Privacy Policy

TripKits is a personal packing app that helps you build reusable packing kits and combine them into trip-specific lists. This policy explains what personal data we collect, why we collect it, and your rights regarding that data.

For any privacy-related questions, contact us at privacy@tripkits.app.

We collect only what is necessary to provide the service:

• Account information — your email address and password (stored as a secure hash). You may optionally provide a display name.
• Trip and kit data — the trips, kits, and packing lists you create, including names, destinations, dates, and item lists.
• Usage data — anonymised page-view counts via privacy-first analytics (no personal data, no cookies, no cross-site tracking).

We do not collect payment information, location data, or any data beyond what you explicitly enter.

The legal basis for processing your account and content data is contract performance — we need it to provide the service you signed up for. Specifically:

• Your email and password are used to authenticate you.
• Your trips, kits, and packing items are stored so the app works across sessions and devices.

Anonymised analytics are processed under our legitimate interest in understanding which parts of the app are used. No personal data is involved, and no consent banner is required.

Your account data and all associated trips, kits, and packing lists are retained for as long as your account is active. When you delete your account (via Settings → Delete account), all your personal data is permanently deleted from our systems. There is no recovery after deletion.

Anonymised analytics data contains no personal identifiers and is retained indefinitely for product improvement purposes.

We use the following sub-processors to deliver the service:

All processors are bound by data processing agreements (DPAs) and comply with GDPR. No data is sold or shared with third parties for advertising purposes.

Under GDPR you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate data (your email can be updated in account settings).
• Erasure — delete your account and all associated data at any time via Settings → Delete account.
• Portability — request an export of your data in a machine-readable format.
• Objection — object to processing where our legitimate interest is the legal basis.

To exercise any right, email privacy@tripkits.app. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

We use a single strictly-necessary session cookie to keep you signed in. No advertising cookies, no tracking pixels, no third-party cookies. A consent banner is not required because no non-essential cookies are set.

If we make material changes to this policy, we will update the date at the top of this page and, where appropriate, notify you by email. Continued use of the service after changes constitutes acceptance of the updated policy.