Privacy Policy

Last updated: April 6, 2026

Tragitto ("we", "our", "the app") is operated by Flatmap. This privacy policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

When you use Tragitto, we collect:

• Account information — your email address and name, used for authentication and displaying your identity to trip members.
• Trip data — trip titles, dates, timeline items, chat messages, and preferences you enter. This data is stored to provide the core trip planning functionality.
• Forwarded emails — booking confirmation emails you forward to your trip address. We extract booking details (dates, locations, references) and discard the raw email after processing.
• Device data — a local SQLite database on your device stores trip data for offline access. This data stays on your device.

2. How We Use Your Data

• Provide the service — store and sync trips, timeline items, and messages across your devices and with trip members.
• AI features — your trip data (titles, dates, preferences, timeline) is sent to Anthropic's Claude API to power the AI concierge and day planner. We do not send your email address or personal identity to the AI.
• Email parsing — forwarded booking emails are processed by our AI to extract structured booking details. Raw email content is stored temporarily for debugging and deleted after processing.

3. Data Sharing

We do not sell your data. We share data only with:

• Trip members — other users you invite to your trip can see trip data, timeline items, and chat messages.
• Anthropic (Claude API) — trip context is sent for AI features. See Anthropic's privacy policy.
• Google Cloud Platform — our infrastructure provider. Data is stored in the US region.
• Mailgun — for sending OTP login codes via email.

4. Data Retention

Your data is retained as long as your account is active. If you delete a trip, all associated timeline items, messages, and preferences are permanently deleted. You can request full account deletion by contacting us.

5. Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), private database access (no public IP), JWT-based authentication, and secrets stored in Google Cloud Secret Manager.

6. Your Rights

You can:

• Access and export your trip data at any time through the app.
• Delete individual trips or your entire account.
• Request a copy of your data by contacting us.

7. Children

Tragitto is not intended for children under 13. We do not knowingly collect data from children under 13.

8. Changes

We may update this policy. Significant changes will be communicated through the app or email.

9. Contact

Questions about this policy? Contact us at gabriel@flatmap.com.br.