Privacy

Who we are

Tripvite is operated by PJ as a personal project in the United States. Questions and deletion requests: zoellerpj.dev@gmail.com.

What we collect

Display name, phone number, optional hometown (the flag is derived from that place), optional profile photo, and whatever you or a host put on a trip: RSVP, travel mode / ID / notes, itinerary, cover image, album photos. We set an essential session cookie. We log IP address and user-agent on sign-in so we can rate-limit SMS abuse. We strip location metadata from photo uploads.

Why

To create or sign in your account, run the trip, and keep someone from burning SMS on your number. We do not sell personal data. We do not send marketing texts.

Who else can see trip data

Anyone with the invite link can open the trip overview (name, dates, destination, who's coming at current visibility). The itinerary and album are for people who are Going or Maybe (and the host) — not the signed-out overview. After lock-in, people on the going list can see full travel notes. Phone numbers are never shown on a roster. People who can see the album can view and save those photos.

A shared profile link may show name, photo, and hometown without signing in. Signed-in visitors may see past (already ended) trips on that profile — not upcoming plans, not your phone.

Processors

Twilio sends the one-time SMS. Google receives destination and hometown search text when you pick a place — not phones or rosters. Neon stores the database and uploaded photos/covers. Vercel hosts the website. Fly.io hosts the API. Giphy receives GIF search text only — not phones or rosters. We do not sell personal data to them or anyone else.

How long

Accounts and trip data stay until you ask us to delete them, or we close the product. OTP send logs are kept only long enough to enforce rate limits.

Delete

From Edit profile, or email zoellerpj.dev@gmail.com from a place we can match to the account. We delete the account, sessions, phone, and profile (name, photo, hometown), and take you off trips. Album photos on a trip may remain as “Deleted user”. Past trips you hosted stay up so the group keeps the photos — the host line becomes Deleted user. If you still host a trip that hasn't ended and other people are on it, finish that weekend first.

Children

You must be 13 or older. We do not knowingly collect personal information from children under 13. If we learn we did, we delete the account.