Privacy Policy

Our approach

TripPouch (“the app”, “we”, “us”) is published by GALAXYWAY AI LTD. We designed TripPouch to be local-first and privacy-first: you do not need an account to use it, and the information you create — your trips, documents, packing lists, checklists, reminders, emergency information and notes — is stored locally on your device. We do not require you to register, sign in, or hand over personal information to use the app.

Information we do not collect

We want to be clear about what TripPouch does not do:

• We do not require an account, email address, or password.
• We do not upload your trips, documents, photos, IDs, packing lists or emergency information to our servers.
• We do not embed third-party advertising or behavioural-tracking SDKs in the app.
• We do not sell, rent or share your personal information with data brokers.

Information stored on your device

Everything you add to TripPouch is saved on your device — in a local database for structured data, and in app-controlled file storage for the documents and photos you import. This includes trip details and destinations, the documents you scan or import (such as passports, visas, boarding passes, insurance and IDs), packing lists and templates, pre-trip checklists, reminders, and emergency contacts, insurance references and medical notes. This data stays on your device unless you choose to move it — for example by using the app’s export feature, by sharing a document yourself, or through a device backup you control (such as iCloud or Google device backup, governed by Apple’s or Google’s own terms).

Device permissions

TripPouch only asks for permissions needed for features you choose to use, and it asks at the point of use:

• Camera — to scan travel documents. Scans are stored on your device.
• Photo library — to import existing photos or document images. Selected files are copied into the app’s local storage.
• Notifications — to send local reminders for trip tasks and document dates. Reminders are scheduled on-device and are always optional.
• Face ID / biometrics — if you enable the privacy lock, to unlock the app. Biometric data never leaves your device and is handled by your operating system, not by us.

You can grant or revoke any of these permissions at any time in your device settings. Declining a permission only disables the related feature; the rest of the app keeps working.

Privacy lock and document encryption

TripPouch offers an optional privacy lock that uses your device’s Face ID, Touch ID or passcode, with an auto-lock timeout you control. Lock settings and secrets are stored using your platform’s secure storage (such as the iOS Keychain or Android Keystore). On TripPouch Pro, you can also enable at-rest encryption for documents you add, using a key kept in your device’s secure storage. These features protect access to your data on your device; they are a privacy layer, not a guarantee of identity-document, legal or medical security beyond the behaviour described here.

Subscriptions and payments

TripPouch offers an optional upgrade, TripPouch Pro. Purchases and renewals are processed by the Apple App Store or Google Play, not by us. We never see or store your payment card details. To manage entitlements (to know whether TripPouch Pro is active on your device) we use a subscription-management provider, which may process a pseudonymous app user identifier and the purchase receipt issued by the app store. This is used solely to unlock the features you have paid for and is not used to build a profile of you.

This website

This marketing website (https://trippouch.galaxyway.ai) is served through a content delivery network and hosting provider (Cloudflare), which may process standard technical information such as your IP address and request metadata to deliver the site securely and reliably. We do not use this website to build advertising profiles. If we add optional, privacy-respecting usage analytics in the future, we will update this policy first.

Children’s privacy

TripPouch is a general-audience travel app and is not directed at children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from children. Because the app does not collect personal data on our servers in the first place, there is nothing for us to retain.

Data security

Because your data stays on your device, its security is closely tied to your device’s own protections — your passcode, biometric lock and operating-system security — and, optionally, TripPouch’s own privacy lock and document encryption. We recommend keeping your device updated and protected with a screen lock. If you export your data or share a document, the resulting file is your responsibility to store and send securely.

Your control over your data

You are in control at all times. You can edit or delete any trip, document, list or note inside the app. You can export your data as a local backup or a PDF trip packet, and re-import a backup whenever you like. The app also provides a “delete all data” option that removes TripPouch’s local data from your device. Deleting the app removes its local database and stored files. Because we do not hold your trip data on our servers, there is no separate account for us to delete.

International users

TripPouch is available internationally. Since your trip data is processed locally on your device, it is not transferred to us across borders. Any limited processing described above (such as app-store payment handling or website delivery) is carried out by the respective providers under their own terms and safeguards.

Changes to this policy

We may update this Privacy Policy from time to time, for example to reflect new features or legal requirements. When we make material changes, we will update the “Last updated” date above and, where appropriate, note the change in the app.

Contact us

If you have any questions about this Privacy Policy or how TripPouch handles data, contact GALAXYWAY AI LTD at info@galaxyway.ai.