Privacy Policy

Information We Collect

Personal Information

• Email address, used for passwordless sign-in (a magic link or one-time code)
• Name and profile picture (if you choose to provide one or sign in with Google)
• Google account information if you sign in with Google (name, email, profile picture)

Trip Content

• Trips you create, including stops, day-by-day plans, and places you add to a map
• Photos you upload to a trip's journal or gallery
• Journal notes and other text you write about a trip
• Packing lists, saved places, likes, and crew invitations
• Search queries you enter when looking for a place, sent to our place-search providers (see Third-Party Services)

Technical Information

• Device information (platform, device ID) for push notifications
• App usage data and preferences
• Session tokens and authentication data
• Push notification tokens for mobile devices

How We Use Your Information

• Provide and maintain the trip-planning service
• Store and display your trips, itineraries, photos, and journal entries
• Power place search and map display for building your itinerary
• Send notifications about trip updates, crew invitations, and activity
• Facilitate crew invitations and shared/public trips
• Verify your identity and secure your account
• Improve our app functionality and user experience
• Comply with legal obligations

Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties, except in the following circumstances:

• Crew Members: Trip content is shared with other members of trips you join or are invited to
• Public Trips: If you publish a trip or share it publicly, its itinerary, places, and photos become visible to anyone with the link (or to other users via Discover, if you opt in)
• Service Providers: We share information with trusted service providers who help operate our app (database hosting, email delivery, maps and place search, push notifications)
• Legal Requirements: When required by law, regulation, or legal process
• Safety: To protect the rights, property, or safety of NeatTrip, our users, or others

Third-Party Services

We use the following third-party services to run NeatTrip:

• Google OAuth: Optional sign-in method, alongside passwordless email sign-in (governed by Google's Privacy Policy)
• Resend: Sends transactional email (magic links, sign-in codes, notifications)
• Supabase (PostgreSQL): Hosts our database, where trip, account, and photo-reference data is stored
• Mapbox: Provides the maps shown in the app
• Google Places & Photon (OpenStreetMap): Power place search; the text you search for is sent to these providers to return matching places
• Push Notification Services: For mobile app notifications
• Google Analytics 4, Meta Pixel & Plausible Analytics: Website usage analytics (see Cookies & Web Analytics below)

Cookies & Web Analytics

On the neattrip.de website we use three analytics tools:

• Google Analytics 4 and Meta (Facebook) Pixel - these set cookies and only load after you explicitly accept them via the cookie-consent banner. If you decline, neither loads and the app functions normally.
• Plausible Analytics - a privacy-friendly, cookieless analytics tool that runs without a consent banner because it doesn't use cookies or track individuals across sites.

• Analytics data is anonymized and used solely to understand site usage and improve the app experience
• You can withdraw consent at any time by clearing your browser's local storage, which will show the consent banner again
• Google Analytics is governed by Google's Privacy Policy, and Meta Pixel by Meta's Privacy Policy

NeatTrip iOS App

The NeatTrip iOS app is a wrapper around neattrip.de. Inside the app, no analytics or tracking scripts load at all - Google Analytics, Meta Pixel, and Plausible are all disabled, and no cookie-consent banner is shown, because there is nothing to consent to.

The app uses only strictly necessary cookies: the session and CSRF cookies needed to keep you signed in. No advertising, tracking, or usage-analytics data is collected in the app.

Data Security

We implement appropriate security measures to protect your personal information:

• Encryption of authentication credentials and sensitive data
• Secure data transmission (HTTPS)
• Regular security assessments
• Limited access to personal information on a need-to-know basis
• Secure database storage with access controls

Data Retention & Account Deletion

We retain your information for as long as your account is active or as needed to provide services. You can delete your account at any time from your Profile settings (Delete Account). This permanently removes your profile information, trip and crew memberships, and associated data, and we will complete the deletion within 30 days, except for information we are required to retain for legal purposes.

Your Rights

You have the right to:

• Access, update, or delete your personal information
• Request a copy of your data
• Opt out of certain communications
• Delete your account and associated data
• Withdraw consent for data processing where applicable

Children's Privacy

NeatTrip is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@neatsplit.com and we will delete such information promptly.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the app after any changes constitutes acceptance of the new Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

We will respond to your inquiries within 48 hours.

GDPR Compliance

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to be informed about data collection and use
• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision making and profiling

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights