Privacy Policy

1. Information We Collect

We may collect the following categories of information:

• Contact Information: name, email address, and similar identifiers.
• Account and Profile Data: login credentials, preferences, and onboarding responses.
• Travel Content: itinerary and booking details you provide directly or via connected services (for example, email providers).
• Location Data: precise device location when you grant permission in order to support location-aware travel features.
• Usage and Device Data: device identifiers, app interactions, browser type, IP address, crash logs, performance diagnostics, and similar technical telemetry.
• Communications: support messages, feedback, and responses to surveys or beta programs.

2. How We Collect Information

• Directly from you (for example, web forms, sign-up, and support requests).
• Automatically through service logs, analytics, cookies, and similar tracking technologies used in the app and website.
• From third-party integrations you choose to connect, such as email services or calendar providers.

3. How We Use Information

• To provide, operate, and improve the Services.
• To personalize travel guidance and itinerary support features.
• To generate AI-assisted summaries, recommendations, and organizational features.
• To provide location-aware travel assistance and localized recommendations when you enable precise location access.
• To communicate product updates, support responses, and feature announcements.
• To maintain security, prevent abuse, and enforce our Terms of Use.
• To comply with legal obligations.

4. Disclosure of Information

We may disclose information to:

• Service providers supporting hosting, analytics, communication, and security.
• AI service providers that process relevant inputs and outputs to power AI-assisted features on our behalf.
• Integration partners when you direct us to connect external accounts.
• Authorities or other parties where required by law or to protect rights and safety.
• Successors in connection with a merger, financing, acquisition, or asset sale.

We do not sell personal information, and we do not use personal information for cross-context behavioral advertising.

When we use third-party AI providers, we seek contractual and technical controls that limit processing of personal information to service delivery, safety, and abuse prevention.

5. Data Retention

We retain trip and account data while your account is active or until you delete that data from the Services.

If an account is inactive for 18 months, we may send a notice to the account email. If there is no reactivation within 30 days after notice, we may delete or anonymize personal data associated with the inactive account.

We may retain limited records for longer where required by law, needed to address security issues, or necessary to resolve disputes and enforce agreements.

6. Your Privacy Rights

Depending on your location, you may have rights to:

• Access, correct, or delete personal information.
• Obtain a copy of personal information in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Appeal certain privacy-right decisions where required by law.
• Account Deletion: You can delete your account and associated data in any of the following ways:
  • In the Trip7 app, navigate to Profile > Delete My Account.
  • Via the web by visiting trip7.io/deletion.
  • By contacting us at legal@kumino.ai.

To exercise rights, contact us at legal@kumino.ai.

7. Analytics and AI Processing

We use in-app analytics tools to understand product performance and improve the Services. Users can opt out of analytics in the app settings.

To provide AI-assisted features, relevant trip content and related account context may be processed by AI service providers acting on our behalf. Authorized personnel may access limited records for support, quality assurance, security, and abuse prevention.

We do not use your personal information or travel content to train our own foundational AI models, and we require our third-party AI providers to abstain from using your data to train their models.

8. Security and Protection of Google User Data

We use industry-standard administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction.

These safeguards include encryption in transit and at rest, access controls, and measures intended to limit access to personal information to authorized personnel and service providers who need it to operate the Services.

Security procedures are in place to protect the confidentiality of Google user data that you choose to connect to the Services.

We do not retain Google user data for longer than necessary to reliably process travel information from that data, unless a longer retention period is required by law or needed to address security or abuse issues.

Trip7's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

9. International Data Transfers

We are not currently targeting international rollouts. If this changes and cross-border transfers become applicable, we will update this Privacy Policy with the relevant safeguards.

10. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 without appropriate authorization.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date and provide notice where required by law.

12. Contact

If you have questions about this Privacy Policy, please contact our Privacy Officer at legal@kumino.ai.