Privacy policy
Last updated: 13 October 2026
Who we are
Tripzle is a travel comparison service based in Saudi Arabia.
We search travel booking sites and show you what each one charges, so you can see the real price before you book. We do not sell flights, hotels, car rentals or eSIM plans. When you choose an option, we open the provider's own site so you can complete the booking with them. Your booking, your payment and your travel documents are theirs, under their terms and their privacy policy, not ours.
What we collect
When you create an account
Your email address, and your name if you give us one. If you sign in with Google or Apple, we receive your email address and name from them.
If you use Sign in with Apple and choose to hide your email, we only ever receive Apple's private relay address. We never see your real one.
When you search
Your destination, dates, number of travellers and similar details. We need these to get prices back from the booking sites.
Searches are stored on our servers, with your account id if you are signed in. After 400 days the account id is removed from flight, hotel, activity and eSIM searches, and car searches, which never carry one, are deleted.
Your last ten searches are also kept on your own device for 24 hours so you can repeat them quickly. You can clear these at any time with "Delete search history" in the app.
When you open a booking site
When you tap through to a provider, we record which provider, which link, the price shown, the route or hotel, and the dates, together with your IP address and browser identifier. This is how we know a comparison led somewhere and how we reconcile with our partners.
Usage analytics, which you control
The app has a Usage analytics switch in the Account tab.
For people in the EU, the EEA, the UK and Switzerland, and anywhere we cannot determine the region, it is off unless you turn it on. Everywhere else it starts on and you can turn it off.
When it is on, the app sends us an app launch event containing a randomly generated device identifier, your language and the word "mobile", and records the pages you view against your account.
When it is off, the app sends us none of this.
We do not use Firebase Analytics, Google Analytics or any other third-party analytics tool inside the app. These events go only to our own servers. Our website is separate and does use Google Analytics, Umami and Vercel Analytics.
Location, only when you ask for it
The app asks for location permission only at the moment you tap Use my current location. It is "while using the app" access and never runs in the background.
Your coordinates never leave your phone. The app works out the nearest airport on the device itself and sends only the resulting airport code, as part of a search. If you have granted permission, it does the same check when you open the app, to preselect your airport.
Decline it and nothing breaks. You type a place instead and we use your country's main airport.
Diagnostics
Device model, operating system version, app version, language and region. Crash reporting is not currently active in the released app.
Notifications
If you turn on notifications, we store a push token so we can send the flight alerts you asked for.
Before you sign in
The first time you search without an account, our sign-in provider creates an anonymous record so the app can talk to our servers. It holds no personal details about you.
What we never collect
Payment card details, bank details, passport or national ID numbers. Those are entered on the provider's site, never in Tripzle.
Who receives your information
Travel partners. Your search details, so they can return a price. Not your name and not your email.
Booking sites you tap through to. Your search details and our partner code, so they can show you the right page and credit us. Not your account details. You are in their website at that point, under their privacy policy.
Supabase, which hosts our database and handles sign-in.
Apple and Google, when you choose to sign in with them.
Apple and Google push services, via Expo, when you enable notifications. They receive your push token, platform, language and the content of the alert.
Google Maps, which renders the map on hotel pages. Google collects information through its own component under its own privacy policy, which we do not control.
Image providers. Logos and photos load directly from Clearbit, Google, pics.avs.io, Unsplash and Wikimedia. Because the images load straight from them, they can see your device's IP address.
We do not sell your personal information and we do not share it for advertising.
Sign in with Apple
Apple tells us your email address, or a private relay address if you chose to hide it, and your name if you shared it. Nothing else.
When you delete your Tripzle account we ask Apple to revoke our access to your Apple account as part of that deletion.
Deleting your account
In the app: Account → My Account → Account management → Delete Account.
What is deleted: your account, your saved items and wishlists, your reservation records, your flight alerts, your push tokens and your sign-in tokens. Your flight alert subscriptions are cancelled with the service that runs them. If you signed in with Apple, our access to your Apple account is revoked.
What is unlinked from you but kept: your searches and the pages you viewed stay in our records with your account id removed, so they can no longer be traced to you.
What we keep:
- Records of the booking sites you tapped through to. Your account id, IP address and browser identifier are removed from them, and the record is kept because our partners pay us based on those referrals and the records have to be reconcilable.
- A record that an account with your identifier existed and was deleted, so a sign-in from before the deletion cannot bring the account back. You can still create a new account with the same email.
- Consent records, which keep your account id but hold no IP address or browser identifier. These are kept as proof of consent under Saudi Arabia's Personal Data Protection Law.
Backups. Our database is backed up daily and those backups are kept for seven days. Your deleted data remains inside them until they expire, so it is fully gone around seven to eight days after deletion.
Server logs. Our hosting provider keeps request logs that may contain your account id and IP address, for 7 days.
Deletion is permanent. We cannot restore an account once deleted.
If you cannot reach the app, email contact@tripzle.com from the address on your account.
Your choices
- Turn Usage analytics off in the Account tab
- Turn location off in your device settings
- Turn notifications off in your device settings
- Clear your on-device search history in the app
- Delete your account
Depending on where you live you may also have the right to ask for a copy of your data, to correct it, or to object to how we use it. Write to contact@tripzle.com.
Children
Tripzle is not directed at children under 13 and we do not knowingly collect their information. If you believe a child has given us information, write to contact@tripzle.com and we will remove it.
Changes
If we change this policy we update the date above. If a change materially affects how we handle your information, we will tell you in the app before it takes effect.