Triptix
Get the app

Legal

App Privacy Policy

Last updated: 16 September 2026

This policy explains how Triptix Ltd (company number SC722439), 39 Mortonhall Road, Edinburgh, EH9 2HN, United Kingdom (“Triptix”, “we”, “us”) uses personal data. It covers triptix.co, the Triptix iOS and Android apps, and related services. It forms part of our Terms.

Triptix Ltd is the data controller. Questions: contact@triptix.co.uk.

1. What we collect

Depending on how you use Triptix, we may collect:

  • Account. Name, email, password (if you use one), Sign in with Apple or Google identifiers, profile photo or initials, favourite teams and leagues, home airports, and notification preferences.
  • Trips. Fixtures you look at or save, traveller names and contact details you enter, party size, who has paid on a group trip, and booking references.
  • Payments. We do not store full card numbers for App Store or Play Store membership. For trip payments, our payment partners process the charge. We keep the minimum we need (status, amount, last digits or a token, and receipts).
  • Device and usage. App and site diagnostics, IP address, device type, operating system, language, crash logs, and approximate location if you allow it (for example to sort nearby airports).
  • Messages. Emails or in-app messages you send to support, and invite or share links you create.

We do not run Facebook “Like” buttons on the current site. We do not need your postal address unless a booking or legal notice requires it.

2. Why we use it

We use this data to:

  • create and secure your account, including Sign in with Apple or Google;
  • show offers, remember preferences, and personalise the app;
  • take Triptix+ payments via Apple or Google and keep your membership status in sync;
  • book tickets, flights and stays with suppliers, and run group and mystery trips;
  • send booking, security and service messages (these are not marketing);
  • send marketing if you have opted in, which you can stop at any time;
  • improve the product, fix bugs, prevent fraud, and meet the law.

The legal bases we rely on are: performing the contract (account, bookings, Plus), legitimate interests (security, product improvement, limited analytics), consent (marketing, optional location, certain cookies), and legal obligation (tax, accounting, complaints).

3. Who we share it with

We share data only as needed to run Triptix:

  • Apple and Google — sign-in, app distribution, push notifications, and Triptix+ billing.
  • Payment processors — trip charges and refunds.
  • Ticket, airline and hotel partners (including Booking.com where you pick a stay) — to fulfil the booking. Their terms apply to that part of the trip.
  • Hosting, email, analytics and support tools — to operate the app, site and customer service.
  • People on your trip — if you join or invite a group, they can see your name, avatar or initials, and whether you have booked. Share links can show a preview of the fixture and who invited you.

We do not sell your personal data. We do not share it with other companies for their marketing unless you have asked us to.

We may disclose data if the law requires it, to protect people from harm, or if we sell or restructure the business (the buyer must protect it in line with this policy).

4. International transfers

Some partners are outside the UK. When we transfer personal data abroad we use a lawful mechanism (such as the UK Addendum to EU standard contractual clauses, or an adequacy decision).

5. How long we keep it

We keep account data while your account is open, then delete or anonymise it when it is no longer needed, unless we must keep it for bookings, refunds, tax, fraud prevention or disputes. Trip records are kept for as long as needed to run the trip and deal with claims. Diagnostics are kept for a short period unless they are part of an incident.

6. Your rights

Under UK GDPR you can ask to access, correct, delete, or restrict your data, to object to some processing, and to receive a copy in a portable format. Where we use consent, you can withdraw it. These rights are not always absolute (for example we may keep a booking record).

You can update much of your profile in the app. To delete your account, use the in-app delete flow or email us. Deleting the account does not cancel Triptix+; cancel that in the App Store or Google Play.

You can also complain to the Information Commissioner’s Office at ico.org.uk.

If you are in the EEA, you have equivalent rights under the EU GDPR.

7. Cookies and similar tech

The website uses cookies or similar technologies that are needed to run the page (for example to keep you logged in on WordPress.com if you are a site admin) and, where used, to understand traffic. You can block cookies in your browser; the site may not work fully. The app uses device identifiers and SDKs for the same purposes as section 2, not browser cookies. We do not have a separate cookie policy page; this section is the policy.

8. Security

We use HTTPS, access controls and supplier contracts to protect data. No online service is perfectly secure. Use a unique password if you set one, and do not share your login.

9. Children

Triptix is aimed at adults booking travel. We do not knowingly create accounts for children under 16. If you think we have, email us and we will delete the account.

10. Changes

We will post updates here and change the date above. For material changes we may also notify you in the app or by email.

11. Contact

Triptix Ltd, 39 Mortonhall Road, Edinburgh, EH9 2HN, United Kingdom.
contact@triptix.co.uk. We aim to reply within five working days.

Social accounts (Instagram, X, TikTok) are not the place to send passport or payment details.