Privacy Policy

Data Controller

HalfPeeled LLC is the data controller responsible for your personal data collected through the Road Trip app. If you have any questions about how your data is processed, you can contact us at contact@theroadtripapp.com.

Information We Collect

We may collect the following categories of information when you use Road Trip:

• Device identifiers — a randomly generated UUID stored on your device to support functionality such as analytics, purchase restoration, and identifying your data on our servers.
• Account information — you may sign in with Apple or create an account using your email address and a password. When you sign in with Apple, we receive your Apple user identifier and, depending on your Apple ID sharing preferences, your name and email address. When you sign in with email, we store your email address and a securely hashed password — we never store passwords in plain text. This information is stored on our servers to enable account features and cross-device sync.
• Profile information — you may create a profile that includes a display name, username, and profile photo. Your username and display name may be visible to other users you collaborate with on trips. We store this information on our servers to provide profile and collaboration features.
• Location data — when you grant permission, we access your approximate or precise location to provide weather forecasts, nearby point-of-interest suggestions, gas station lookups, and location-based games such as Landmark Lightning (which searches for nearby landmarks within approximately 10 km). Location data is processed on-device or sent to our servers only to fulfill your request and is not stored long-term.
• Usage analytics — we use Google Analytics (Firebase) to collect anonymized event data (such as features used and session duration) to understand how the Service is used and improve the experience. This data is not linked to your identity.
• Purchase information — if you subscribe to Road Trip Pro, RevenueCat processes the transaction on our behalf. We receive a record of your subscription status but never see your payment details.
• Trip data — when you use the AI Trip Planner or create trips, your trip details (destinations, stops, dates, preferences, and itinerary) are stored on our servers to provide the Service, enable cross-device access, and generate AI-powered suggestions. You can delete your trips at any time from within the app.
• Gas tracker data — your fuel expense entries (cost, gallons, location, and odometer readings) are stored on our servers to provide gas tracking functionality. You can delete individual entries at any time.
• Push notification tokens — if you enable push notifications, we collect and store your device push token on our servers to deliver notifications such as trip reminders and daily briefings. You can manage notification categories or disable notifications at any time.
• Trip sharing — when you share a trip, a unique link is generated that makes your trip details (stops, dates, and itinerary) publicly accessible on the web to anyone with the link. You can revoke the share link at any time, which immediately removes public access.
• Recommended places — we use AI (Google Gemini) to curate monthly place recommendations, which are enriched with data from Google Places, Foursquare, and Wikipedia. These recommendations are not personalized to you — the same curated collections are shown to all users.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service's features
• Deliver weather forecasts, trip suggestions, gas tracking functionality, and location-based games
• Generate AI-powered trip itineraries, cost estimates, and curated place recommendations
• Enable user profiles, usernames, and collaboration features
• Enable cross-device syncing of trips and data
• Deliver push notifications you have opted into
• Power trip sharing via public web links
• Process in-app subscriptions and restore purchases
• Analyze anonymized usage patterns to guide product development
• Display relevant advertisements to free-tier users through Google AdMob

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we rely on the following legal bases to process your personal data:

• Consent (Art. 6(1)(a)) — we process certain data only with your explicit consent. This includes analytics tracking via Google Analytics (Firebase), advertising and personalized ads through Google AdMob, and attribution tracking. You may withdraw your consent at any time through the app's Settings.
• Contract performance (Art. 6(1)(b)) — processing necessary to provide the core app functionality you have requested, including trip planning, gas tracking, the AI Trip Planner assistant, weather forecasts, and route calculation.
• Legitimate interests (Art. 6(1)(f)) — we may process data where we have a legitimate business interest that is not overridden by your rights. This includes maintaining the security and integrity of our services, fraud prevention, and general service improvement.

Third-Party Services

Road Trip integrates with the following third-party services, each of which has its own privacy policy:

• Apple Sign In — account authentication (mobile app and maps web app)
• Apple MapKit — maps and location search
• Apple WeatherKit — weather data
• Google Analytics (Firebase) — analytics and event tracking
• RevenueCat — subscription and in-app purchase management
• Google AdMob — advertising for free-tier users
• TomTom — driving route calculation and point-of-interest search
• Foursquare — place details and enrichment
• OpenAI — AI-powered trip itinerary generation
• Google Gemini — AI-powered cost estimation, trip tips, and monthly place curation
• Google Places — place discovery and enrichment
• Apple iTunes API — music metadata for in-app games
• Pexels — stock photography for trip stories
• Wikipedia — place descriptions and context for trip stops
• FRED (Federal Reserve Economic Data) — fuel price data for travel cost estimates
• Google Fonts — font delivery on our website pages

We encourage you to review the privacy policies of these services.

Advertising

Free-tier users may see advertisements served by Google AdMob. AdMob may use device identifiers and general location to serve relevant ads. Road Trip Pro subscribers do not see any ads. You can limit ad tracking through your device's privacy settings.

Data Storage & Security

Your preferences and game progress are stored locally on your device. Sensitive identifiers are stored securely using your device's secure storage. Your trips, fuel entries, and account information are stored on our servers (hosted on Cloudflare infrastructure) to provide the Service and enable cross-device access. Data transmitted to our servers is encrypted in transit using HTTPS. Server-side cached data (such as place details and cost estimates) is retained for short periods (typically 7 to 30 days) and automatically purged. We retain account and trip data as long as your account is active or until you request deletion.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy. Specific retention periods are as follows:

• Account data — retained while your account is active. Upon receiving a deletion request, account data is permanently deleted within 30 days.
• Trip data — retained while your account is active and deleted alongside your account.
• Gas entries — retained while your account is active and deleted alongside your account.
• Analytics data (Google Analytics) — retained for up to 14 months per Google Analytics default retention settings.
• Device tokens (push notifications) — removed when you uninstall the app or unregister from push notifications.
• Session tokens — expire after 90 days of inactivity, then are permanently deleted.

International Data Transfers

Your data may be transferred to and processed in countries outside the European Union or European Economic Area (EU/EEA). The following sub-processors may process your data outside the EU/EEA:

• Cloudflare — global CDN and serverless worker infrastructure
• Google Analytics (Firebase) — analytics processing (United States)
• RevenueCat — subscription management (United States)
• Google — advertising services (United States)
• Apple — platform services (United States)

Where personal data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission or reliance on adequacy decisions where applicable.

Sub-processors

We use the following third-party sub-processors to operate the Road Trip app:

• Google Analytics (Firebase) — analytics and product improvement
• RevenueCat — subscription and purchase management
• Google AdMob — advertising (with consent)
• Apple MapKit / WeatherKit — maps and weather data
• Cloudflare — hosting, CDN, and geolocation
• TomTom — route calculation and along-route search
• Foursquare / OpenStreetMap — place enrichment
• Google Places — place discovery and enrichment
• Apple iTunes API — music metadata for in-app games
• Apple Push Notification Service — push notifications

Children's Privacy

Road Trip is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

Your Rights Under GDPR

If you are located in the European Union or European Economic Area (EU/EEA), you have the following rights under the General Data Protection Regulation:

• Right of access (Art. 15) — you have the right to request a copy of the personal data we hold about you. You can do this via the in-app Data Export feature in Settings > Privacy & Data.
• Right to rectification (Art. 16) — you have the right to request correction of inaccurate personal data. You can update your information directly through the app.
• Right to erasure (Art. 17) — you have the right to request deletion of your personal data. You can delete your account and all associated data via the app's Settings screen.
• Right to data portability (Art. 20) — you have the right to receive your personal data in a structured, commonly used, and machine-readable format. You can export your data in JSON format via Settings > Privacy & Data.
• Right to restrict processing (Art. 18) — you have the right to request that we limit how we process your data. You can manage individual consent categories in Settings > Privacy & Data.
• Right to object (Art. 21) — you have the right to object to processing of your personal data. You can withdraw consent at any time through the app's Settings.
• Right to lodge a complaint — you have the right to lodge a complaint with a supervisory authority in your EU/EEA member state if you believe your data protection rights have been violated.

To exercise any of these rights, you can use the in-app privacy controls or contact us at contact@theroadtripapp.com. We will respond to your request within 30 days.

Your Choices

• Location — you can revoke location access at any time in your device's settings.
• Ad tracking — you can limit ad personalization through your device's privacy settings.
• Analytics — you may opt out of analytics collection through the app's settings screen.
• Push notifications — you can manage per-category notification preferences in the app's settings or disable all notifications through your device's settings.
• Trip sharing — you can revoke a shared trip link at any time, which immediately removes public access to that trip.
• Account deletion — you can delete your account at any time from the app's settings. This permanently removes your account, trips, fuel entries, and all associated data from our servers.
• Delete local data — uninstalling the app removes all locally stored data. You may also contact us to request deletion of any server-side data.

Your Privacy Rights

Depending on your location, you may have additional rights regarding your personal information:

• California residents (CCPA) — you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information. We do not sell your personal information.
• European Economic Area / United Kingdom (GDPR) — you may have the right to access, correct, or delete your personal data, restrict processing, and data portability. Our legal basis for processing is legitimate interest (service improvement) and contract performance (providing the Service).
• All users — you can request a copy of your data or its deletion by contacting us at the email below.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy within the Service. Your continued use of Road Trip after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy, please contact us at contact@theroadtripapp.com.