TeamTrip is a collaborative travel planner for groups, made and operated by an individual developer — "we" and "us" below mean that person. This policy explains, in plain language, what data we collect, why we need it, who else sees it, how long we keep it, and what you can ask us to do with it. Short version: we collect what the product needs to work, we don't run ads, and we don't sell your data. For any privacy question or request, contact privacy@teamtrip.cc.
What data we collect
Account data
- Required to create an account: your email address and a password (or a Google sign-in). A display name is required so the people in your trips can recognise you — a nickname is fine.
- Optional: your birth date and gender. You can leave them empty and the app works the same. We use the birth date only to confirm you meet the minimum age, and gender only to fill in your profile.
- Optional: a profile photo — an image you upload, or an illustration you pick from a built-in set. It is what other people see next to your name; without one, the app shows your initials. A profile photo is visible to any signed-in TeamTrip user, not only to the people in your trips: it is your identity, not trip content, so leaving a trip — or being removed from one — does not hide it. Replacing or deleting the photo is what changes it.
- If you sign in with Google, we receive your Google email address, name and Google profile picture.
Trip content — everything you and the people you invite put into a trip: itineraries, stays, expenses, tickets, documents, checklists, discussions, comments and polls.
Photos — the images you upload to a trip's shared gallery.
Location data — only when you choose to share your location with a trip (live location sharing is opt-in per trip), plus the pins and meeting points you place on a trip's map.
Messages and comments — the discussions, comments and votes that happen inside a trip.
AI assistant conversations — the messages you send to the in-app AI assistant, its replies, and any images you attach to a conversation. This is processed to generate the assistant's answers.
Why we use your data
We process your data only for the purposes below, and only where we have a legal basis to do so:
- Providing the service — accounts, trip collaboration, offline sync, maps, expenses, and the AI assistant only work because we process this data. Legal basis: performance of our contract with you.
- Security and abuse prevention — enforcing rate limits and storage caps, preventing abuse, and debugging failures. Legal basis: our legitimate interest in keeping the service safe and working, balanced against your rights.
- Understanding how the product is used — we record a small set of first-party product events (a sign-up, a first trip, the first invite sent or accepted, and how you arrived) to see whether the collaboration flow works. They carry your account, the relevant trip and a coarse arrival source — never your IP address, a device fingerprint or any browsing history. Legal basis: our legitimate interest in improving the service, balanced against your rights.
- Optional data and features — the birth date and gender fields, sharing your live location, and the partner script on the marketing site rely on your consent, which you can withdraw at any time.
- That's it. We do not run advertising and we do not profile you for advertising. If this ever changes, we will ask for your consent first and update this policy.
Who else processes your data
We keep our own servers to a minimum and use these providers:
| Provider | What it does for us | Data involved |
|---|---|---|
| Cloudflare | Hosting for the website and app, database, and file storage | Account data, trip content, photos |
| DeepSeek | AI model provider — your prompts and conversations, including attached images, are sent to DeepSeek to generate the assistant's replies | AI assistant conversations and attached images |
| Sign-in with Google | Your Google email address, name and profile picture | |
| Booking and affiliate partners | Only when you tap a booking or affiliate link | The click itself, and a link that identifies the trip and the click so it can be attributed, plus ordinary request data such as your IP address. Anything you enter on the partner's own site is covered by the partner's privacy policy |
Each provider processes this data on our instructions and under a data-processing agreement. If you sign in with Google, we use your Google data only to create and secure your account, as required by Google's API Services User Data Policy.
International transfers
Some of our providers are located outside your country, so your data may be transferred to and processed in other countries. Where that happens we rely on the provider's adequacy decision or on contractual safeguards such as the European Commission's standard contractual clauses.
One provider deserves a specific mention: the AI model provider DeepSeek processes data in mainland China, which has no EU adequacy decision. That transfer relies on the contractual safeguards DeepSeek offers; you are free not to use the AI assistant if you would rather your prompts and images were not processed there.
Security
Your data travels over encrypted connections and is stored with access controls. No system is perfectly secure, but we keep the attack surface small by relying on established providers rather than running our own servers.
Cookies and storage on your device
In the app itself we use strictly necessary storage only:
- Login session cookie — a cookie that keeps you signed in. It is not used for tracking.
- Offline caches — your browser's localStorage, IndexedDB and Cache Storage hold your trip data and the app's files so TeamTrip keeps working without a network and re-syncs when you're back online.
The app sets no advertising or cross-site tracking cookies, and keeps no identifier on your device for analytics. To understand how the product is used, we record a small set of first-party product events — for example a sign-up, a first trip, and the first time an invite is sent or accepted. They are tied to your account and the relevant trip, may carry a coarse arrival source (such as the channel you came through, not the full web address), and never include your IP address, a device fingerprint or any browsing history.
On the public marketing site (www.teamtrip.cc), the home page loads a script from a travel-offer partner network that enables and attributes our booking links; the script may set cookies, and it loads only after you accept the prompt shown on that page. Decline and it never loads. You can change your choice at any time by clearing the site's storage in your browser. These first-party product events need no cookie and are recorded whenever the app is used.
How long we keep your data
- Account data — while your account is active, then deleted within 30 days of your request (we keep it briefly to complete the deletion and prevent fraud).
- Profile photo — removed from our storage when you delete or replace it, and deleted with your account. A copy already shown to someone else may stay in their app's offline cache until their app next refreshes.
- Trip content you contributed — deleted with your account, except content other members have kept their own copy of, such as photos they saved.
- Backups — residual copies may persist in backups for up to 90 days before they are overwritten.
- AI assistant conversations — kept while the conversation exists; deleting the conversation removes it.
Children
TeamTrip is not meant for children below the age set out in our Terms. We do not knowingly collect their data; if you believe a child has given us data, contact us and we will delete it.
Your rights
You can ask us to access your data, correct anything wrong, give you a copy (export), or erase your account and content. You can also object to or ask us to restrict certain processing, and withdraw your consent at any time where we rely on it. We do not carry out automated decision-making that produces legal or similarly significant effects about you.
TeamTrip does not yet offer self-serve export or account deletion in the app, so email privacy@teamtrip.cc and we will handle it for you — we may ask you to confirm the request really comes from you. You can also complain to your local data-protection authority (in France, the CNIL). These requests are free.
Changes to this policy
If we change something material — new data collected, new providers, advertising — we will update this page, bump the version above, and announce it in the app before it takes effect.
Contact
The person responsible for your data (the data controller) is the operator of TeamTrip — TeamTrip.cc, based in France. Privacy questions and requests: privacy@teamtrip.cc.