TripmixTerms of Service

Privacy Policy

Effective date: May 16, 2026

Tripmix ("we," "us," or "our") operates the Tripmix application (the "Service"). This policy explains what information we collect, how we use it, and your choices.

Information We Collect

Account information

When you create an account — by email/password or Google OAuth — we store your email address and, if provided, your display name and profile photo. If you sign in with Google, we receive only the information Google provides during the OAuth flow (typically your email, name, and profile picture). Passwords are hashed and managed by Supabase; we never store plaintext passwords.

Profile information

Your public profile stores your display name, avatar (photo or emoji), a short bio, and a list of travel interests. This information is visible to other users of the Service.

Content you create

The following content is stored in our database when you use the Service:

  • Guides — title, description, cover image, visibility setting, and share token
  • Places library — notes, tags, favorites, and custom categories you apply to saved places
  • Itineraries — day-by-day plans with step names, descriptions, and ordered places
  • Categories and preferences — custom category names, emojis, and place-type mappings

Content you mark as public or share via a link is accessible to anyone with that link, including unauthenticated visitors.

Social and interaction data

When you interact with other users, we store follow relationships, saved and pinned guides, collaborator roles, invite links you create or accept, and in-app activity events and notifications.

Uploaded files

Cover images you upload for guides and itineraries are stored in Supabase Storage and served via a public URL.

Place data from Google

When you search for and add places, we retrieve details from the Google Places API — including address, phone number, website, photos, ratings, and editorial summaries. This is publicly available data sourced from Google.

Usage and analytics data

We use PostHog to collect product analytics. When you consent to analytics, PostHog receives your user ID, email address, and display name for identification, as well as event data about how you use the Service. Events tracked include: account creation and sign-in, onboarding steps, guide and itinerary actions (create, edit, delete, fork, share, save, pin), place actions (add, remove, search queries), and collaboration actions. PostHog may also collect standard browser metadata such as IP address, browser type, and device information.

Analytics collection only begins after you explicitly accept the cookie consent prompt. You may withdraw consent at any time via the cookie settings option.

Cookies and local storage

We use browser cookies and local storage to maintain your authentication session and remember preferences such as your color theme. PostHog sets its own cookies only after you grant consent.

How We Use Your Information

  • To create and manage your account
  • To provide, operate, and improve the Service
  • To enable collaboration, sharing, and social features
  • To understand how the Service is used and diagnose technical problems
  • To communicate with you about your account or significant changes to the Service

We do not sell your personal information to third parties.

Third-Party Services

We share data with the following services to operate Tripmix:

  • Supabase — database, authentication, and file storage. Your data is stored on Supabase-managed infrastructure.
  • Google — OAuth authentication and the Places and Maps APIs, which power place search and map display. Google's privacy policy applies to data processed through their APIs.
  • PostHog — product analytics. Event data is collected in a way designed to respect user privacy.
  • Vercel — application hosting and edge delivery.

Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information and content within 30 days, except where retention is required by law.

Your Rights and Choices

You may request to:

  • Access the personal data we hold about you
  • Correct inaccurate profile or account information
  • Delete your account and associated data
  • Opt out of analytics collection at any time via your settings page

To exercise any of these rights, contact us at the address below.

Children's Privacy

Tripmix is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated effective date.

Contact

Questions about this policy? email@tripmix.io