Privacy Policy

Last updated: July 21, 2026

Trips Drop finds cheap flight and hotel deals and alerts you when prices drop. This policy explains what data we collect, why, and what you can do about it. Trips Drop is operated from Sweden, so the EU General Data Protection Regulation (GDPR) applies to everything we do with your data.

What we collect

We keep it to what the app actually needs to work:

• Account details, if you sign in with Apple or Google: the subject identifier the provider gives us, your email address (which may be an Apple private relay address if you chose to hide your email), and an optional display name.
• An anonymous device identifier generated by the app, so we can save your preferences even if you never create an account.
• Your preferences: chosen departure airports, notification level, budget limits and preferred currency.
• A push token from Expo, only if you turn on notifications, so we can deliver deal alerts to your device.
• Subscription status, sent to us by RevenueCat when you subscribe to Trips Drop Premium. Payment is processed entirely by Apple: card numbers never touch our servers and we never see them.
• Deal reports: if you report a deal as expired or wrong, we record that event to improve deal quality.

We do not sell personal data, and the app contains no third party advertising SDKs.

Why we process it (legal basis)

In plain language:

• Running the service you asked for (accounts, preferences, deal alerts, subscriptions) is based on performance of a contract: it is what you signed up for.
• Push notifications are sent only after you enable them, which is consent. You can turn them off at any time in your device settings.
• Keeping the service safe and improving deal accuracy (like handling deal reports) is our legitimate interest, balanced against your rights.

Who processes it for us

We use a small number of service providers to run Trips Drop. They process data on our behalf and under our instructions:

• Supabase: database hosting, located in the EU (Frankfurt, Germany).
• Vercel: hosting for our website and API.
• RevenueCat: subscription management.
• Expo: push notification delivery.
• Apple and Google: sign in.

Booking on partner sites

Trips Drop shows you deals; booking happens elsewhere. When you tap a deal, you leave our app and land on a partner site such as Kiwi.com or Booking.com, via affiliate links provided by Travelpayouts. From the moment you click out, those parties' own privacy policies apply, not this one. City photos in the app are loaded from Wikimedia.

How long we keep your data

We keep account data for as long as you have an account. When you delete your account, your data goes with it.

Deleting your account

You can delete your account directly in the app under Settings, Delete account. You can also email us at hello@tripsdrop.com and we will take care of it.

Your rights

Under the GDPR you can ask us for a copy of your data, ask us to correct or delete it, object to processing, or ask for your data in a portable format. Email us at hello@tripsdrop.com and we will respond. You also have the right to lodge a complaint with your local data protection authority; in Sweden that is IMY (Integritetsskyddsmyndigheten).

Changes to this policy

If we change this policy in a meaningful way, we will update this page and the date at the top. Significant changes will be highlighted in the app.

Contact

Questions about privacy? Email hello@tripsdrop.com.