Privacy Policy

Last updated November 1, 2026

Tripperoo turns your booking confirmation emails into one trip itinerary. To do that it has to read those emails, which contain personal details. This policy explains what Tripperoo collects, what it does with it, who else handles it, and how you can get it back or delete it.

Tripperoo is run by Bits and Pieces (“we”, “us”). Questions go to hello@bitsandpieces.app.

What we collect

Your account: your email address, and your name and profile picture if you sign in with Google.
Emails you forward to Tripperoo, including their attachments. Confirmation emails can contain names, booking references, loyalty numbers, payment summaries and sometimes passport details, so forward only what you want Tripperoo to read.
Files you upload, such as tickets and booking confirmations.
What you create in Tripperoo: trips, itinerary items, notes, plans, expenses, settings, and the names of travelers you add to a trip.
Technical data logged when you use Tripperoo, such as your IP address, browser type and the pages you request.

How we use it

To read your emails and files and build your itinerary from them.
To show your trips with maps, travel times, photos and company logos.
To sign you in and send you service messages, such as sign-in codes.
To run, secure, fix and improve Tripperoo, and to prevent abuse.
To comply with the law and enforce our Terms.

We may keep information derived from emails that doesn’t identify you, such as the format a sender’s emails use, to improve how Tripperoo reads them. This information may be kept after you delete your account.

We don’t sell your personal data or share it for advertising, and we don’t use it to train AI models.

Who we share it with

We use trusted service providers to run Tripperoo. They handle data on our behalf, only to provide their service:

hosting, database and file storage, and counting page visits;
email delivery, for receiving the emails you forward and sending sign-in codes and the flight reminders you turn on;
sign-in, if you choose to sign in with Google;
a third-party AI provider, which reads the content of your emails and files to extract your bookings. It doesn’t use your data to train its models and deletes it after a limited period;
maps and places, which receive place names and addresses from your trips. The map on a trip’s Map tab loads from OpenFreeMap, so it sees your IP address when you open it;
images, which receive a trip’s destination or a company’s name and supply photos and logos to our servers. Your browser loads them from us, not from the provider.

You can ask for the current list of providers at hello@bitsandpieces.app.

We may also share information:

with people you choose to share a trip with;
when we believe in good faith it’s required by law or legal process, or needed to protect the rights, property or safety of Tripperoo, our users or others;
with a buyer or successor if Tripperoo is sold, merged or transferred, who would remain bound by this policy for the data they receive.

Information about other people

Booking emails often name other people, such as fellow travelers on the same reservation, and you can add travelers to a trip by name. Tripperoo saves the names a booking lists (passengers or guests) with that booking, shows them to everyone on the trip, and can suggest them as the trip’s travelers. We process their details only to show your trip, on your behalf. Only share details of others when they’d expect it. If you believe Tripperoo holds your information because someone else forwarded it, email us and we’ll help.

Who can see your trips

Only you, unless you share. If you invite someone to a trip, they can see it once they join, and change it if you allow them to; what they add becomes part of your trip. If you turn on the calendar feed, anyone with its private link can see your itinerary; you can reset the link in Settings. We access your data only to run and support Tripperoo, with your permission, or as described above.

How long we keep it

Forwarded emails and uploaded files are deleted 60 days after they arrive. The itinerary items extracted from them stay until you delete your account. Our email provider keeps its own copy of the emails it receives for a limited time.
Deleted bookings and expenses, and earlier versions of edited ones, are kept for 30 days so a change can be undone, then removed.
Everything else stays while your account is open, or as long as we need it for the purposes above or to meet legal obligations.
When you delete your account in Settings, your data is permanently removed after a 7-day grace period. Copies in our providers’ backups expire on their own schedules.

Your choices and rights

Export: download your data from Settings.
Delete: delete your account from Settings, or email us to delete specific data.
Correct: edit anything Tripperoo extracted directly in the app.

Depending on where you live, including the EU, the UK and California, you may have further rights, such as to access, correct, delete or move your data, to object to or restrict how it’s used, and to complain to your local data protection authority. Email hello@bitsandpieces.app; we’ll respond within the time the law requires and may need to verify your identity first. If you’re in the EU or UK, we process your data to provide the service you asked for and, for security, abuse prevention and improving Tripperoo, in our legitimate interests.

Cookies and local storage

Tripperoo doesn’t use advertising or analytics cookies. It keeps your sign-in session in your browser’s storage, which Tripperoo needs to work, and sets one cookie that only says you’re signed in, so the home page opens on your trips. Signing out clears both. Page visits are counted without cookies, and without the trip or invite in the address.

Security

We use reasonable measures to protect your data, including encryption in transit. No method of storage or transmission is completely secure, so we can’t guarantee absolute security. If a breach affects your data, we’ll notify you as the law requires.

Where data is processed

Your data is processed in the United States and other countries where our providers operate, which may have different data protection laws from yours. Where the law requires it, we rely on our providers’ safeguards for these transfers.

Children

Tripperoo isn’t for anyone under 16. If you believe a child has created an account, email us and we’ll delete it.

Changes to this policy

We may update this policy. We’ll change the date above, and for significant changes we’ll give notice by email or in the app.

Contact

Bits and Pieces, hello@bitsandpieces.app