Contents
01 What Information Do We Collect? 02 How Do We Process Your Information? 03 What Legal Bases Do We Rely On? 04 When Do We Share Your Information? 05 Third-Party Content and Links 06 How Long Do We Keep Your Information? 07 How Do We Keep Your Information Safe? 08 Do We Collect Information From Minors? 09 What Are Your Privacy Rights? 10 Controls For Do-Not-Track Features 11 US Residents Specific Rights 12 Do We Make Updates To This Notice? 13 How Can You Contact Us? 14 Review, Update, or Delete DataThis privacy notice for Tripify (operated by Bakery Scent s.r.l., "we," "us," or "our") describes how and why we collect, store, use, and/or share ("process") your information when you use our services ("Services"), including when you download and use our mobile application.
Questions or concerns? Please contact us at support@bakeryscent.com.
In Short: We collect only the minimum information needed to provide the Service.
We do not ask you to fill in a registration form. The only personal information we receive is what your sign-in provider shares when you authenticate:
We do not collect phone numbers, postal addresses, or payment/card information. All payments are handled entirely by Apple (App Store) or Google (Google Play); we never see or store your billing details.
When you use the app we automatically collect certain technical and usage data to keep the Service running and to understand how it is used:
We do not use this data to build individual profiles or for advertising purposes.
When you sign in with Apple or Google, those services authenticate your identity and share a limited set of profile data (email and, if available, name) with us under their own privacy policies. We do not receive any other data from these providers.
In Short: We process your information to operate the Service and keep it secure.
We do not use your data for advertising, marketing campaigns, or profiling.
In Short: We only process your data when we have a valid legal reason to do so.
If you are located in the EU or UK, the GDPR requires us to explain the legal bases for processing your personal data:
In Short: We share data only with the infrastructure providers needed to run the Service, and never sell it.
We may share your information with the following categories of third parties:
We do not sell, rent, or share your personal data with advertisers or marketing platforms.
Tripify allows you to import links from third-party platforms (Instagram, TikTok, YouTube, Google Maps, and others) to save location spots. When you submit a link, our Service fetches publicly available information from that URL (such as location name, address, and description) to create a spot in your collection. We do not store any personal data belonging to third parties beyond what is strictly necessary for this feature.
We have no control over the content, privacy policies, or practices of third-party platforms and are not responsible for them.
In Short: We keep your data for as long as your account exists, and delete it when you ask us to.
We retain your personal data only for as long as necessary to provide the Service. If you delete your account, we will delete your personal data (email, name, spots, collections, and itineraries) from our active systems. Residual copies in backups will be deleted within 30 days.
Anonymised analytics data (which cannot be linked back to you) may be retained for longer periods to help us understand usage trends.
In Short: We use appropriate technical and organisational measures to protect your data.
We implement industry-standard security measures including encrypted data transmission (HTTPS/TLS), Firebase security rules, and restricted access to production systems. However, no electronic transmission or storage technology is 100% secure. We cannot guarantee that unauthorised third parties will never be able to circumvent our security measures.
In Short: We do not knowingly collect data from children under 13.
Our Service is not directed to children under the age of 13 (or 16 where required by applicable law, including GDPR). We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a child, please contact us at support@bakeryscent.com and we will promptly delete it.
In Short: Depending on your location, you have rights to access, correct, or delete your personal data.
You have the right to:
You have the right to access, correct, and request deletion of your personal data, and to withdraw consent where processing is consent-based.
Send a request to support@bakeryscent.com. We will respond within 30 days.
Most browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature. Because there is no uniform standard for DNT signals, we do not currently respond to them. If a standard is adopted in the future, we will update this notice accordingly.
In Short: California and other US state residents may have additional privacy rights.
In the past 12 months we have collected:
To exercise these rights, email us at support@bakeryscent.com.
We may update this privacy notice from time to time. The updated version will be indicated by an updated date at the top of this page. If we make material changes, we will notify you via the app or by email. We encourage you to review this notice periodically.
Bakery Scent s.r.l.
Via Carlo Giuseppe Merlo 3, 20122 Milano, Italy
Email: support@bakeryscent.com
If you are a resident of the EU and believe we are processing your data unlawfully, you have the right to lodge a complaint with your local data protection authority. In Italy: Garante per la protezione dei dati personali.
You can delete your account and all associated personal data directly from the app settings. Alternatively, submit a request to support@bakeryscent.com and we will process it within 30 days.