Privacy Policy
Last updated 23 September 2026
99Trip is a travel planning app: you build trips, add places to them, and share them with people you choose. This policy explains exactly what we store to make that work, who else sees it, and how to get it back or get rid of it. It covers the 99Trip website at 99trip.app and the 99Trip Android app.
Who we are
99Trip is operated by NinetyNineTrip. For anything in this policy — a question, a copy of your data, a correction, or a deletion request — write to privacy@99trip.app. We answer within 30 days.
What we collect
Information you give us
| Data | Why we have it |
|---|---|
| Name and email address | To create your account, sign you in, show you to people you travel with, and send you trip invitations and password resets. |
| Password | To sign you in. We never store the password itself — only a PBKDF2-SHA512 hash of it, which cannot be reversed. If you sign in with Google we store no password at all. |
| Profile photo, bio, home location and travel interests | Optional. They appear on your traveler profile. You control who sees them with the profile visibility setting. |
| Your trips: titles, dates, destinations, stops, notes, photos, groups and cover images | This is the product. Trips are private until you publish or share them. |
| Reactions, saved items, comments and trip chat messages | To show your activity to the people you share a trip with. |
| Invitations you send | We store the invited email address so the invitation can be accepted. If it is never accepted, it is deleted along with your account. |
Information collected automatically
| Data | Why we have it |
|---|---|
| Approximate or precise location | Only if you grant location permission, and only while you are using a feature that needs it — trips near you, nearby destinations and nearby experiences. We use it to work out which city you are in and then discard it. We do not build a location history and we never track you in the background. You can refuse, and the rest of the app works normally. |
| Usage and device data: pages viewed, features used, approximate region, browser and device type | Google Analytics, to understand which parts of the app people actually use. |
| Server logs: IP address, request time, error details | To keep the service running and to investigate abuse and faults. |
What we do not collect
- No payment details. 99Trip does not take payments.
- No contacts, calendar, microphone, photo library or SMS access.
- No location in the background.
- We do not sell your data, and we do not share it with advertisers.
Who else sees your data
We use a small number of services to make the app work. Each one receives only what it needs for its job.
| Service | What it receives |
|---|---|
| Google Maps and Google Places | The place names and coordinates you search for and view, so maps and place details can be drawn. |
| Google Sign-In | If you choose it, Google confirms your identity and sends us your name, email address and profile photo. |
| Google Analytics | Usage events and approximate region. Not your name, your email or the contents of your trips. |
| OpenAI | The trip details you submit when you ask 99Trip to generate an itinerary, and the messages you type to the Rafiq trip assistant. Please do not put anything confidential in them. This content is not used to train models. |
| Viator | The destination or search term when you browse bookable experiences. If you click through to book, Viator’s own privacy policy applies from that point on. |
| Unsplash, Pexels and Openverse | Your search term when you pick a cover photo. No account data. |
| Our email provider | Your email address, to deliver invitations, password resets and account notices. |
| Our hosting provider | Stores the database and uploaded files on servers we control. |
We will also disclose data where the law requires it, or where it is necessary to protect our rights or someone’s safety.
What other users see
- Private trips are visible only to you and the people you invite.
- Published trips are public: anyone, signed in or not, can see the trip along with your name and photo as its author.
- Your traveler profile is private by default — visitors see only your name and photo. Setting it to public also shows your bio, home location, interests and trip statistics. Either way, only trips you have published ever appear on it.
- Your email address is never shown to other users. It is visible only to you.
Where your data is stored, and for how long
Your account and trips are stored on our servers and kept for as long as your account exists. Server logs are kept for up to 90 days. Analytics data is retained according to Google Analytics’ own settings, currently 14 months.
Sign-in tokens are stored on your own device — in browser storage on the web, and in the app’s private storage on Android. Signing out removes them.
When you delete your account, everything listed on the account deletion page is erased immediately. There is no grace period and no archived copy. Backups are overwritten on a rolling 30-day cycle.
Your rights
At any time you can:
- See and correct your data — on the profile page in the app.
- Control who sees you — with the profile visibility setting, and by publishing or unpublishing individual trips.
- Refuse location access — in your device settings. The app keeps working.
- Delete your account and everything in it — in the app under Settings, then Delete account, or by following these instructions.
- Request a copy of your data — email privacy@99trip.app.
Depending on where you live you may also have the right to object to processing, to restrict it, or to complain to your local data protection authority.
Security
Traffic to 99Trip is encrypted with HTTPS. Passwords are stored only as PBKDF2-SHA512 hashes with 100,000 iterations. Access to the production database is restricted to the people who operate the service. No system is perfectly secure, but if a breach ever affects your data we will tell you.
Children
99Trip is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, write to privacy@99trip.app and we will remove it.
Changes to this policy
If we change this policy we will update the date at the top of this page. If the change is significant we will also tell you in the app or by email before it takes effect.
Contact
Questions, requests or complaints: privacy@99trip.app.