Your passport expires 3 months after your trip. The airline needs 6. Nobody told you.

Effective date: 6 June 2026 | Data Controller: TripVault (Vault Club), Finland | Contact: privacy@tripvault.app

1. Who We Are

TripVault is a travel budget intelligence platform operated by Vault Club, based in Finland. As a Finnish-based service operating within the EU, we are subject to GDPR. This policy explains what personal data we collect, why we collect it, and what rights you have.

2. What Data We Collect

Account data: email address, display name, authentication method, account creation date. Trip & planning data: destinations, dates, traveller composition, budget entries, itinerary notes, checklist status, packing lists. Documents (Pro tier+): files you upload to Document Vault including passports, insurance, confirmations, visas, medical documents. Payment data: processed by Stripe. We receive only payment confirmation status and tier purchased — never your card details. Technical data: IP address (used once on load to detect departure city, then discarded), browser type, usage patterns, error logs.

3. Why We Collect It — Lawful Basis

Account and trip data: contract performance — required to provide the service. Documents: contract performance — Document Vault is a feature you opted into. Payment data: legal obligation and contract performance. Technical data: legitimate interests to operate and secure the service. We do not use your data for advertising. We do not sell your data to any third party. Ever.

4. Who We Share Data With

Firebase (Google LLC) — authentication, database, document storage. GDPR compliant. Stripe Inc — payment processing. PCI-DSS certified and GDPR compliant. Anthropic PBC — estimation and itinerary generation. Trip data only (destination, dates, group size). No personal identifiers sent. ipapi.co — detects your city from IP on first load only. No persistent tracking. Vercel Inc — app hosting. GDPR compliant. We share data with no other parties.

5. How Long We Keep Your Data

Active account data: kept while your account is active. Trip data and documents: kept until you delete them or close your account. Payment records: 7 years (Finnish accounting law). Technical logs: maximum 90 days, then automatically deleted. Account deletion: all personal data permanently deleted within 30 days.

6. Your Rights Under GDPR

You have the right to: access your data, correct inaccurate data, delete your data, restrict processing, data portability, object to processing, and withdraw consent at any time. To exercise any right: email privacy@tripvault.app. We will respond within 30 days. You may also lodge a complaint with the Finnish Data Protection Ombudsman at tietosuoja.fi.

7. Data Security

All data in transit encrypted via HTTPS/TLS. Firebase Storage documents encrypted at rest. Firebase Security Rules ensure only you access your own data. Stripe handles all payment data — we never see your card details.

8. Cookies

We use only essential authentication cookies (Firebase Auth session tokens). No advertising cookies, tracking pixels, or analytics cookies.

9. Children

TripVault is for users aged 16 and over. Contact privacy@tripvault.app if you believe a child has created an account.

10. Contact

Privacy queries: privacy@tripvault.app | General: hello@tripvault.app

Effective date: 6 June 2026 | Operated by: TripVault (Vault Club), Finland | Contact: legal@tripvault.app

1. About TripVault

TripVault is a travel budget intelligence platform. By creating an account or using TripVault, you agree to these Terms. If you do not agree, do not use TripVault.

2. Eligibility

You must be at least 16 years old to use TripVault.

3. Your Account

You are responsible for keeping your credentials secure and for all activity under your account. Notify us at legal@tripvault.app immediately if you suspect unauthorised access.

4. Subscription Tiers & Payments

Free: manual budget planner, basic features, no document storage. Pro (€39): cost estimation, full trap database, crisis checklist, Document Vault storage. Pro+ (€59): everything in Pro plus document reminders, real-time alerts, multi-device sync. VIP (€79): everything in Pro+ plus Mission Intel advisor, passport expiry detection, group intelligence. Payments processed by Stripe. Current pricing is one-time payment per tier. Prices in Euros include applicable VAT under Finnish and EU law. Refunds: we generally do not offer refunds due to immediate digital access on purchase. If a technical fault prevents access to paid features and we cannot resolve it within 7 days, you are entitled to a full refund. Contact legal@tripvault.app within 14 days of purchase. Finnish and EU consumer law rights are not affected.

5. Acceptable Use

You agree not to: use TripVault for any unlawful purpose, upload documents that do not belong to you or your trip party, attempt to access other users' data, reverse engineer or redistribute any part of TripVault, use automated tools to scrape or stress-test the platform, upload malicious files or harmful content, or use TripVault to harass or defraud others. Unauthorised access to TripVault systems is prohibited and constitutes a criminal offence under Chapter 38, Section 8 of the Finnish Criminal Code. We reserve the right to pursue both criminal complaints and civil damages against any party that unlawfully accesses, disrupts, or misuses TripVault systems or user data. We reserve the right to suspend or terminate accounts that violate these terms without refund.

6. Estimation & Intelligence Content

TripVault generates cost estimates, itineraries, packing lists, and travel intelligence. These are guidance only — not guarantees. Always verify bookings, opening hours, and passport expiry dates independently. TripVault accepts no liability for financial loss from reliance on generated content.

7. Document Vault

Upload documents at your own risk. Maintain independent copies of all important documents. Our liability in the event of data loss is limited to a refund of your subscription fee. Only upload documents you have the right to store.

8. Intellectual Property

TripVault and all original content are our intellectual property. Your trip data and documents remain yours. You grant us a limited licence to process and store your data solely to provide the service.

9. Limitation of Liability

TripVault is provided as-is. We are not liable for indirect or consequential damages. Our total liability is limited to the amount you paid for your current tier. Nothing limits liability for death, personal injury, fraud, or liability that cannot be excluded under Finnish or EU law.

10. Governing Law

These terms are governed by Finnish law. Disputes go to the Helsinki District Court as first instance. EU consumers may also use the EU Online Dispute Resolution platform at ec.europa.eu/consumers/odr.

11. Contact

Legal: legal@tripvault.app | General: hello@tripvault.app | TripVault / Vault Club, Finland