Tragitto ("we", "our", "the app") is operated by Flatmap, a company based in Brazil ("Flatmap", the "data controller"). This Privacy Policy explains what data we collect, how we use it, the third parties we work with, and the rights you have under Brazil's General Data Protection Law (LGPD) and, where applicable, the EU/EEA General Data Protection Regulation (GDPR).
1. Data We Collect
When you use Tragitto, we collect:
Account information — your email address and name, used for authentication and to display your identity to trip members.
Trip data — trip titles, dates, timeline items, chat messages, and preferences you enter. This is stored to provide the core trip-planning functionality.
Forwarded emails — booking confirmation emails you forward to your trip address. We extract booking details (dates, locations, references) and discard the raw email after processing.
Purchase data — when you buy Premium for a trip, the purchase is processed by the Apple App Store or Google Play. We receive a confirmation that the purchase succeeded and which trip it applies to. We never receive or store your full payment-card details — those are handled entirely by the app stores.
Device data — a local database on your device stores trip data for offline access. This data stays on your device.
2. How We Use Your Data
Provide the service — store and sync trips, timeline items, and messages across your devices and with trip members.
AI features (Premium) — for trips with Premium, your trip data (titles, dates, preferences, timeline) is sent to Anthropic's Claude API to power the AI Concierge and day planner. We do not send your email address or personal identity to the AI.
Email parsing (Premium) — forwarded booking emails are processed by our AI to extract structured booking details. Raw email content is stored temporarily for debugging and deleted after processing.
Purchases — to unlock and maintain Premium access for the trips you have paid for, and to manage your per-trip AI allowance.
3. Legal Basis for Processing
Where the GDPR or LGPD applies, we process your data on these bases: performance of a contract (to provide the service you signed up for and the Premium features you purchase); your consent (for optional features such as live location sharing); and our legitimate interests (to keep the service secure and functioning). You may withdraw consent at any time where processing is based on consent.
4. Data Sharing
We do not sell your data. We share data only with:
Trip members — other users you invite to your trip can see trip data, timeline items, and chat messages.
Google Cloud Platform — our infrastructure provider. Data is stored in the United States region.
Mailgun — for sending login codes and notifications via email.
Apple / Google — for processing in-app purchases of Premium.
5. International Data Transfers
Tragitto is operated from Brazil, and our infrastructure and AI processing take place in the United States. If you use the app from the EU/EEA, Brazil, or elsewhere, your data may be transferred to and processed in these countries. We rely on appropriate safeguards (such as the service providers' standard contractual clauses and equivalent mechanisms) for these transfers.
6. Data Retention
Your data is retained as long as your account is active. If you delete a trip, all associated timeline items, messages, and preferences are permanently deleted. You can request full account deletion at any time by contacting us. Purchase records may be retained as required for tax and accounting purposes.
7. Security
We use industry-standard security measures including encrypted connections (HTTPS/TLS), private database access (no public IP), token-based authentication, and secrets stored in Google Cloud Secret Manager.
8. Your Rights
Subject to applicable law (LGPD / GDPR), you have the right to:
Access the personal data we hold about you and export your trip data through the app.
Correct inaccurate data.
Delete individual trips or your entire account.
Object to or restrict certain processing, and withdraw consent where processing relies on it.
Request data portability.
Lodge a complaint with your data protection authority — in Brazil, the ANPD; in the EU/EEA, your national supervisory authority.
Tragitto is intended for users aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe a minor has provided us with data, contact us and we will delete it.
10. Changes
We may update this policy. Significant changes will be communicated through the app or by email, and the "Last updated" date above will change.
11. Contact
Questions about this policy, or to exercise your rights? Contact our data controller, Flatmap, at gabriel@flatmap.com.br.