Last update: September 16, 2026
Privacy Policy
TripSlap (“we”, “us”) is a trip-planning app for iOS, operated by Slap Studio. This policy explains what information TripSlap collects, how it is used, and the choices you have. It applies to the TripSlap iOS app and our website.
The short version
TripSlap works without an account. If you never sign in, your trip data stays on your device and we collect nothing.
If you sign in with Apple, your trips are synced to our cloud database so you can back them up and restore them. That data belongs to you.
We do not sell your data, show ads, or use third-party tracking.
You can delete your account and all cloud data at any time, directly in the app (Settings → Delete Account).
Information we collect
Account information (only if you sign in)
When you sign in with Apple, we receive a unique user identifier and, if you choose to share it, your name and email address (Apple lets you hide your real email). This is used solely to identify your account and sync your data.
Trip content (only if you sign in)
The trips you create — trip names, destinations, dates, daily activities, notes, prices, and any locations you attach to activities — are stored in our database (hosted by Supabase) so they can be synced and backed up. If you don’t sign in, this content never leaves your device.
Purchase information
If you buy TripSlap Premium, the purchase is processed by Apple. Purchases are verified on your device with Apple’s StoreKit; no third-party purchase service is involved. We never see your payment details — no card numbers, no billing address.
Device location (never stored by us)
With your permission, the app uses your device’s location to center the map and optimize routes. Your device location is used on-device only and is not uploaded to our servers. (Locations you manually attach to activities are part of your trip content, as described above.)
AI assistant (optional; inactive until you add your own API key)
If you use the AI assistant with your own API key, your chat messages and relevant trip context are sent directly from your device to the AI provider you choose (Anthropic, OpenAI, or Google). Your API key is stored in your device’s secure Keychain and never sent to us. To answer questions about current places or events, the assistant may ask your chosen provider to run live web searches; those searches happen on the provider’s servers, may share your query with the provider’s search partners, and any search costs are billed to your own API key. Each provider’s own privacy policy applies to those requests.
What we do NOT do
We do not sell or rent your personal information.
We do not show advertising or use advertising trackers.
We do not track you across other apps or websites.
We do not collect analytics that identify you personally.
Third-party services we rely on
Apple (Sign in with Apple, App Store) — authentication and purchases; involves your Apple ID identifier and purchase receipts.
Supabase — database and authentication hosting; involves your account info and trip content.
Anthropic / OpenAI / Google (optional) — the AI assistant, only if you enable it with your own key; involves your chat messages and trip context, plus any web-search queries the assistant runs.
Data retention and deletion
Your cloud data is kept for as long as your account exists. You can:
Delete individual trips at any time, which removes them from our database immediately.
Delete your entire account in the app (Settings → Delete Account). This permanently and irreversibly removes your account, all trips, and all associated data from our systems.
Shared trip links expire automatically 30 days after creation.
Data security
Cloud data is protected by row-level security — each account can only access its own data — and transmitted over encrypted connections (HTTPS/TLS). API keys you provide for the AI assistant are stored in the iOS Keychain on your device.
Children
TripSlap is not directed at children under 13, and we do not knowingly collect personal information from children.
Your rights
Depending on where you live (including under GDPR and similar laws), you may have the right to access, correct, export, or delete your personal data. The in-app account deletion covers deletion; for any other request, contact us at the address below.
Changes to this policy
If we make material changes, we will update the date at the top of this page and, where appropriate, notify you in the app.
Contact
Questions or requests: hey@ssslap.com