Privacy Policy

1. Introduction

Welcome to FlowTrip! Your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal data when using our services.

2. Information We Collect

We collect different types of information, including:

• Personal Information: Name, email, phone number (if provided).
• Usage Data: Pages visited, time spent, and interactions within the app.
• Device Information: Browser type, IP address, and OS.
• Cookies & Tracking Technologies: For analytics and performance improvements.
• User Content: Images or other media you choose to upload for trip-related features.

3. How We Use Your Information

We use your data to:

• Provide and improve our services.
• Enhance user experience and personalize content.
• Analyze trends and usage to improve FlowTrip.
• Respond to customer support inquiries.
• Send notifications and updates (with consent).
• Process uploaded images and content through third-party AI services to provide trip-planning features.

4. User Content & AI Processing

FlowTrip uses third-party artificial intelligence services (currently OpenAI) to power certain features such as trip planning, itinerary generation, and content organization. When you use these AI-powered features, we securely transmit specific information to our AI service providers to deliver the requested functionality.

What Information We Send to AI Providers

When you actively use AI features in FlowTrip, we may send the following information to third-party AI providers:

• Trip ideas and descriptions you enter
• Destination and location information
• Travel dates and duration
• Group size and composition
• Travel preferences you choose to include (e.g., accommodation style, budget range, food preferences, activity interests, travel mood)
• Images, screenshots, or other media you upload for trip organization and content recognition
• Optional text you paste into FlowTrip related to trip planning (e.g., reservation details, attraction information)

What Information We Do NOT Send to AI Providers

We prioritize your privacy and do not share personal identifying information with AI providers. The following data is never sent to third-party AI services:

• Your name
• Your email address
• Your phone number
• Payment or financial information
• Your precise GPS location or current location
• Account credentials or authentication tokens

How AI Processing Works

• Temporary Processing: Content is processed only to deliver the requested AI functionality and is not stored permanently by FlowTrip once processing is complete.
• Secure Transmission: All data sent to AI providers is transmitted using secure, encrypted connections.
• No Advertising or Sales: Your content is processed solely to deliver requested functionality and is never sold or shared for advertising purposes.
• Opt-In Features: AI processing only occurs when you actively use AI-powered features within the app. You control when and how these features are used.

Your Responsibility

Please do not upload or enter sensitive personal documents or information into FlowTrip's AI features, including but not limited to: identity documents (IDs, passports, driver's licenses), financial information (credit card details, bank statements), medical records, or other highly sensitive personal data. FlowTrip is not responsible for any personal data you choose to upload or enter in violation of this policy.

5. Subscription Management (RevenueCat)

FlowTrip uses RevenueCat, a third-party service, to manage in-app subscriptions and entitlements. This includes features such as receipt validation, restoring purchases, and syncing your subscription status across your devices.

Information Processed by RevenueCat

When you subscribe to FlowTrip or make in-app purchases, RevenueCat may process the following information:

• App Store Transaction Data: Purchase receipts, transaction IDs, and subscription status information provided by the App Store
• App-Specific Identifier: A unique identifier that links your subscription status to your FlowTrip account
• Device Information: Platform type (iOS, Android) and app version
• Subscription Status: Active subscriptions, expiration dates, and entitlements

What We Do NOT Share with RevenueCat

We do not send your personal identifying information to RevenueCat for subscription processing, including:

• Your name (unless you explicitly provide it to us for customer support purposes)
• Your email address (unless you explicitly provide it to us for customer support purposes)
• Your payment card details (payments are processed directly by the App Store)

RevenueCat processes subscription data in accordance with their privacy policy. For more information about how RevenueCat handles data, please visit their privacy policy at revenuecat.com/privacy.

6. Sharing Your Information

We do not sell your data. However, we may share it with:

• Service Providers: Hosting, analytics, payment processing, AI processing partners (e.g., OpenAI), and subscription management (e.g., RevenueCat).
• Legal Compliance: If required by law or to prevent fraud.
• Business Transfers: In case of mergers or acquisitions.

7. Cookies & Tracking

We use cookies for analytics, authentication, and personalization. You can manage cookie preferences through your browser settings.

8. Data Security

We use industry-standard security measures to protect your information. However, no online service is 100% secure.

9. Data Retention

We retain your personal information only as long as necessary to provide our services or comply with legal obligations. Uploaded images are processed temporarily and not stored by FlowTrip once processing is complete.

10. Your Rights & Choices

You have the right to:

• Access and update your personal information.
• Request data deletion.
• Opt-out of marketing emails.
• Disable cookies in browser settings.

11. Third-Party Links

FlowTrip may contain links to third-party sites. We are not responsible for their privacy practices.

12. International Data Transfers

Your data may be processed in countries outside of your residence, including the United States, where privacy laws may differ. When we transfer personal data internationally, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) under GDPR.

13. Children’s Privacy

FlowTrip is not directed to children under the age of 16 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal information, we will delete it promptly.

14. Changes to This Policy

We may update this Privacy Policy. Significant changes will be communicated via email or in-app notifications.

15. GDPR Compliance

FlowTrip complies with the General Data Protection Regulation (GDPR). Our legal bases for processing personal data include:

• Performance of a contract (providing our services).
• Consent (e.g., marketing communications, optional features).
• Legitimate interests (e.g., improving services, preventing fraud).
• Compliance with legal obligations.

You have the right to:

• Access, modify, or delete your personal data.
• Withdraw consent for data collection at any time.
• Request a copy of the data we have about you.

To make a GDPR-related request, contact us at info[at]flowtrip.app.

16. Contact Us

If you have questions, contact us at info[at]flowtrip.app.