Privacy Policy

1. Data controller

The data controller is FlexiTrip, publisher of FlexiTrip. For any privacy question, contact us at support@flexitrip.app.

2. Data we process

Depending on the features you use, we may process the following categories:

• Account data: name, email address, login identifier and authentication provider (Apple, Google or email).
• Trip content: trips, steps, itineraries, budgets, expenses, bookings, wishlists, photos and documents you add.
• Collaboration data: invited members, invitation status and content shared within a trip.
• Subscription data: Premium status, expiry date and technical identifiers provided by RevenueCat and the App Store. We never receive your full card number.
• AI data: preferences and descriptions you send to the assistant, and the generated content, to produce your itinerary.
• Location: your current position is used only when you open “Around me”, to show the closest steps. It is processed on your device and is not stored by FlexiTrip.
• Usage data: product events, device type, app version and technical information, when analytics is enabled.
• Support communications: messages and attachments you send us.
• Reports and moderation: reported content, reason, details, report identifier and decisions taken.

3. Purposes and legal bases

We use this data to provide the service, synchronise your trips, manage your account and subscription, answer your requests, secure the app and improve the experience.

Our legal bases are performance of the contract, our legitimate interest in improving and securing the service, your consent where required (for example for certain notifications or photo access), and compliance with legal obligations.

4. Sharing and processors

We do not sell your data. We use technical providers that process data on our behalf, within the scope of their services:

• Supabase: hosting, authentication, database and file storage.
• RevenueCat and Apple: subscription and in-app purchase management.
• OpenAI: generating the itineraries requested from the AI assistant.
• PostHog: analytics and product improvement, when this feature is enabled.
• Expo and notification services: app operation and local reminders.
• Mapping, geocoding and weather services: displaying places and forecasts.

5. International transfers

Some providers may process data outside the European Economic Area. Where this happens, we rely on the safeguards required by applicable law, including the European Commission's standard contractual clauses.

6. Retention

Account and trip data are kept for as long as your account exists. If you delete your account, they are deleted or anonymised within a reasonable period, subject to technical backups and legal obligations.

Support data is kept for as long as needed to handle the request. Analytics data is kept for a limited, configurable period.

7. Security

We use reasonable technical and organisational measures to protect your data: encrypted connections, access controls, database security policies and private file storage. No system is completely infallible.

8. Your rights

Depending on your situation and applicable law, you have the right to:

• access your data and obtain a copy;
• correct inaccurate data;
• request deletion of your account and data;
• object to certain processing or request restriction;
• withdraw consent where processing relies on it;
• request portability of certain data.

9. Children

FlexiTrip is not intended for children under 16. We do not knowingly collect data about a child. If you believe a child has provided us with data, contact us so we can delete it.

10. Changes and contact

We may update this policy to reflect changes to the service or applicable law. The last updated date is shown at the top of this page.

For any question, to exercise your rights or report an issue: support@flexitrip.app.

The marketing website does not use advertising cookies or non-essential analytics.