triponaut
Get the app

Privacy Policy

Personal data (usually referred to just as “data”) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly service.

Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction etc. performed on personal data, whether by automated means or not.

The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use which may result in said third parties also processing data they collect and control.

The privacy statement applies to all processing of personal data carried out by us, including the following:

  • on our websites,
  • in mobile applications
  • in external presences, such as our social media presences (hereinafter collectively referred to as “online services”)

1) Information about us as controllers of your data

The party responsible for this app (the “controller”) for purposes of data protection law is:

Florian Pollak

E-Mail: campus.elysia+triponaut@gmail.com
Address: Kirchberggasse 17/L1, 1070 Wien, Austria

2) The rights of users and data subjects

With regard to the data processing to be described in more detail below, users and data subjects have the right

  • to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
  • to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
  • to the deletion of data concerning them (cf. also Art. 17 GDPR), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
  • to receive copies of the data concerning them and/or provided by them (cf. also Art. 20 GDPR);
  • to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR).
  • to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR (cf. also Art. 21 GDPR)

In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.

3) Information about the data processing

Contact

If you contact us via email or another form of communication, the data you provide will be used for the purpose of processing your request. We must have this data in order to process and answer your inquiry; otherwise we will not be able to answer it in full or at all.

The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR.

Your data will be deleted once we have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom.

Data

The app stores information related to you about the following on the device:

  • your trips and their itineraries (flights, hotels, trains and buses)
  • booking details such as confirmation numbers, seats, times and notes
  • app settings, including the selected theme
  • the day you first opened the app on this device, which can be used e.g. to determine features that are offered for free, and to wait a few days before the app first asks you for a rating
  • for deciding when to ask you for a rating: how many bookings you have saved on this device and on how many days, and the day the app last asked — this stays on your device and is not sent to us
  • for the question how the app is working for you: the day it was last asked, your answer, and the day you last sent us feedback, so that the app does not ask too often The following data may be stored on our servers as well as on your devices:
  • your account identifier and email address, used for sign-in
  • your trips and bookings, so they are available on every device you sign in to
  • feedback you choose to send from the app (see “Feedback”)

The legal basis for this processing is Art. 6 Para. 1 lit. b) GDPR: we need this data in order to provide the app to you as agreed.

Where a particular feature is switched on by you and is not required for the app to work — such as connecting a mailbox so that travel confirmations can be imported — the legal basis is your consent, Art. 6 Para. 1 lit. a) GDPR. You may withdraw such consent at any time with effect for the future, for example by disconnecting the feature again; the lawfulness of the processing carried out until then is unaffected.

Server Log Files

Whenever you open a page, your browser sends a request to the servers this service is delivered from. Those servers are operated on our behalf by Vercel, and they record:

  • your IP address
  • the date and time of the request and the page or file requested
  • the type and version of your browser and your operating system
  • the website that referred you, if any

This happens for every request and cannot be switched off, because without it the pages cannot be delivered to you at all. We do not use this data to identify individual visitors, and we do not combine it with the audience measurement described below.

The legal basis is our legitimate interest in delivering this service securely and reliably, and in defending it against attacks and abuse, Art. 6 Para. 1 lit. f) GDPR. Log entries are kept only for as long as these purposes require and are deleted or anonymised afterwards.

We have concluded a data processing agreement with the hosting provider in accordance with Art. 28 GDPR.

Erasure

Local Data

You may be able to delete all the local data associated with the app via the app/browser settings or tools of your operating system, depending on your browser and operating system.

Please note that for technical reasons - and this applies to any app - there may be residual data after a deletion.

Data on Our Servers

Your data processed when using our app will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated.

As with local data, a deletion here cannot be asserted as immediate and total: residual copies may remain for a time in backups and in system logs, until those are overwritten in the ordinary course of their rotation.

Third-Party Services

We may use third-party providers to provide the services of this app to you. Please refer to the “Service Providers” section for details.

Service Providers

We may employ third-party companies and individuals due to the following reasons:

  • To authenticate your account and store your data
  • To synchronise your trips across your devices in real time
  • To optionally import travel confirmations from your inbox
  • To distribute the app on your specific device
  • To let you rate the app in the app store without leaving the app
  • To store the feedback you send from the app
  • To host this website and measure how it is used
  • To store newsletter subscriptions and deliver the newsletter

We want to inform users of this app that these third parties have access to your personal information. However, they are obligated not to disclose or use the information for any other purpose.

We may use the following services. Please refer to their linked privacy policy for details:

  • Supabase
    Account authentication and backend storage
  • PowerSync
    Real-time synchronisation of trip data between device and server
  • Google (Gmail API & Play Services)
    Optional email import, app distribution, and the in-app rating dialog
  • Microsoft (Outlook)
    Optional email import
  • Cloudflare
    Receiving and storing the feedback you send from the app
  • Vercel
    Hosting of triponaut.com and audience measurement
  • Brevo
    Storage of newsletter subscriptions and delivery of the newsletter
  • CleverReach
    Storage of newsletter subscriptions and delivery of the newsletter

Transfer to Third Countries

Data processing may also take place on servers outside the European Union (EU) or the European Economic Area (EEA).

In these cases, we ensure that appropriate safeguards (e.g., Standard Contractual Clauses of the EU Commission) are in place to guarantee an adequate level of data protection.

Newsletter

If you subscribe to our newsletter, we use the address you give us to send you the newsletter. Delivery is carried out for us by Brevo or CleverReach.

We store:

  • your email address
  • the language you were reading the website in when you subscribed, so we can write to you in it
  • the date and time you confirmed your subscription, kept as proof of your consent

Subscription works by double opt-in: after you enter your address we send you a single email with a confirmation link, and you only receive the newsletter once you have clicked it. If you never confirm, the address is not added to our list. We record the confirmation so that we can demonstrate your consent if we are ever asked to.

The legal basis for this processing is your consent, Art. 6 Para. 1 lit. a) GDPR. You may withdraw your consent at any time with effect for the future — every newsletter carries an unsubscribe link, and you can also write to us using the details in the “Information about us as controllers of your data” section above. Withdrawing does not affect the lawfulness of the processing carried out until then.

We keep your address until you unsubscribe, and delete it promptly afterwards; only the record of your consent and its withdrawal is kept for as long as we may need it to demonstrate that the mailings were lawful.

The processing takes place in the European Union.

We have concluded a data processing agreement with the provider in accordance with Art. 28 GDPR.

Web Analytics

If you allow it, we measure how this website is used so we can see which pages are helpful and notice when something is broken. This measurement is carried out for us by Vercel Web Analytics.

The measurement records:

  • the pages you open on this website and the order you open them in
  • the website that referred you here, if any
  • the campaign parameters in the link you followed (for example whether you came from a link we posted on a social network), if the link carried any
  • your approximate location at country level, your device type, operating system and browser

No cookies are set. Visitors are counted using a hash that is derived from your request and replaced every day. We therefore cannot recognise you across different days.

The measurement works by running a script in your browser that sends information about your visit from your device, so it only starts once you agree to it in the banner shown on your first visit. The legal basis is your consent under section 165 Para. 3 TKG 2021 and Art. 6 Para. 1 lit. a) GDPR. If you decline, or leave without choosing, nothing is measured.

You can withdraw your consent at any time with effect for the future, as easily as you gave it: open the Analytics settings and choose “Decline”. From then on no measurement data is sent from your browser. The lawfulness of the measurement carried out until then is unaffected (Art. 7 Para. 3 GDPR). Because we cannot recognise you, your choice applies to the browser in which you make it. It is kept in that browser’s local storage under the name analytics-consent, only so that we can honour it without asking on every page. It is never sent to us and stays until you clear your browser data.

The hash is discarded when it is replaced, so after 24 hours at the latest the data can no longer be related to you; only aggregated statistics that permit no conclusions about individual visitors are kept beyond that point.

The processing might take place in the United States.

Where this involves a transfer outside the European Economic Area, it is safeguarded by the EU Commission Standard Contractual Clauses and the provider’s certification under the EU–US Data Privacy Framework.

We have concluded a data processing agreement with the provider in accordance with Art. 28 GDPR.

Cookies

Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device’s internal memory.

The app stores the following on your device, so that it can do something you have asked it to do:

  • triponaut.locale — holds the language you picked in the language switcher, so that we stop sending you to the version your browser asks for. It expires one year after your last visit.
  • triponaut-landing-theme — holds whether you chose the light or the dark appearance, so the page opens the way you left it. It is stored in your browser’s local storage rather than as a cookie, and is never sent to us. It stays until you clear your browser data. Each of these is set only once you have made the choice it records, is read by us alone, and holds nothing that identifies you. Because it is strictly necessary to provide what you explicitly asked for, it requires no consent (section 165 Para. 3 TKG 2021, Art. 5 Para. 3 ePrivacy Directive). You can delete it in your browser settings at any time; the app will simply stop remembering that choice.

Apart from these, this Service does not use these “cookies” explicitly. However, the app may use third party code and libraries that use “cookies” to collect information and improve their services. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your device. If you choose to refuse these cookies, you may not be able to use some portions of this Service for technical reasons.

This app may contain links to other services. If you click on a third-party link, you will be directed to that resource. Note that these external resources are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of them. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Feedback

You can send us feedback from within the app: from its settings, or after the app asks how it is working for you.

When you send feedback, we receive your message, the topic you picked, whether you sent it from the settings or after answering that question and what you answered, the time it was sent and, to help us find the cause of a problem, the app version, the platform the app runs on, your device and operating system as reported by the app’s built-in browser (the user agent), and the language the app is set to. It is stored in our database at Cloudflare (see “Service Providers”) and is not linked to any account. To limit how many reports one IP address can send, we keep a hash of your IP address for a limited time.

If it cannot be sent, or you choose to send it by email instead, the app opens your email app with your message and the same details filled in. We receive that email together with your email address.

We use feedback to fix problems and to improve the app, and we may answer feedback that reaches us by email. The legal basis is our legitimate interest in doing so, Art. 6 Para. 1 lit. f) GDPR.

4) Age Restriction

The use of our app is not permitted for persons under the age of 16. If you are under 16 years of age, please do not use our app or send us any personal data.

5) Changes to This Privacy Policy

We reserve the right to update or change our privacy policy at any time and you should check this privacy policy periodically. Your continued use of the app after we post any modifications to the privacy policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified privacy policy.

Parts of this privacy policy page were created at privacypolicytemplate.net and modified/generated by App Privacy Policy Generator and combined with Model Data Protection Statement for Anwaltskanzlei Weiß & Partner

This privacy policy was last updated on: 2026-10-20T19:28:17.732Z.