Privacy Policy
Last updated 15 September 2026
Tripscape is a travel passport: you collect stamps at real places, keep trips, and share photos and reviews. This policy explains what information that involves, why we need it, who can see it, and how to delete it. The short version: we collect only what the app needs to work, we don’t sell your data, and we don’t show ads.
1. Who we are
Tripscape is operated by Sharif Khaleel, an individual based in the Maldives, who is responsible for your information under this policy (“we”, “us”). Contact: [email protected].
2. What we collect
When you sign in
You sign in with Apple or Google. We receive your name, email address, profile picture (if you have one) and an account ID. If you choose Apple’s “Hide My Email”, we only get a private relay address. You can also pick a username.
Your passport
- The stamps you collect and when, and which ones you favourite.
- Your trips: their names, dates and the places in them.
- Your settings, such as whether your passport is public, and your chosen theme.
What you post and do
- Photos and stories, with any caption. Stories stop showing after 24 hours.
- When you post a photo, where and when it was taken, read from the photo’s own information, so it can be matched to a stamp.
- Comments, likes and reviews (star rating and text).
- Who you follow and who follows you.
- Reports you send about posts, comments, reviews or profiles.
- How many times a photo has been viewed. We keep the total, not who viewed it.
When you delete your account
If you tell us why you’re leaving, we keep that answer, with a few totals such as how many stamps you had. It isn’t linked to your name, email or account.
On your device
The app keeps a copy of your passport and a few preferences on your phone, such as which stories you’ve already seen, so it opens quickly and works offline. This stays on your device and is removed when you delete your account or the app.
The website
tripscape.app uses no cookies, analytics or trackers. Like any website, our hosting provider (Google Firebase) processes standard technical data such as your IP address to deliver the page.
3. Your location
Stamps unlock when you’re at a place, so the app uses your device’s precise location while you’re using it, after you give permission.
- Your location is used on your device to measure how far you are from stamps. We don’t send your live location to our servers or keep a history of where you’ve been.
- Tripscape doesn’t track you in the background.
- What we do store is the result: which stamps you collected, and when.
- If you post a photo, the place it was taken is saved with that post, as described above.
- You can turn location off at any time in your phone’s settings. You won’t be able to collect stamps by visiting, but the rest of the app still works.
4. Camera and photos
- Camera: only used to scan Tripscape codes. Nothing is recorded or saved.
- Photo library: we only read the photos you pick, for example to check where a photo was taken as proof of a visit. We save to your library only when you ask, such as saving your passport card or a stamp code.
5. What other people can see
| Information | Who can see it |
|---|---|
| Name, username, profile picture, follower counts | Everyone signed in to Tripscape, so friends can find and follow you |
| Your stamps and trips | Only you, unless you make your passport public |
| Photos, stories and their captions, including where a photo was taken | Everyone signed in to Tripscape, even if your passport is private. Anyone with an image’s web address can open the image itself; the addresses are random and only shown inside the app |
| Reviews and comments | Everyone signed in to Tripscape, with your name and picture |
| Your email address | No one else. It’s never shown in the app |
| Reports you send | Only us. The person you report isn’t told who reported them |
Stamp codes printed by businesses open a public web page about that stamp. It doesn’t show any traveller’s information.
6. How we use it
- To run Tripscape: keep your passport in sync, show your posts, reviews and follows, and let you find stamps near you. This is needed to provide the service you asked for.
- To keep it fair and safe: check that reviews come from real visits, act on reports, and stop spam, cheating and abuse. This is our legitimate interest, and yours.
- To talk to you about your account, important changes, or when you contact us.
- To meet legal obligations when the law requires it.
Where we rely on your permission, such as for location, camera and photos, you can withdraw it at any time in your phone’s settings.
7. Services we rely on
We use a small number of companies to run Tripscape. They only process your information to provide their service to us:
- Google Firebase (Google LLC): sign-in, the database and website hosting.
- Cloudflare (Cloudflare, Inc.): receives the photos and stories you post, checks you’re signed in, and stores them (Cloudflare R2, in its Asia-Pacific region) and delivers them to other travellers. It receives your sign-in token, which includes your account ID, name and email.
- Apple and Google: Sign in with Apple and Google Sign-In.
- Apple Maps (iPhone) and Google Maps (Android): drawing maps. Your phone requests map images for the area on screen from them.
- OpenStreetMap services: when you plan a trip, the places you search for and the stops on your route are sent to find places and draw the route between them. Your account details aren’t sent.
If we add paid features, purchases will be handled by the App Store or Google Play, and we may use a subscription service to confirm what you’ve bought. We’ll update this policy before that happens.
We may share information if the law requires it, to protect people’s safety, or as part of a sale or transfer of Tripscape, in which case this policy continues to protect it.
8. What we don’t do
- We don’t sell or rent your personal information.
- We don’t show ads, and we don’t share your data with advertisers or data brokers.
- We don’t track you across other companies’ apps or websites.
- We don’t use analytics or tracking tools in the app.
9. How long we keep it
We keep your information for as long as you have an account. You can delete individual posts, comments and reviews at any time. Stories stop showing after 24 hours. Reports are kept for as long as we need them to deal with abuse. When you delete your account, your information is removed as described below, although copies can remain in routine backups for a short time before they’re overwritten.
10. Deleting your account
You can delete your account in the app at any time: Passport → Settings → Delete account. This permanently removes:
- your passport, stamps, trips and settings;
- your photos and stories: the image files, and the likes and comments on them;
- the likes, comments and reviews you left, and follows in both directions;
- your username and profile;
- your sign-in account. If you used Sign in with Apple, we also end Tripscape’s access to your Apple ID.
If you can’t get into the app, email [email protected] from the address on your account and we’ll delete it for you.
11. Your rights
Depending on where you live, you may have the right to:
- get a copy of your information;
- correct information that’s wrong;
- delete your information;
- object to or limit how we use it;
- take your information to another service;
- complain to your local data protection authority.
You can change most things yourself in the app. For anything else, email [email protected]. We’ll reply within 30 days and may need to confirm it’s your account first. We never charge for this, and we won’t treat you differently for using these rights.
12. Children
Tripscape is for people aged 13 and over. We don’t knowingly collect information from children under 13. If you believe a child under 13 has an account, email us and we’ll delete it.
13. Where data is stored
Our service providers store and process data on servers that may be outside your country, including in the United States and the Asia-Pacific region. We rely on these providers’ safeguards, such as the standard contractual clauses Google offers, to protect your information when it moves between countries.
14. Security
Data is encrypted in transit, stored with Google Firebase and Cloudflare, and protected by access rules so people can only reach what they’re allowed to. No system is perfectly secure, so please keep your Apple or Google account safe. If a breach affects your information, we’ll tell you as the law requires.
15. Changes to this policy
We’ll update this policy when Tripscape changes, and change the date at the top. If a change is important, we’ll tell you in the app or by email before it takes effect.
16. Contact
Questions or requests about your privacy? Email [email protected].