Clarity matters
Privacy notice
Updated
Information you choose to share
Launch forms request your email and explicit consent. Contact and partner forms may also request your name, organization, country, business website, services, integration interests and message. Use these forms only for the stated purpose, without identity documents or financial credentials.
Purpose and handling
We use the information you submit to respond to your inquiry or provide the updates you requested. Wait for a confirmation that your message was received; if sending is unavailable, the form will let you know. Public forms do not save your entries in browser storage. Our hosting service may process technical request information to deliver and protect the website.
AI TripPay chat
When you send a question, TripPay sends your message and recent conversation to the AI provider you select. Automatic mode chooses among providers enabled by TripPay and may send the same context to another enabled provider if the first cannot respond. Changing the model also sends the recent conversation to the newly selected provider. Each answer identifies the responding provider and model. TripPay keeps this public conversation in the open page without saving it to your account or browser storage; a new chat or reload clears that page history. Provider and hosting systems may retain information under their own service and security policies. Keep passwords, identity documents, payment details and other sensitive information out of chat. The public assistant cannot access your account or carry out transactions.
In the TripPay app and web workspace
When you create an account we keep your name, email, language and, if you add it, your mobile number. We keep what you enter to run your journeys: trips, itinerary, budgets, expenses and receipts. If an operator adds you to a Hajj or Umrah group we keep your place in that group, your check-ins, group chat messages and document checklist. Payment records come from the payment provider that handled the payment.
Location, notifications and security
The app uses your location only when you choose to share it — for a group check-in or a time-limited location share — and never in the background. If you allow notifications we store a push token for your phone so group alerts reach you; it is removed when you sign out. We log sign-ins and security events to protect your account. TripPay has no advertising, does not sell personal data and does not track you across other apps or websites.
Who can see it
Your trips are private to you and the people you invite. In a pilgrimage group, the operator and group leaders see the roster, check-ins and reports; your family head sees your family’s check-ins; chat channels are visible only to their members. Payment and messaging providers receive only what they need to complete a payment or deliver a message. AI suggestions are drafts you review; AI cannot move money or change records.
Deleting your account
You can close your account at any time: in the app under More → Delete account, or on the web under Settings → Delete account. You are signed out everywhere straight away and alerts stop; after we confirm it is you, we delete your profile. Payment and anti-fraud records we are required by law to keep are retained for the required period and then deleted. See the account deletion page for details.
Your choices
Sharing information through a public form is optional. To ask about access, correction, deletion, retention or withdrawing consent, use the contact page and choose “Privacy request”. Include only what we need to understand your request. Retention depends on the service and the type of record; this notice does not set a single period for every record.