Your data is stored by our providers in the EU. Some providers (OpenAI, Sentry, RevenueCat, Expo and Meta) process data in the US; those transfers are protected by Standard Contractual Clauses or the UK International Data Transfer Agreement. Data is encrypted in transit and at rest, and access is limited to the people who run TripMate. We keep your data until you delete it or your account. Deleting your account (Settings → Delete account) removes your profile, trips, photos, documents and passes; trips shared with others are handed to another member. Backups are cleared within 30 days.

Your rights#

You can access, correct or delete your data, get a copy of it (portability), object to or restrict how we use it, and withdraw consent. You can edit or delete most things in the app, and delete your account in Settings → Delete account. To get a copy of your data, or for anything else, email support@warmcamera.com; we reply within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk) or your local data protection authority.

Waitlist#

If you join the waitlist on tripmate.warmcamera.com, we keep your email, whether you use iPhone or Android, and, if you give them, your first name and where you heard about TripMate, plus a scrambled (hashed) version of your IP address to stop spam sign-ups. We use them only to tell you when TripMate launches, with your consent. We keep them until six months after launch, or until you ask us to remove you: email support@warmcamera.com. The list is stored with Supabase and nobody else sees it.

California residents#

We don’t sell your personal information. If you allow tracking on iPhone, telling Meta about your install, sign-up and purchases to measure our ads may count as “sharing” under the California Consumer Privacy Act (CCPA/CPRA); you can stop it by turning tracking off for TripMate in your iPhone’s settings. You can ask to know, correct or delete the personal information we hold about you, and we won’t treat you differently for asking.

Children#

TripMate isn’t meant for children under 13 (or under 16 where local law sets a higher age), and we don’t knowingly collect their data.

Changes#

This version takes effect on 2 October 2026. If we change it in a way that matters, we’ll tell you in the app before the change takes effect.