App privacy

Last updated 2026-09-28

This page covers the Tripyy app at app.tripyy.in: trips, chat, bills, photos and everything you do after signing in. The home page and the expense calculator on tripyy.in have their own privacy page. How you may use Tripyy is in the terms.

The short version

• You sign in with Google. We keep your name and email address, not your Google photo or contacts.
• What you put in a trip (messages, bills, photos, check-ins) is seen by the people on that trip.
• Some of it goes to outside AI services to read bills and answer questions. Photos never do.
• We read your location only when you tap Check in or open Nearby.
• No ads, no ad trackers, no third-party analytics in the app.
• Tripyy never holds or sends money. Payments happen in your own UPI app.

What we keep

• Your account: the name and email address Google gives us when you sign in.
• Your trips: the trip name and dates, members' names, and what people add: messages (including edits), bills, splits, pot money, settle-ups and "I've paid" notes, budgets, check-ins, and questions asked to @tripyy.
• Payment details you add: a UPI id and a mobile number, if you or an organiser enter them.
• Photos and videos you add to a trip's gallery, and the trip's own photo.
• How the app is used: when you sign in, how long the app is open and on what kind of device, and the link or campaign that first brought you to the app.

We record when you sign in and how long the app is open, and keep automatic labels of message type and language (never the text itself), to improve Tripyy. Tripyy's founders can see your name, email address and when you used the app. They cannot read your trip's messages.

Our admin tools only show counts, labels and account details. They have no way to show what anyone wrote. Like any online service, the people who run the server could reach the database directly. We don't, except to fix a problem you've asked us to look at.

Who sees what

• People on the trip see its chat, bills, photos, check-ins and members' names.
• Organisers also see members' email addresses and mobile numbers. You can see your own.
• An invite link shows anyone who has it the trip name, the organiser's name and the names still waiting to be claimed. Joining needs a Google sign-in.
• A breakdown link, the one sent on WhatsApp so people can pay without signing in, shows anyone who has it that person's bills and shares, who they pay and who pays them, with names and UPI ids. Anyone with the link can also mark a payment as sent, which the person receiving it confirms. Share these links only with your group.
• Private @tripyy questions are seen only by the person who asked.

Photos and videos

• The original file is kept exactly as your phone saved it, at full quality. That includes the details your camera stores in it, such as when it was taken and, if your phone records it, where. Anyone on the trip who downloads the original gets those details too. To leave out the location, turn off location for your camera before taking the photo.
• The small previews the app shows are redrawn and carry none of those details.
• Files are stored in a private storage bucket and only reach people through the app, after it checks they're on the trip.
• The person who added an item, or an organiser, can remove it. That deletes the stored files.

Location

• Check in: when you tap it, your phone's location is sent to our server to find the name of the place you're at. The place name is saved on the trip. The exact location isn't saved.
• Nearby: when you open it, your location, rounded to about 100 metres, is used to find places around you. We save a rougher form, about 1 km, at most every 30 minutes. It is never shown to anyone. We use it to warn your group about unusual weather where you are, and to count which cities trips happen in (to about 10 km).
• We never read your location in the background.

Outside services

Tripyy uses these services to work. Each receives only what's listed and handles it under its own terms. AI providers may use what they receive to improve their products.

• Google sign-in: to sign you in.
• Google Gemini and OpenRouter (AI models): when a message looks like a bill, its text, the members' names and a short summary of recent chat go to them to draft the bill for you to check. They also get @tripyy questions, with the trip figures needed to answer them.
• TypeSafe (AI labels): chat messages of three words or more are sent to it to label their topic and language. We keep the label, not the text. It also sorts @tripyy questions by what they ask.
• Deepgram or Google Gemini (speech to text): a voice question is sent to one of them to turn into text. We don't keep the recording.
• OpenStreetMap (Nominatim and Overpass): locations from Check in and Nearby, to name places and find what's around.
• Open-Meteo: the rough 1 km location above, to check the weather.
• Your browser's push service (from Google, Apple or Mozilla, depending on your browser): notifications you've allowed. A chat notification includes up to 140 characters of the message. Notifications are encrypted on the way.
• Oracle Cloud in Hyderabad, India: where the server, the database and the photo storage run.

Paying through UPI opens your own UPI app, and sharing on WhatsApp opens WhatsApp with the message filled in. What happens there is between you and those apps.

Cookies and browser storage

• tp_user keeps you signed in, for 30 days after you last opened the app.
• tp_oauth protects the Google sign-in step, for 10 minutes.
• tp_src remembers the link or campaign that first brought you, for 30 days, so we know which of our posts work.
• Your browser also stores whether you've been asked about notifications and your choice for asking @tripyy in private or in the chat.

None of these are ad or tracking cookies, and none are shared with anyone.

Notifications and email

• Push notifications only come if you allow them. You can switch them off in your browser or phone settings at any time.
• Reminders (settle up, trip tomorrow and the like) come at most twice a day and never between 10 pm and 8 am. You can turn them off from the bell in the app.
• We don't send email yet. When we start, it will be a wrap-up the day after a trip ends, with a link in each email to stop them.

How long we keep it

• A trip and everything in it stays until its owner deletes it. Deleting a trip removes its chat, bills, photos, check-ins and locations for everyone.
• Your account, sign-in and usage records stay until you delete your account.
• Photos you started uploading but never added to the gallery are deleted after a day.
• Our server keeps nightly backups of the database for 14 days, so deleted data is gone from backups within 14 days after that.

Your choices and rights

In the app you can correct or remove bills (the trip keeps a history of changes, so everyone can see what moved), and your messages for 15 minutes after sending them (organisers can remove messages at any time). To get a copy of your data or correct your account, email hello@tripyy.in from the address you sign in with.

Deleting your account

Go to Settings, then Delete my account. Before you confirm, the app lists what will happen to each trip you run.

• Straight away: you're signed out on every device and get no more notifications or emails. Your trips carry on as before.
• For 30 days: sign in again and you can keep your account, with everything as it was.
• After 30 days, we erase your account: your name, email address, sign-in and usage records, settings, private @tripyy questions, and on every trip your mobile number, UPI id and saved locations.
• On trips you're on, you show as "Former member". Bills, payments, messages and photos stay, so the group's sums still add up.
• Trips you run go to a co-organiser, or else to the person who joined first. A trip nobody else has joined is deleted, with its photos.
• Nightly backups hold the erased data for up to 14 days more.

Signing in with the same Google account after that starts a new, empty account.

Complaints

Our grievance officer is Tushar Jain, at tushar@tripyy.in. Write to him about anything on this page or anything you see on Tripyy. If you're not happy with the answer, you can go to the Data Protection Board of India.

Age

Tripyy is for people 18 and over. If you think someone younger has an account, email us and we'll delete it.

Changes and questions

We'll change this page when the app changes, update the date at the top, and tell you in the app if a change affects what we do with your data. Questions: hello@tripyy.in.