Privacy Policy

Account details: Email address and encrypted password, used solely for authentication.

Trip data: Destinations, dates, expenses, activities, and participant details you enter in the app.

Receipt images: Photos you choose to scan are sent to the server for processing only and are not stored.

Notifications: If you consent, we store a push notification token. We do not send spam.

App language: If you enable notifications, we store the app language you chose next to the push token so notifications arrive in your language.

How you found us: When you register, we record once how you arrived: the campaign tags in the link (UTM), the address of the referring site (no query string), the first page you landed on, and whether you came through the website or the app. Until you register this is kept only in your browser. We use it in aggregate only, to understand which channels bring users. It is not used for advertising or tracking across other sites, and it is not shared with third parties.

Opening a notification: When you open a notification we sent you, a single timestamp of the opening is stored so we can tell whether reminders are useful.

• Operating the service, saving and syncing your trip data
• Sharing a trip with participants you invite
• Sending flight reminders you requested
• Sending one reminder a week before a trip starts, to users who enabled notifications
• AI-based recommendations for your destination (conversations are not stored)

We do not sell, share, or commercialize your data with third parties.

Data is stored on Google Firebase with encryption in transit and at rest. Access is protected by your user account only.

Receipt image processing is handled via Anthropic API — images are transferred for processing only and are not stored on our servers or Anthropic's servers.

Your data is not shared with third parties, except:

• Google Firebase — storage infrastructure
• Anthropic — receipt processing and recommendations only
• Vercel — app hosting
• Users you explicitly chose to share a specific trip with

At any time you may:

• View and edit all your data directly in the app
• Delete trips and expenses
• Request full account deletion by contacting us
• Unsubscribe from push notifications at any time
• When you delete your account, your push token, saved language, notification records and arrival source are deleted too

The app uses localStorage to save preferences (such as language) and, for new visitors, to temporarily keep the arrival source described above until registration. We do not use tracking cookies.

The service is not intended for children under 13. We do not knowingly collect information from minors.

Material changes will be announced in the app. Continued use after publication constitutes acceptance of the updated policy.

For any privacy questions: contact@tulon.app