Privacy

TRAVLIN PRIVACY POLICY

Last Updated: December 5, 2025

Travlin ("we," "our," or "us") operates the Travlin mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

────────────────────────────────────────

  1. INFORMATION WE COLLECT ────────────────────────────────────────

1.1 Information You Provide Directly

• Account Information: When you sign in with Google, we receive your name, email address, and profile photo from your Google account.

• Profile Information: Any additional information you choose to add to your profile, such as your home location or travel preferences.

• Trip Information: Details about your trips that you manually enter, including destinations, dates, flights, hotels, and other travel plans.

• Photos: Profile pictures you upload from your device's photo library.

1.2 Information from Connected Services

• Email Access (Optional): If you choose to connect your Gmail account, we access your emails solely to identify and parse travel confirmation emails (flights, hotels, car rentals, trains). We use read-only access and do not modify, delete, or mark emails as read. You can disconnect Gmail access at any time.

• Email Forwarding (Alternative): If you forward emails to trips@gotravlin.com, we parse those emails to create trips.

1.3 Information Collected Automatically

• Device Information: Device type, operating system version, and unique device identifiers for app functionality.

• Usage Data: How you interact with the App, including features used and actions taken.

• Crash Data: If the App crashes, we may collect diagnostic information to improve stability.

1.4 Information We Do NOT Collect

• We do not access your precise GPS location • We do not read emails unrelated to travel • We do not access your contacts, calendar, or other personal data • We do not track you for advertising purposes

──────────────────────────────────────── 2. HOW WE USE YOUR INFORMATION ────────────────────────────────────────

We use the information we collect to:

• Create and manage your account • Automatically create trips from your travel confirmation emails • Display your trips, itineraries, and travel details • Provide personalized travel recommendations and local tips • Generate packing suggestions based on your destinations • Enable trip sharing with companions you invite • Send push notifications about your upcoming trips (if enabled) • Improve and optimize the App's functionality • Respond to your inquiries and provide customer support

──────────────────────────────────────── 3. HOW WE SHARE YOUR INFORMATION ────────────────────────────────────────

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We use third-party services to operate the App:

• Google Firebase: Cloud database, user authentication, and file storage (Google Cloud Platform) • Google Maps: Display maps within the App • OpenAI: Generate personalized travel recommendations and suggestions • SendGrid: Process forwarded travel confirmation emails

3.2 Trip Sharing

When you share a trip with companions, they can view the trip details you choose to share.

3.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, privacy, safety, or property.

──────────────────────────────────────── 4. DATA STORAGE AND SECURITY ────────────────────────────────────────

4.1 Where We Store Data

Your data is stored on Google Firebase servers located in the United States. Google Firebase is SOC 2 compliant and provides enterprise-grade security.

4.2 How We Protect Data

We implement appropriate technical and organizational measures to protect your information, including:

• Encrypted data transmission (HTTPS/TLS) • Secure authentication via Google Sign-In • Access controls limiting who can access user data • Regular security reviews

4.3 Data Retention

We retain your information for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal purposes.

──────────────────────────────────────── 5. YOUR RIGHTS AND CHOICES ────────────────────────────────────────

5.1 Access and Update

You can access and update your profile information directly within the App.

5.2 Disconnect Gmail

You can disconnect your Gmail account at any time through the App settings. This stops future email scanning but does not delete trips already created.

5.3 Delete Your Account

You can request account deletion by contacting us at privacy@gotravlin.com. Upon deletion: • Your account and profile will be permanently removed • Your trips and travel data will be deleted • Any shared trips will be removed from companions' view

5.4 Push Notifications

You can enable or disable push notifications through your device settings.

5.5 Data Export

You can request a copy of your data by contacting us at privacy@gotravlin.com.

──────────────────────────────────────── 6. CHILDREN'S PRIVACY ────────────────────────────────────────

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at privacy@gotravlin.com.

──────────────────────────────────────── 7. INTERNATIONAL DATA TRANSFERS ────────────────────────────────────────

If you are accessing the App from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using the App, you consent to this transfer.

──────────────────────────────────────── 8. THIRD-PARTY LINKS ────────────────────────────────────────

The App may contain links to third-party websites or services (such as airline or hotel websites). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

──────────────────────────────────────── 9. CHANGES TO THIS PRIVACY POLICY ────────────────────────────────────────

We may update this Privacy Policy from time to time. We will notify you of any material changes by: • Posting the new Privacy Policy in the App • Updating the "Last Updated" date at the top

Your continued use of the App after changes constitutes acceptance of the updated Privacy Policy.

──────────────────────────────────────── 10. CONTACT US ────────────────────────────────────────

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Email: privacy@gotravlin.com

Travlin [Your Address - Optional] [Your City, State ZIP - Optional]

──────────────────────────────────────── 11. CALIFORNIA PRIVACY RIGHTS (CCPA) ────────────────────────────────────────

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected. • Right to Delete: You can request deletion of your personal information. • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at privacy@gotravlin.com.

──────────────────────────────────────── 12. EUROPEAN PRIVACY RIGHTS (GDPR) ────────────────────────────────────────

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of your personal data • Right to Rectification: Request correction of inaccurate data • Right to Erasure: Request deletion of your data • Right to Restrict Processing: Request limitation of how we use your data • Right to Data Portability: Receive your data in a portable format • Right to Object: Object to certain processing of your data

To exercise these rights, contact us at privacy@gotravlin.com.

Legal Basis for Processing (EEA Users): • Contract: Processing necessary to provide the App services • Consent: Where you have given explicit consent (e.g., Gmail access) • Legitimate Interests: To improve and secure our services