Privacy Policy
trvld ("the app") is a travel spot ranking app operated by Eeshan Kulkarni ("we"). This policy explains what data the app collects, why, and what control you have over it.
What we collect
- Account data. When you sign up we collect your phone number (used for SMS verification and sign-in) or your Apple ID identifier (if you use Sign in with Apple), plus the username and display name you choose. Your username and display name are visible to other users.
- Content you create. Places you log, how you rank them, notes, photos, and wishlist items. Rankings, notes, and photos are visible only to friends you have mutually accepted. Wishlist items are private to you.
- Contacts (optional). If you use contact sync to find friends, phone numbers from your address book are hashed (SHA-256) on your device and only the hashes are sent to our servers to check for matches. Raw contact names and numbers never leave your phone, and the hashes are not stored - they are used for the lookup and discarded.
- Location (optional). If you grant location access, your approximate location is used on-device to sort nearby place search results. It is never sent to or stored on our servers.
What we don't do
- No ads, no ad tracking, no sale of data.
- No third-party analytics SDKs.
- No reading of your contacts beyond the on-device hashing described above.
Where data lives
Data is stored with Supabase (Postgres and object storage) with row-level access controls: your rankings, notes, and photos are readable only by you and your accepted friends. SMS verification codes are delivered via our SMS provider (Twilio), which processes your phone number for that purpose. Place search is powered by Apple Maps and processed under Apple's privacy policy.
Blocking and reporting
You can block any user, which removes all visibility between the two accounts in both directions and severs any friendship. You can also report a user or a specific post; reports include the content reference and your account, are visible only to us, and are reviewed within 24 hours.
Data deletion
You can delete your account at any time in Profile → Settings → Delete account. This permanently removes your account, rankings, comparisons, notes, photos, wishlist, and friendships from our servers. There is no retention period; deletion is immediate.
Children
trvld is not directed at children under 13, and we do not knowingly collect data from them.
Changes
If this policy changes materially, we will note it in the app and update the date above.
Contact
Questions or requests: eesh.kulkar@gmail.com