← Back to Tripsy

Privacy Policy

Last Updated: March 2, 2026 · Effective: February 19, 2026

Aucto AI ("we," "us," or "our") operates the Tripsy mobile application (the "App"). This Privacy Policy describes how we collect, use, share, and protect your information when you use the App, and the choices you have regarding your data.

This policy applies to all users of the App worldwide. Certain sections apply specifically to users in the European Economic Area ("EEA"), United Kingdom, and California, as noted.

If you do not agree with this Privacy Policy, please do not use the App.

1. Information We Collect

1.1 Information You Provide to Us

Data TypeWhen CollectedPurpose
NameSign-in via Google or AppleProduct personalization
Email AddressSign-in via Google or AppleAccount identification and App functionality

Your email address is linked to your identity. Your name is used only for in-app display.

1.2 Information Collected Automatically

Data TypePurposeLinked to Identity
Product Interaction (features used, actions taken)AnalyticsNo
Crash Data (app crash logs, device state)DiagnosticsNo
Performance Data (load times, responsiveness)DiagnosticsNo
Other Diagnostic Data (technical logs)DiagnosticsNo
Device Identifier (anonymous, locally generated)App functionalityNo
Push Notification Token (Firebase Cloud Messaging)Delivering push notificationsNo

All usage and diagnostic data is collected anonymously and is not linked to your identity. Push notification tokens are stored on our servers to deliver notifications but cannot be used to identify you personally.

1.3 Information We Do NOT Collect

We do not collect or access:

2. How We Use Your Information

We process your information for the following purposes only:

We do not use your information for:

3. Legal Basis for Processing (EEA/UK Users)

If you are in the European Economic Area or United Kingdom, we process your data under the following legal bases as required by the General Data Protection Regulation (GDPR):

PurposeLegal Basis
Account authentication and App functionalityPerformance of contract (Art. 6(1)(b))
Product personalizationLegitimate interest (Art. 6(1)(f))
Analytics and diagnosticsLegitimate interest (Art. 6(1)(f))
Legal complianceLegal obligation (Art. 6(1)(c))

You may object to processing based on legitimate interests at any time by contacting us.

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, rent, lease, or trade your personal information to any third party. We have not sold personal information in the preceding 12 months.

4.2 Service Providers

We share data with the following categories of service providers, strictly to operate and improve the App:

ProviderData SharedPurpose
Google / Apple (Authentication)Name, emailIdentity verification during sign-in
Supabase (Cloud infrastructure)Account data, curationsSecure data storage and processing
PostHog (Analytics)Anonymous usage eventsProduct analytics
Firebase Crashlytics (Diagnostics)Anonymous crash/performance dataCrash reporting and stability
RevenueCat (Subscriptions)Anonymous purchase identifiersIn-app purchase management

Each provider processes data solely on our behalf and under contractual obligations to protect your data. They may not use your data for their own purposes.

4.3 Legal Disclosures

We may disclose your information if required to do so by law, or if we believe in good faith that such action is necessary to:

5. Data Storage, Security, and Transfers

5.1 Storage

Your account data is stored on secure cloud servers provided by Supabase. Certain preferences and device identifiers are stored locally on your device using encrypted storage (Keychain on iOS, Keystore on Android) and are not transmitted to our servers.

5.2 Security Measures

We implement industry-standard technical and organizational measures to protect your data, including:

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the unlikely event of a data breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

5.3 International Data Transfers

Your data may be transferred to and processed on servers located outside your country of residence, including the United States. Where data is transferred outside the EEA/UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

6. Data Retention

We do not retain personal data longer than necessary for the purposes described in this policy.

7. Your Rights and Choices

7.1 All Users

Regardless of your location, you have the right to:

Account Deletion: You can delete your account directly from within the App. Upon deletion, all personal data is removed within 30 days. To request account deletion via email, contact connect@aucto.ai.

7.2 Additional Rights for EEA/UK Users (GDPR)

Under the GDPR, you additionally have the right to:

7.3 Additional Rights for California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act and the California Privacy Rights Act, California residents have the right to:

Categories of personal information collected (as defined by the CCPA): Identifiers (name, email). We do not collect commercial information, biometric data, geolocation, or internet browsing history.

To exercise any of these rights, contact us at connect@aucto.ai. We will verify your identity and respond within 30 days (or 45 days if an extension is necessary, with notice).

8. Children's Privacy

The App is not directed at children. We do not knowingly collect personal information from children under the age of 13 (or 16 in the EEA/UK, or the applicable age of consent in your jurisdiction).

If we become aware that we have collected personal data from a child without verified parental consent, we will take steps to delete that information promptly.

If you believe a child has provided us with personal data, please contact us immediately at connect@aucto.ai.

9. Third-Party Services and Links

The App may display content from or link to third-party services, including Google Maps and Instagram. These services have their own privacy policies, and we are not responsible for their data practices. We encourage you to review their policies:

10. AI and Automated Processing Disclosure

The App uses artificial intelligence to extract place information from publicly available Instagram Reel and TikTok URLs that you provide. This processing:

11. Do Not Track Signals

The App does not respond to "Do Not Track" browser signals, as there is no industry-standard for mobile applications. However, you may opt out of analytics collection by contacting us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by:

Your continued use of the App after any changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Aucto AI
Email: connect@aucto.ai

For EEA/UK users: If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.