Privacy Policy

1. Data we handle

Account data: the name, email and its verification status, profile photo and account ID that Google provides when you sign in.

Trip content: itineraries, resources, entries, rules, notes, links, photos and files you and your companions create.

Booking details: booking codes, flight or seat numbers, phone numbers, costs and private notes, stored separately from the itinerary.

Plan and billing: your plan and subscription status, Business seats, creem customer and subscription IDs, gift and redeem records, and the usage you select at checkout.

Business workspaces: the workspace name and legal name, brand details (logo, colour and contact information), members and invitations, trip templates, and how many times client pages were opened and when they were last opened.

Technical data: connection logs Cloudflare processes to run and protect the service, such as IP address and browser details. Trips uses no advertising or third-party trackers.

2. Who can see your data

A public trip shows its itinerary and photos with the planner’s name and profile photo. Anyone can view and search it, and copy the itinerary (photos stay with the original). Public pages for Free trips show lodging by area and approximate location, and Pro and Business can also hide specific days or entries.

Booking details, private notes and attachments stay off public pages and view links. Trip members can see them, and the owner can also set a chosen viewer’s access to include bookings. Trip members see the list of companions and their emails, and chosen viewers see the planner’s name, profile photo and email.

Trips in a Business workspace are visible to every member with a seat, admins included, along with their booking details. Admins also see the names and emails of their members. The workspace’s name, logo and contact information appear on its trip pages and booklets.

For Business trips, we record an open count and the most recent open time for each view link and chosen viewer. Only these two values are kept for each link or viewer, and viewers see a note about it on the page.

Authorised Stratoxphere Lab staff can view account, plan, workspace and trip data read-only, including private trips, booking details and attachments, to provide support, keep the service secure and meet legal obligations. This access is limited to a few accounts verified through Google sign-in.

Photos you upload in the Trips app are re-encoded in your browser first, which removes EXIF data including GPS location. The time a photo was taken is read beforehand and kept so it can be placed on the right day, and public pages leave it out. Photos uploaded through the REST API are stored and shown as sent, EXIF data included.

3. How we use data

We use it to provide the service (sync, collaboration, exports, search, Business workspaces), check identity and permissions, measure plan usage, process payments and gift plans, answer your questions and prevent abuse.

Your personal data is used only to provide Trips. We don’t sell it or use it for advertising.

4. Service providers

Cloudflare provides hosting, the D1 database and R2 storage, Google Firebase Authentication handles sign-in, OpenFreeMap serves map tiles, Photon by komoot powers place search (your browser sends search terms to Photon directly), and creem.io handles subscriptions, payments and receipts.

At checkout we give creem your email, your account ID, and the usage you selected with the version of the terms, and creem sends us the subscription status and seats, payment results and customer ID. You enter payment details on creem’s checkout page, and creem handles them.

Trips is one of Stratoxphere Lab’s services. They share one sign-in system and one creem store, so your account ID is the same across them, an email is one creem customer, and the billing portal lists every Stratoxphere purchase and subscription made with that email. Your trip content stays in Trips.

These providers may process data in other countries, and we share only what they need to provide their service.

5. Data on your device

For offline use, the app keeps trips you opened, map tiles and attachments in your browser’s IndexedDB and cache, and remembers your language in localStorage and a cookie. Signing out clears the trip cache.

6. Retention and deletion

Deleting a trip also deletes its entries, booking details, photos and files. Copies others made from its public version belong to their accounts.

Workspace trips and templates belong to the organisation, so they stay in the workspace when a member leaves, and admins decide whether to keep or delete them.

When we prepare a gift plan for an email address, we keep that address with the gift so it can be claimed when someone signs in with it. Gift and redeem records are kept with the account.

To delete your account or get a copy of your data, email support@stratoxphere.app and we will respond within 30 days. Transaction records the law requires are kept for the required period.

7. Your rights

Under applicable law, such as Taiwan’s Personal Data Protection Act or the EU GDPR, you can access, copy, correct or delete your personal data, or ask us to stop processing it. Reach us at the address above.

8. Security and children

Data travels over encrypted connections and access is checked against identity and permissions. Attachments download only for signed-in people who can see booking details, and photo URLs carry hard-to-guess signatures.

Trips is meant for users aged 13 and over.

9. Updates and contact

We announce material updates to this policy in the service beforehand.

For privacy questions, contact Stratoxphere Lab at support@stratoxphere.app.