Privacy Policy

The App never uploads your trip or expense content to any server. Every permission below is optional — the core tracking and planning features work without granting any of them:

• Location

  Detects your current city and country to show local weather and preset your home currency — coordinates are sent only when fetching weather and are never retained by the developer

• Camera

  Captures spot and receipt photos — stored on-device only

• Photos

  Picks spot, receipt, and note photos from your library — stored on-device only

• Calendar

  Writes itinerary spots to Apple Calendar — written directly to your device calendar, never routed through the developer's servers

• Motion & Fitness

  Reads the device pedometer to show walking stats during your trip — displayed only, not stored or uploaded

• Notifications

  Flight departure, daily expense, and itinerary reminders — all scheduled on-device, never through a push server

All permissions can be revoked at any time in Settings → Privacy & Security. Revoking a permission disables the related feature only.

The App connects to the network only in the cases below. Each service has its own privacy policy:

• WeatherAPI.com

  Fetches the forecast for a trip location or your current position. Only latitude/longitude and your language setting are sent — never trip names, amounts, or anything identifying you.

• Nominatim / OpenStreetMap

  Powers address search when adding spots. Your search keywords are sent, and this public service may log your device IP address.

• ExchangeRate-API (open.er-api.com)

  Refreshes daily reference exchange rates. Only a currency code (e.g. TWD) is sent — never amounts or expense records.

• Sentry (error reporting)

  Some builds enable error reporting to detect crashes and unexpected errors. Reports contain only the error stack trace, app version, and OS version, with network request details stripped before sending — never trip content, amounts, photos, or personal data, and never used for tracking or advertising. Builds without a reporting endpoint configured send nothing at all.

• Apple

  In-app purchases and Restore Purchases are handled by Apple StoreKit. Map directions open Apple Maps or Google Maps as an external link, only when you choose to.

The App contains no analytics, advertising, or cross-app tracking SDKs.

• Settings → Data Backup lets you back up to your own iCloud Drive, manually or automatically on each launch. The backup (database and photos) lives in your Apple ID's iCloud storage; the developer has no access to it
• Automatic backup can be turned off at any time on the same screen
• Exported .zip backups, PDF itinerary booklets, Excel expense reports, and share-card images are all generated on your device and shared through the system share sheet to recipients you choose — the developer receives no copy
• Importing a backup file parses it locally on your device; nothing is uploaded

TripGo Pro is a one-time purchase, not a subscription. Buying, restoring, and refunds are handled entirely by Apple StoreKit. The developer never receives your payment method, Apple ID, or billing details — only whether this device has unlocked Pro, a flag stored on the device itself.

• All trip data is stored in a local SQLite database on your device, with photos in the App's private directory
• There is no account system and no developer-side cloud sync (by design)
• Settings → Delete All Data clears every trip, expense, and setting at any time; this cannot be undone
• Uninstalling the App permanently deletes all local data. If you have backed up to iCloud Drive, that backup remains in your own iCloud and must be deleted by you

The App is not directed at children under 13 and does not knowingly collect personal data from them.

If this policy changes materially, you will be notified via App Store release notes or this page, and the effective date above will be updated. Continued use of the App constitutes acceptance of the updated policy.

For any privacy-related questions, please email: