TripSheet is local-first. Your trips stay on your device unless you choose to sign in, and your photos and documents never leave it.
Who is responsible
TripSheet is provided by Jay Depala, a sole trader based in the United Kingdom, who is the data controller for the purposes of UK GDPR.
You can reach us at jdepala95@gmail.com.
The short version
TripSheet works without an account. If you never sign in, your trips, itineraries, checklists, expenses and journal stay on your device and we hold nothing about you.
If you choose to sign in, only structured trip data is stored on our behalf so it can sync between your devices and be shared with people you invite.
Your photos, chosen documents and the still image used for a memory reel are never uploaded to TripSheet, whether or not you sign in.
There is no advertising, no tracking and no analytics SDK in this app.
What we store when you sign in
Account identity: an account identifier, and the email address supplied by Sign in with Apple or Google. This is used to identify you, apply your permissions on shared trips and let collaborators see who you are.
Trip content: trip names, dates, destinations, itinerary items, checklists, expenses and settlements, booking references, links, and journal entries you have explicitly marked as shared.
Nothing else. We do not collect your precise location, your contacts, your photos, your documents, usage analytics or advertising identifiers.
What we never store
Photos and video: images you attach to a journal entry, and the still image used for a memory reel, are copied only into TripSheet's private storage on your own device. They are never uploaded. Sharing them happens through your operating system's own share sheet, so any copy in iCloud, Google Photos or Drive is under your account and your control.
Documents: files you attach to a trip stay on your device or with your chosen storage provider. Only the title and, for links, the URL can sync.
Audio: TripSheet does not record, store or play audio. Memory reels contain no audio track and the app requests no microphone permission.
Journal entries you keep private are never shared with collaborators.
Legal basis
Where you sign in and use collaboration, we process your data to perform the service you have asked for (contract).
Where you use TripSheet without an account, we do not process personal data at all.
Who else is involved
Sign-in is handled by Apple or Google. We receive only the account identifier and email address they release to us.
Account and structured trip data is hosted for us by Supabase on infrastructure in the United Kingdom or European Economic Area.
App distribution, crash-free delivery and purchases are handled by Apple's App Store and Google Play under their own terms.
We do not sell your data and we do not share it with advertisers or data brokers.
How long we keep it
Structured trip data is kept while your account exists. Deleting your cloud account removes it, and trips you own are removed from the collaboration service.
Data held only on your device is kept until you delete the trip or the app.
Your rights
You have the right to access, correct, export, restrict, object to and delete your personal data.
You can delete your cloud account at any time from Profile, without contacting us. Your on-device copy stays until you separately delete local data.
For any other request, email jdepala95@gmail.com.
If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.
Children
TripSheet is not directed at children and is not designed for use by anyone under 13.
Changes
If this policy changes materially we will update it in the app and change the date at the top.