Triviola — Privacy Policy

Triviola ("the app") helps travelers find travel companions. This policy explains what data we collect, why, and your choices.

Data we collect

• Account: email address, username, password (stored as a salted hash). Email is verified via a one-time code.
• Profile: name, birth date, gender, bio, city/country, travel preferences, photos you upload, optional social handles, optional visited-countries list, optional travel status.
• Location: approximate and (with your permission) precise GPS location, used to show nearby travelers, the live map, and meetups. You can decline the permission; related features degrade gracefully.
• Messages: chats are end-to-end encrypted — message content is encrypted on your device and we cannot read it. We store only encrypted payloads and metadata (sender, room, timestamp) needed for delivery.
• Face verification (optional): if you choose to verify, your selfie is compared to your profile photo by our server and is not stored; only the pass/fail result is kept.
• Usage & device: push notification token (Firebase), basic logs for security and abuse prevention (e.g. rate limiting by IP).

Advertising & purchases

• The app shows optional rewarded ads via Google AdMob. AdMob may process device identifiers for ad delivery and fraud prevention per Google's Privacy Policy.
• Subscriptions are processed by Google Play Billing; we never see your payment details, only a purchase token used to verify your subscription.

Service providers

We use: Google Firebase (push notifications), Google AdMob (rewarded ads), Google Play Billing (subscriptions), and Cloudinary (image hosting for photos you upload). Data is processed only to provide the features above; we do not sell personal data.

What other users see

Your profile (name, photos, bio, preferences, badges, approximate distance/city), your public trips and public meetups, and content you post are visible to other users. Meetups can be limited to your matches with the visibility toggle.

Data retention & deletion

You can delete your account in Settings → Delete account, which permanently removes your profile, photos, matches, messages, reviews, and trips. Backups expire within 14 days. You may also email us for deletion requests.

Security

All traffic uses HTTPS/TLS. Chats are end-to-end encrypted. Passwords are hashed with BCrypt. Access to production systems is restricted.

Children

Triviola is for users 18 years or older. We do not knowingly collect data from minors.

Changes

We may update this policy; material changes will be announced in the app. Continued use after changes constitutes acceptance.

Questions or requests: triviola.app@gmail.com