Privacy Policy

The controller of your personal data is Inovar360, a sole trader (empresário em nome individual) registered with the Portuguese Tax and Customs Authority, tax number (NIF) 309708877, with its address at Rua do Diogo Cão, Edifício Urban 31, Apartamento AB, 4950-283 Monção, Portugal. You can contact us about data protection at [email protected].

• Account data: email, username, display name and password (stored encrypted — never in plain text).
• Profile: bio, profile and cover photos, interests.
• Content you create: posts, photos, reviews, comments, tips, questions and answers, lists and routes.
• Location: when you check in at a place or use the map, we process your coordinates to confirm you are nearby and to show places close to you. Precise location is only used with your permission (in your device settings).
• Activity on the Service: favorites, followers, check-ins, points and progress (Compasses, XP, missions, rewards).
• Payment data: the Premium subscription is processed by Stripe. We store the status of your subscription (customer ID, plan, status and renewal date), but we do not store your card details.
• Technical data: IP address, device and browser type, and access logs, needed for security and for the Service to work properly.

• Providing the Service (account, posts, map, check-ins, Premium) — performance of a contract [Art. 6(1)(b) GDPR].
• Precise location — your consent [Art. 6(1)(a)], which you can withdraw at any time in your settings.
• Security, prevention of abuse and fraud, and moderation — legitimate interests [Art. 6(1)(f)].
• Invoicing and tax obligations — compliance with a legal obligation [Art. 6(1)(c)].
• Service communications (e.g. password recovery, important notices) — performance of a contract. We only send marketing communications with your consent.

We do not sell your data. We use processors that handle it on our behalf, solely to provide the Service:

• Stripe — payment processing and management of the Premium subscription.
• Google (Google Workspace) — sending and receiving email (e.g. password recovery), from [email protected].
• OpenStreetMap — map images; when the map loads, your IP address is sent to the map server.
• Routing service (OSRM/OpenStreetMap) — route calculation; it receives the coordinates of the stops on the route.
• Hosting — the server where Trippik is hosted and where the photos you post are stored.

We may also disclose data where required by law or to protect the rights, safety and integrity of the Service.

Some processors (such as Stripe and Google) may process data outside the European Economic Area. In those cases, the transfer is made with the appropriate safeguards provided for in the GDPR, namely the standard contractual clauses approved by the European Commission.

• Account data and content: for as long as your account exists. If you close it, we delete or anonymize the data within a reasonable period.
• Billing data: for the period required by tax law (as a rule, 10 years).
• Technical security logs: for a limited period, as long as needed for that purpose.

You have the right to access, rectify and erase your data, to restrict and object to its processing, to data portability, and to withdraw your consent at any time (without affecting processing already carried out). To exercise these rights, write to us at [email protected].

If you believe your data is not being handled properly, you have the right to lodge a complaint with the supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD, the Portuguese Data Protection Authority — cnpd.pt).

We only use cookies that are essential for the Service to work — mainly to keep you securely signed in. We do not use advertising cookies or third-party tracking tools. You can manage cookies in your browser settings; blocking essential cookies may prevent you from signing in.

We take appropriate technical and organizational measures to protect your data: encrypted passwords, encrypted connections (HTTPS), access control and minimization of the data we collect. No system is 100% infallible, but we work to reduce the risks.

Trippik is intended for people aged 16 and over. We do not knowingly collect data from people under that age without the consent of the holder of parental responsibility. If you become aware that this has happened, contact us so that we can remove it.

We may update this Policy from time to time. The date of the last update is shown at the top. If the changes are significant, we will let you know by appropriate means.

Inovar360 — NIF 309708877 — Rua do Diogo Cão, Edifício Urban 31, Apartamento AB, 4950-283 Monção, Portugal.
Email: [email protected].

Please also see our Terms and Conditions.