Privacy Policy

1. Information We Collect

We collect information in the following ways:

a) Information you provide directly

• Account registration: your email address and password (stored securely in Supabase Auth).
• Itinerary content: destination names, dates, times, notes, and item details you enter.
• Trip photos: images you upload to document your travels.
• Travel Style preferences: questionnaire answers used to score your travel personality.
• Contact information: email addresses or names of travel companions you add.

b) Information collected automatically

• Device and usage data: device type, OS version, app version, and feature interactions.
• Push notification token: generated by Expo to deliver trip reminders and alerts.
• Location context: when you use Explore or Map It, your search query or itinerary item address is sent to Google APIs to find nearby places or geocode addresses. We do not store your precise GPS coordinates.
• In-app purchase data: subscription status and transaction identifiers managed by RevenueCat.
• AI usage: when you use Charlotte (AI itinerary generation), your itinerary context is sent to Anthropic to generate suggestions. We do not use your content to train Anthropic models.

c) Information from third parties

• If you join our waitlist, your email is stored via Resend for future communications.
• If you share an itinerary, the recipient's acceptance or claim action is recorded to link your accounts.

2. How We Use Your Information

• To provide, maintain, and improve the Service.
• To authenticate your account and protect against unauthorized access.
• To generate AI-powered itinerary suggestions through Charlotte.
• To display relevant place results and map views via Google Places and Geocoding APIs.
• To send push notifications you have opted into (trip reminders, confidence alerts, share invites).
• To process in-app purchases and manage your subscription tier via RevenueCat.
• To send transactional emails (waitlist confirmations, share notifications) via Resend.
• To generate your Travel Style profile and Year-in-Review summaries.
• To analyze aggregate, anonymized usage patterns to improve features.

3. Third-Party Services

We use the following third-party services. Each has its own privacy policy and data practices:

We do not sell your personal information to any third party. Data is shared with the above services only as necessary to operate the Service.

4. Data Retention

• Account data and itineraries are retained while your account is active.
• If you delete your account (via Settings → Delete Account), your profile, itineraries, photos, contacts, and travel style data are permanently deleted from our database within 30 days.
• Push tokens are removed when you delete your account or revoke notification permission.
• Anthropic does not retain your itinerary content beyond the scope of a single API call.
• RevenueCat retains transaction history per their own retention policy.
• Resend retains email logs for up to 90 days.

5. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights regarding your personal information:

• Access: request a copy of the personal data we hold about you.
• Correction: request that inaccurate data be corrected.
• Deletion: request deletion of your personal data. You can also delete your account directly in Settings → Delete Account.
• Portability: request your data in a structured, machine-readable format.
• Objection / Restriction: object to or restrict certain processing activities.
• Opt-out of sale: we do not sell personal information, so this right is satisfied by our practices.

To exercise any of these rights, email us at apptraleva@gmail.com. We will respond within 30 days (45 days for CCPA where permitted).

6. Children's Privacy

Traleva is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information, we will delete it promptly. If you believe we may have collected information from a child under 13, please contact us at apptraleva@gmail.com.

7. Data Security

We use industry-standard measures to protect your data, including TLS encryption in transit, row-level security (RLS) policies in Supabase so each user can only access their own data, and secure credential storage. No method of transmission over the internet or method of electronic storage is 100% secure; we cannot guarantee absolute security but are committed to protecting your information.

8. International Data Transfers

Traleva is operated from the United States. If you are located outside the United States, your information may be transferred to and processed in the United States or other countries where our service providers (Supabase, Anthropic, Google) operate. By using the Service, you consent to this transfer. We take steps to ensure appropriate safeguards are in place consistent with applicable law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For material changes, we will provide notice within the app or via email. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: