Privacy Policy

The short version.

• Your trips live on your phone, encrypted. You can use Triplogue without an account.
• If you connect Gmail, your phone reads only your travel confirmations and turns them into a timeline. Your email never goes to our servers.
• If you sign in, we keep one private backup of what you add and change yourself. Bookings found in Gmail, the barcodes on your passes, and your photos stay off it.
• No ads, no selling, and no analytics in the app today.
• Delete what’s on your phone in the app. To delete your account, email legal@blacktop.social.

That summary is there to be useful. It isn’t the agreement. The sections below describe the app as it works today.

1. Who we are

Triplogue is an iPhone app made by Blacktop Social LLC (“Blacktop Social,” “we,” “us”). We are responsible for the personal information described here.

Blacktop Social LLC
606 Metropolitan Avenue, 6B, Brooklyn, NY 11211
legal@blacktop.social

Triplogue is in testing and not yet released. This policy covers the app as it works now. If a new feature would collect more, we’ll update this page before it does.

2. What Triplogue collects

• Your bookings and trips. These come from Gmail (if you connect it), files and screenshots you share into the app, text you paste, or details you type. A booking can include:
  • place names, dates and times, and addresses;
  • confirmation numbers and PINs, ticket numbers, seats and rooms;
  • the names of the travelers on it and who booked it;
  • prices, and a host’s check-in instructions.
• Tickets and passes. Triplogue reads the barcode or QR code on a boarding pass or ticket, so you can show it offline.
• Things you make. Trips, ideas you pin to a trip, notes and times you add, and your travel preferences. Also your name, bio and home city, a profile photo, and cover photos you choose.
• Invites you prepare. The name of the person you’re inviting and your message.
• Your account, if you make one.
  • With Apple, we receive your email address (or Apple’s private relay address) and an Apple account identifier.
  • With Google, we receive your Google email address, name, and a Google account identifier.
  • Apple shares your name only the first time you sign in. Triplogue puts it in your profile.
• Your Gmail connection, if you make one. This is a Google access key and your Gmail address. They stay on your phone (see Section 5).

Triplogue does not ask for your location, contacts, camera or microphone. It doesn’t read passport numbers or dates of birth from your documents. It picks photos from your library only when you choose one.

3. What stays on your phone

Everything in Section 2 stays on your phone, except what Section 4 lists.

• Encrypted store. Your trips, bookings, codes and tickets are kept in an encrypted store (AES-256). Its key is created on your phone and kept in your iPhone’s Keychain for this device only.
• Reading happens on your phone. Gmail, PDFs and screenshots are read on the phone, using Apple’s built-in tools:
  • PDFKit for documents;
  • Vision for text and barcodes;
  • Apple’s on-device language model, when your iPhone has Apple Intelligence. None of that reading is sent to us or to an AI service.
• Files you add. The original PDF or screenshot, and photos you pick, are kept in Triplogue’s own storage on the phone until you delete them.
• Offline copies. To open quickly offline, Triplogue keeps a short-lived copy of trip pages you’ve viewed for up to 7 days. Your bookings, codes and tickets are left out of that copy.
• Reminders. Check-in reminders are scheduled by your phone. There is no push service and no server involved.

4. What reaches our servers

Nothing, unless you sign in. Signed out, Triplogue talks only to Google (if you connect Gmail) and Apple (maps and sign-in).

If you sign in, our database provider (Supabase) holds three things for us.

• Your login. Your email address, how you signed in (Apple, Google or email), your account identifier with that provider, and when you signed in. Blacktop Social apps share one login system, so the same login can work in our other apps.
• Your Blacktop record. Your verified email address is linked to Blacktop Social’s shared record of the people who use our products. It notes that you use Triplogue and when you last did.
• One backup of what you made in Triplogue. This gets it back on a new phone. It includes:
  • trips you created;
  • bookings you added by hand, from a file, a screenshot or pasted text, with their details, such as confirmation numbers, seats, rooms, addresses, the names on them, and check-in steps you typed;
  • changes you made to any booking, such as a time you added or a note;
  • ideas you pinned, invites you prepared, prompts you dismissed;
  • your name, bio, home city and travel preferences.

The backup never includes:

• bookings, trips or places Triplogue found in Gmail;
• any email content;
• the barcodes or QR codes on your tickets and passes;
• your photos, or the files you imported.

It is one copy per account, and each change replaces it. Only your signed-in account can read it. We don’t browse backups. We would open one only to fix a problem you report, or where the law requires it.

5. Gmail and Google data

• What we ask for. When you continue with Google, or tap Connect Gmail, Google asks whether Triplogue may “read your email” (the gmail.readonly permission). You can untick it and still use the app.
• What your phone does with it.
  • It searches your Gmail for travel confirmations from the last 18 months. It looks at booking and airline senders and phrases such as “booking confirmation”, skips the Promotions and Social tabs and chats, and stops at 250 emails.
  • It opens only the emails that match. When an email’s text has no booking in it, it reads up to two PDF attachments.
  • It picks out booking details with Triplogue’s own rules, and Apple’s on-device model when available.
• What it keeps. The booking details it finds, such as flight, times, place, confirmation number and the names on the booking, and the barcode from a PDF ticket. It does not keep the email itself. PDFs are deleted from the phone as soon as they’ve been read.
• When it runs. Only when you connect Gmail, when you tap Check for new bookings in Me → Account, or once after you sign in on a new phone. It doesn’t check your email in the background.
• What never happens:
  • Your email, and the bookings Triplogue finds in it, are never sent to our servers.
  • We don’t use Gmail data for ads, we don’t sell it, and no person at Blacktop Social reads it.
  • We don’t use it to train AI models, ours or anyone’s.
  • The only thing tied to a Gmail booking that reaches our servers is a change you make yourself, such as a time you add or check-in steps you type. It goes into your backup with a scrambled identifier, so it can be put back when Gmail syncs on a new phone.
• Your Google access key stays in your iPhone’s Keychain on this phone. It is never sent to us.
• To disconnect, go to Me → Account → Gmail → Disconnect. That revokes Triplogue’s access at Google and deletes the key from your phone. You can also remove Triplogue from your Google Account under Security → Your connections to third-party apps & services. Bookings already found stay on your phone until you delete them.

Triplogue’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Analytics

Triplogue has no analytics, crash reporting or advertising code today. Nothing about how you use the app is sent to us or anyone else.

7. Who we share it with

We do not sell personal information. We do not share it for advertising. We disclose it only to the providers below, when valid legal process requires it, to protect rights or safety, or as part of a merger, acquisition or sale of the business. Each provider acts on our instructions.

• Supabase hosts your login, your Blacktop record and your backup.
• Apple:
  • handles Sign in with Apple;
  • draws the maps in trip pages, and opens Apple Maps when you tap an address;
  • when you delete an account that uses Sign in with Apple, we send Apple a one-time code so it can revoke Triplogue’s access.
• Google handles Google sign-in and, if you connect it, Gmail. Your phone talks to Google directly. Google’s own privacy policy covers that.

Sharing trips with other people isn’t live yet. Invites you prepare are saved on your phone and not sent to anyone. When you tap Share or Ask on a booking, iOS opens its share sheet. You choose the app and the words, and that app’s policies apply.

We are based in New York. If you use Triplogue from outside the United States, information you back up may be transferred to wherever our providers process it.

8. How long we keep it

• On your phone: until you delete it in the app or delete the app. Gmail PDFs are deleted right after they’re read. The list of emails from a Gmail check is deleted when the check finishes. Offline copies of trip pages expire after 7 days.
• Your backup: until you delete your account. Each change replaces the previous copy.
• Your login: until you delete your account. If you also use another Blacktop Social app with the same login, the login stays for that app.
• After you delete your account: we keep a short record that a login was deleted: its identifier, that Triplogue asked, and when. It has no email address.
  • Your email address may stay in Blacktop Social’s shared record if you use another Blacktop product, or if you agreed to receive our emails. That record is covered by the Blacktop Social Privacy Policy.
• Emails you send us are kept as long as needed to answer them and keep business records.

9. Delete your data

Delete your account (removes your backup and your login): email legal@blacktop.social from the address on your account, with the subject “Delete my Triplogue account”. We’ll confirm the request came from you, then delete your backup and your Triplogue membership, revoke Sign in with Apple and Triplogue’s Gmail access, and delete your login unless another Blacktop Social app uses it. Trips on your phone stay until you delete them there too.

Delete what’s on your phone:

1. If you’re signed in, sign out first, or ask us to delete your account (above). Otherwise your backup can bring your trips back.
2. Go to Me → Privacy → Delete what I added on this phone, then Delete. This removes the trips, bookings and tickets you added or imported, including those found in Gmail, plus your invites and your photos.
3. To remove everything, delete the app.

Disconnect Gmail: go to Me → Account → Gmail → Disconnect. Do this before you delete the app, because iOS can keep the access key after an app is removed. You can also remove Triplogue at myaccount.google.com → Security → Your connections to third-party apps & services.

Stop using Sign in with Apple: on your iPhone, go to Settings → your name → Sign in with Apple → Triplogue → Stop Using Apple ID.

You can also ask what we hold about you, ask for a copy, or ask us to correct it, at the same address. We won’t treat you differently for asking.

10. Children

Triplogue is not for children under 13. We don’t knowingly collect information from them. If you think a child has given us information, email legal@blacktop.social and we’ll delete it.

11. Security

• Your trips, codes and tickets are encrypted on your phone. The key is kept in your iPhone’s Keychain for this device only. Your sign-in and your Google access key are protected the same way.
• Connections to our servers and to Google use HTTPS.
• On our servers, database rules let only your signed-in account read or change your backup.
• Anyone who can unlock your phone can open Triplogue and see your trips, so keep a passcode on it.
• No method of storage or transmission is perfectly secure, and we can’t promise absolute security.
• If you find a security problem, tell us at legal@blacktop.social.

12. Changes

We’ll update this page and its date when our practices change. If a change affects what Triplogue collects or where it goes, we’ll update this page before the change applies.

13. Contact

Questions, requests or complaints:

Blacktop Social LLC
606 Metropolitan Avenue, 6B, Brooklyn, NY 11211
legal@blacktop.social
Help with the app: support@blacktop.social

See also the Triplogue Terms and the Blacktop Social Privacy Policy.