Privacy Policy

1. Introduction

TripHero ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect personal information when you or your organization uses the TripHero platform — including the web dashboard and mobile app.

TripHero is designed for educational trips, language programs, and summer camps. It is used by trip organizers, leaders, students, and parents. We take the privacy of students and minors very seriously.

2. What Data We Collect

We collect the following types of information:

• Account information: Name, email address, phone number, password (encrypted).
• Profile information: Gender, date of birth, nationality, passport number, medical notes, allergy notes, and emergency contact — for student safety purposes only.
• Trip data: Attendance records, activity participation, points, quiz results, accommodation assignments, and notes from leaders.
• Location data: Approximate GPS location collected periodically during active trips from the student mobile app, used only for attendance and safety purposes.
• Photos: Trip photos uploaded by leaders or organizers within the app.
• Usage data: Basic logs and error information to help us improve the platform.

3. How We Use Your Data

• To operate and deliver the TripHero platform to your organization.
• To allow trip leaders to manage attendance, activities, and student welfare.
• To generate reports for parents about their child's progress and safety.
• To track student location during active trips for attendance and safety purposes.
• To power AI-generated reports using anonymized trip data (parent reports never include private leader notes unless explicitly enabled by the organizer).
• To communicate platform updates and support responses.

We do not sell personal data to third parties. We do not use student data for advertising purposes.

4. Location Data

The TripHero mobile app requests location permission to support attendance check-in and student safety during active trips. Location data is:

• Only collected while the student is on an active trip.
• Used only by trip leaders and organizers within your organization.
• Not shared with any third party except our infrastructure provider (Supabase).
• Accessible to parents only in the form of a general safety status, not a live map.

5. Who Can See Your Data

• Parents can only see information about their own linked child.
• Students can only access their own profile, activities, and quiz results.
• Trip Leaders can access data only for trips they are assigned to.
• Admins/Organizers can access all data within their organization.
• Private notes written by leaders are never visible to parents unless the organizer explicitly enables them.

6. Data Retention

We retain account and trip data for as long as your organization uses TripHero. Organizations may request deletion of their data by contacting us. Location ping data older than 90 days may be automatically removed.

7. Data Deletion Requests

You may request deletion of your personal data at any time by emailing us at privacy@triphero.com. We will process your request within 30 days.

8. Third-Party Services

TripHero uses the following third-party services:

• Supabase — database and authentication infrastructure.
• Anthropic Claude — AI model used server-side for generating reports. No personal data is sent to Anthropic without server-side processing.
• Vercel — web hosting platform.
• Expo / EAS — mobile app build and delivery platform.

9. Security

We use industry-standard security practices including encrypted connections (HTTPS), row-level security in our database, and role-based access control. We regularly review our security practices as the platform evolves.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: