How tripPAX collects, uses, shares and protects your information.
This Privacy Policy explains how ME-Tech Solution Sdn. Bhd. ("tripPAX", "we", "us") collects, uses, shares and protects information when you use the tripPAX mobile application and related services (the "App"). By using the App, you agree to the collection and use of information in accordance with this policy.
ME-Tech Solution Sdn. Bhd. is a company incorporated in Malaysia with its registered address at C-1-2A, Block C, Jalan GC1, Glomac Cyberjaya, Cyber 12, Cyberjaya, 63200 Sepang, Selangor.
Account information: name, email address, password (encrypted), and profile photo. If you sign in with Google or Apple, we receive your name, email and account identifier from that provider via Firebase Authentication.
Location data: with your permission, we access your device's precise (GPS) location to support map pin and location-tagging features within your trip itineraries. You can disable location access at any time in your device settings.
Camera and photos: with your permission, we access your camera and photo library so you can upload a profile photo and trip photos ("Memories").
Trip and itinerary content: trips, accommodation, flights, buses, trains, car rentals, water transport, restaurants, activities, notes, travel tips, trip costs, and any documents or attachments (e.g. booking confirmations, tickets) you add to your itineraries.
Social and communication data: your friends/buddies list, trip invitations, in-app chat messages, comments and reactions on shared trips and Memories.
AI trip planning data: prompts and preferences you submit to generate an AI trip plan, and the resulting AI-generated itinerary.
Device and usage data: device push notification token (for notifications via Firebase Cloud Messaging), app version, and crash/diagnostic logs.
We use the information we collect to: create and manage your account; let you build, store and share trip itineraries; generate AI-assisted trip plans; enable friend/buddy connections and trip invitations; deliver in-app chat and push notifications; display map/location features; and maintain the security and reliability of the App.
tripPAX guarantees that your personal data will be held in strict confidentiality. Data transfer between your device and the tripPAX servers is secured using SSL/TLS encryption. While we take reasonable steps to protect your information, no method of transmission or storage is 100% secure.
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities as required by applicable law, without undue delay.
Your personal data may be transferred to and processed in countries outside Malaysia, including the United States, where some of our service providers (such as Google for Firebase services and Amazon Web Services for file storage) operate data centres. Where personal data is transferred outside Malaysia, we rely on your consent to that transfer and on the transfer being necessary for the performance of the services you have requested, in accordance with the Personal Data Protection Act 2010. We take reasonable steps to ensure that transferred data continues to receive protection consistent with this Policy.
We retain your information for as long as your account is active, or as needed to provide the App. Specifically: account and trip data are kept while your account is active and are deleted when your account is deleted; AI trip-planning prompts and their outputs are kept in our internal AI logs to operate and improve the feature; request and diagnostic logs are kept for security and reliability purposes. You may permanently delete your account and associated data at any time from within the App — deletion is confirmed by email before it is completed. Some information may be retained where required by law or for legitimate business purposes (e.g. fraud prevention).
Subject to applicable law, including Malaysia's Personal Data Protection Act 2010, you have the right to access, correct, or request deletion of your personal data, and to withdraw consent for location, camera or photo access at any time via your device settings. To exercise these rights, contact us using the details below.
We rely on you to keep your personal data accurate and up to date; you can review and update your profile information in the App at any time.
The App is not intended for children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.
We may update this Privacy Policy from time to time. We will notify you of material changes within the App or by other reasonable means. Continued use of the App after changes take effect constitutes acceptance of the revised policy.
If you have questions about this Privacy Policy, contact us at support@senangapps.com.