Privacy Policy

1. Who processes the data

The data controller is Lukáš Hronec, Company ID No. 03243877, with a registered office at V zahradách 2462/31, 180 00 Prague – Libeň, Czech Republic (the "operator").

For anything about personal data, write to support@tripeo.app.

2. What data we process

Your account. The e-mail, name and profile picture from the account you sign in with (Google, Apple, or e-mail and password), plus an internal user identifier.

What you fill in. Phone number, contact e-mail and bank details. The bank details serve one purpose: the app builds a QR payment from them, so the others can send you what they owe. No money passes through us and we have no access to your account.

Event content. Event names and dates, the places you add (name, address, the pin on the map, contact details), the itinerary, to-dos, backpack, notes, comments, transport, recorded payments and amounts, and poll votes.

Your subscription. Whether you have Tripeo Premium and until when, purchase and renewal identifiers, the product you bought, its price and the country of purchase. Your card number and billing details never reach us — the payment is handled by the App Store or Google Play.

Settings and technical data. The app language (so notifications reach you in the same language your phone uses), a device identifier for delivering notifications, the device model and app version, crash reports and basic usage statistics.

3. What we do not process

• Your device location. The app never asks for it and never tracks it. The maps in the app show the places someone added to an event — not where you are.
• Health data or any other special category of personal data.
• Payment cards. The app neither receives nor sends money; it only generates a QR payment from the bank details you filled in. A subscription is paid for in the App Store or on Google Play — all that reaches us is that a purchase happened and until when it is valid.

4. Who can see your data

Only people in the same event. Your name, picture, the contact details you filled in and the event content are visible to the members of that event — nobody else. A private payment is visible only to you.

We pass nothing on. We don't sell your data, lend it, use it for advertising or profiling, and we don't share it with advertisers or data brokers.

5. Services the app runs on

The app wouldn't work without these. They process data on our behalf, each only to the extent its feature requires:

• Google Firebase — sign-in, database, server functions, notifications, crash reporting and usage statistics.
• Google Maps and address autocomplete — when you search for a place or look at the event map.
• Google Drive — only if the event owner connects their own account. Photos and documents are then stored on their Drive, not with us. The app can see only the folders and files it created itself; the rest of their Drive stays out of reach. The connection can be revoked at any time.
• Open-Meteo — the weather forecast. What we send is the location of the event's place, not yours.
• European Central Bank — currency rates. Only a currency code is sent, no personal data.
• App Store (Apple) and Google Play (Google) — paying for a subscription. The purchase happens with them; we learn nothing about your payment details.
• RevenueCat (RevenueCat, Inc., United States) — keeps the state of your subscription on our behalf. What it receives is the internal identifier of your account, purchase and renewal identifiers, the product you bought, its price and the country of purchase. We send it neither your name nor your e-mail.

Transfer outside the European Union. RevenueCat is based in the United States, so your subscription data is transferred outside the EU. The transfer relies on the European Commission's standard contractual clauses.

6. How long we keep it

As long as you have an account and belong to events. An event you leave keeps your name on the payments and notes you recorded, because without it the settlement would stop making sense to everyone else.

Subscription data we keep for as long as you have an account — without it we wouldn't know whether the paid sections are yours.

7. Deleting your account and data

You can permanently delete your account at any time, directly in the app:

1. Open Tripeo and go to the Profile screen.
2. Scroll to the bottom of the page and tap Delete account.
3. Confirm in the dialog.

What happens:

• The sign-in account, your profile, contact details and bank details, saved favourite places and the invitations you created are deleted.
• Events where you were the only active member are deleted entirely. In the others, ownership passes to another member so the group doesn't lose an event in progress.
• What you recorded in shared events — payments, notes, itinerary items, places — stays, because everyone else's settlement rests on it. Your name there is replaced with "Deleted user", and no e-mail or picture is left behind.
• Files and photos uploaded to the event owner's Google Drive stay on their Drive — only they can delete them.

Deletion cannot be undone. If you can't reach the app, write to support@tripeo.app and we'll delete the account for you.

8. Legal basis and your rights

We process data in order to provide you with the app (performance of a contract), and — for diagnostics and statistics — on the basis of our legitimate interest in keeping the app working.

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, and to object to processing. Write to support@tripeo.app and we will sort it out. If you are not satisfied with how we handled it, you can lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.gov.cz) or with the supervisory authority in your country.

9. Changes to this policy

This policy may change from time to time — for instance when a new feature arrives. The current version is always on this page, with the date of the last change at the top.

10. Contact

For anything about personal data, write to us at: