Privacy Policy

• Account details: name, email address, phone number and password (stored only as a hash).
• Trip details: destination, dates, travellers, and any flight or accommodation details you choose to add.
• Traveller details: names, dates of birth, nationality and passport country. Passport numbers are optional.
• Uploaded documents you place in your vault.
• Payment records: what you were charged and by which processor. We never receive your card number.
• Technical data: IP address, browser and session details, used for security and audit records.

Passport numbers are optional everywhere in Triply. Where you do provide one, it is encrypted at rest using AES-256-GCM, shown back to you only partially masked, never written in full into a generated document, and never included in any AI request.

If you request an insurance quote and declare a pre-existing medical condition, the condition details go to the insurance provider's own screening system. Triply stores only whether a condition was declared and the provider's screening reference.

We do not store medical conditions, and we never send medical information to any AI system.

We use AI to suggest itineraries, packing lists and short trip introductions. The information sent for that purpose is limited to what the suggestion needs: destination, dates, trip length, purpose and traveller count.

We do not send passport numbers, contact details, payment information, uploaded documents or anything medical to an AI system.

• Our payment processor, to take payment.
• The insurance provider, where you request a quote or buy a policy — limited to what they need to price and issue it.
• Our email provider, to send you account and order emails.
• Our hosting and storage providers, who process data on our instructions.
• Law enforcement or regulators where we are legally required to.

We do not sell your personal data.

Account and trip data is kept while your account is open. Order, payment, insurance and audit records are kept for as long as we are required to keep them, which is longer than the account itself. Uploaded documents are deleted from storage when you delete them.

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Contact us through the contact page and we will handle it.

• Passwords are hashed, never stored in readable form.
• Sessions are stored as hashes, so a database copy cannot be replayed as a login.
• Documents and uploads are served only through short-lived signed links, and only to their owner.
• Emergency card links use a long random token, expire, and can be revoked.
• Administrative access is role-restricted and every action is written to an audit log.