Last updated: March 26, 2026
TripToe ("we", "our", "us") is a mobile application that connects tour guides with guests during guided tours. This privacy policy explains what data we collect, how we use it, and your rights.
TripToe has two types of users with different data and permissions:
| Data | Purpose | Retention |
|---|---|---|
| Google account (email, name) | Authentication via Google OAuth | Until account deletion |
| Phone number (optional) | Display on guide profile | Until removed or account deletion |
| Profile photo, bio, languages, specialties (optional) | Display to guests on tour details | Until removed or account deletion |
| Location (foreground and background) | Share guide location with guests during active tours, even when the app is closed or not in use | Not stored after tour ends |
| Device push token | Deliver push notifications | Until logout or token refresh |
| Tour content (templates, sessions, photos, picks) | Core app functionality | Until deleted by guide or account deletion |
| Tip links (optional) | Display payment links to guests after tours | Until removed or account deletion |
| Data | Purpose | Retention |
|---|---|---|
| Email address | Account creation and verification codes | Until account deletion |
| Name | Display to guide during tours | Until account deletion |
| Phone number (optional) | Contact information | Until removed or account deletion |
| Profile photo (optional) | Display to guide | Until removed or account deletion |
| Location (foreground and background, opt-in) | Share guest location with guide during active tours, even when the app is closed or not in use | Not stored after tour ends |
| Device push token | Deliver push notifications (messages, tour updates) | Until logout or token refresh |
| Tour activity (bookings, check-ins) | Core app functionality | Until account deletion |
| Reviews and ratings (optional) | Feedback for guides | Until account deletion |
Guests: TripToe collects location data to enable sharing your location with your tour guide, even when the app is closed or not in use. Location sharing is opt-in — you choose when to start and stop sharing. Location data is sent to the tour guide in real time and is not stored after the tour session ends.
Guides: TripToe collects location data to enable sharing your location with tour guests, even when the app is closed or not in use. This allows guests to see the guide on the map during active tours. Location data is not stored after the tour ends.
Both guides and guests can revoke location permission at any time in their device settings.
| Service | Purpose |
|---|---|
| Resend | Sending verification emails |
| Expo Push Service | Delivering push notifications |
| Firebase Cloud Messaging (FCM) | Android push notification delivery |
| Google OAuth | Guide authentication |
| Google Maps | Map display and navigation |
We do not sell, share, or transfer your personal data to third parties for advertising or marketing purposes.
All data is encrypted in transit using HTTPS. Authentication uses JWT tokens, and verification codes are hashed before storage. Passwords are not stored — guides authenticate via Google OAuth and guests authenticate via email verification codes.
TripToe is not directed at children under 13. We do not knowingly collect personal data from children under 13.
We may update this privacy policy from time to time. The updated version will be posted at this URL with a revised date.
If you have questions about this privacy policy or your data, contact us at support@triptoe.app.