Privacy Policy
Last updated: January 10, 2026
Introduction
TripWaffle ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our travel itinerary management service at tripwaffle.com and our mobile applications (collectively, the "Service").
Information We Collect
Account Information
When you sign in with Google, we receive and store:
- Your name and email address
- Your Google profile picture
- A unique Google identifier
Trip and Event Data
To provide our service, we collect and store information about your trips and travel events, including:
- Trip names and dates
- Flight details (airlines, flight numbers, airports, times)
- Accommodation information (hotel names, addresses, dates)
- Transportation bookings
- Other events and activities you add
- Notes and additional details you provide
Email Forwarding
When you forward booking confirmation emails to TripWaffle, we process the email content to extract travel information. We use AI to parse these emails and create events in your itinerary. The original emails are logged temporarily for processing and troubleshooting.
Technical Information
We automatically collect:
- IP address and approximate location
- Browser type and device information
- Session data for authentication
- Push notification tokens (if you enable notifications)
How We Use Your Information
We use your information to:
- Provide and maintain the TripWaffle service
- Create and organize your travel itineraries
- Send real-time flight status updates and notifications
- Parse forwarded booking emails to create events automatically
- Generate AI-powered trip insights and travel tips
- Display weather information for your destinations
- Improve our service and fix issues
- Communicate with you about service updates
Third-Party Services
We use the following third-party services to operate TripWaffle:
- Google OAuth - For secure authentication
- CloudMailin - For processing forwarded emails
- Firebase Cloud Messaging - For Android app notifications
- Apple Push Notification service - For iOS app notifications
- OpenWeatherMap - For destination weather forecasts
- Cloudflare - For security and performance
Each of these services has their own privacy policies. We only share the minimum data necessary for each service to function.
Data Storage and Security
We take the security of your data seriously:
- All data is transmitted over HTTPS (encrypted connections)
- Session cookies are HttpOnly and Secure-flagged
- We use Google OAuth instead of storing passwords
- Database backups are encrypted and stored securely
- Access to user data is restricted to essential operations
Data Retention
We retain your account and trip data for as long as your account is active. You can delete individual trips or events at any time. If you wish to delete your entire account and all associated data, please contact us at the email address below.
Your Rights
You have the right to:
- Access and view your personal data within the app
- Edit or delete your trips and events
- Request a copy of your data
- Request deletion of your account
- Opt out of push notifications in your device or browser settings
Children's Privacy
TripWaffle is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
What We Don't Do
- We do not sell your personal data to third parties
- We do not use your data for targeted advertising
- We do not share your trip details with other users without your consent
- We do not access your Google account beyond basic profile information
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.
Contact Us
If you have questions about this Privacy Policy or your personal data, please contact us at: