Privacy Policy
TravelThread ("we", "us", or "our") operates the TravelThread mobile application. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
By using TravelThread, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
Account information: When you register, we collect your email address and the username and display name you choose.
Profile information: Optionally, a profile photo (avatar) you upload.
Photos and media: Photos, images, and GIFs you upload to trip groups. Photos are stored privately and are only accessible to members of the group they belong to.
Location data: When you upload a photo, we record the approximate GPS coordinates of your device at that moment, if you have granted location permission. This is used solely to display photo pins on the trip map. We do not track your location continuously.
Chat messages: Text messages, images, and GIFs you send in group chats.
Usage data: Anonymous analytics events (e.g. "photo uploaded", "trip created") used to understand how the app is used and to improve it. These events do not include personally identifiable information.
Push notification token: A device token used to send you push notifications about activity in your groups. You can disable notifications at any time in your device settings.
2. How We Use Your Information
- To provide and operate the TravelThread app
- To display your photos, profile, and messages to other members of your trip groups
- To show photo locations on the trip map
- To send push notifications about group activity (new photos, messages, mentions)
- To generate trip story collages on request
- To enforce our Terms of Service
- To analyse and improve the app using aggregated, anonymised data
We do not sell, rent, or share your personal data with third parties for marketing purposes.
3. Who Can See Your Data
Within your group: Photos, captions, chat messages, and your profile (username, display name, avatar) are visible to all members of each trip group you belong to.
Publicly shared collages: If all members of a trip vote to share their trip story, the generated collage may be shared publicly via a link. No individual photo metadata (location, timestamp) is included in the public collage.
TravelThread staff: We may access your data only as necessary to provide support, diagnose technical issues, or enforce our Terms of Service.
4. Third-Party Services
TravelThread uses the following third-party services which may process your data:
- Supabase (database and file storage) — stores your account data, photos, and messages. Data is hosted in the EU (Frankfurt). Privacy Policy
- PostHog (analytics) — receives anonymised usage events. No personally identifiable information is included. Privacy Policy
- RevenueCat (in-app purchases) — processes subscription and purchase data if you upgrade to TravelThread Plus. Privacy Policy
- Google Maps SDK — used to render the trip map. Privacy Policy
- GIPHY — used to browse and send GIFs in chat. Searches are sent to GIPHY's API. Privacy Policy
- Google Sign-In (optional) — if you choose to sign in with Google, your Google account email is shared with us. Privacy Policy
5. Data Retention
We retain your account data and content for as long as your account is active. If you delete your account, your profile and content will be permanently deleted within 30 days.
You may request deletion of your account and all associated data at any time by emailing hello@travelthread.app.
6. Security
All data is transmitted over HTTPS. Photos are stored in private, access-controlled storage — a time-limited signed URL is required to view any photo. We use Row-Level Security on our database so users can only access data in groups they belong to.
No method of electronic transmission or storage is 100% secure. While we use commercially reasonable measures to protect your data, we cannot guarantee absolute security.
7. Children's Privacy
TravelThread is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
8. Your Rights
Depending on your location, you may have the right to access, correct, or delete your personal data. To exercise these rights, contact us at hello@travelthread.app.
EU/EEA residents have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with a supervisory authority.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date above. Continued use of the app after changes constitutes acceptance of the revised policy.
10. Contact
For any questions about this Privacy Policy, please contact us at:
hello@travelthread.app