This Privacy Policy explains how TPixel, Inc., doing business as HeyTripp ("HeyTripp," "we," "us"), collects, uses, shares, and protects personal information when you use the HeyTripp website, apps, AI travel assistant, and booking services (the "Service"). TPixel, Inc. is a Delaware corporation at 1808 Wedemeyer St, Suite 328, San Francisco, CA 94129.
This policy is part of our Terms of Service. It does not cover airlines, hotels, or other suppliers, or third-party services you connect to HeyTripp. They handle your information under their own privacy policies.
The short version:
We collect the information below from you, from your device, from people traveling with you, and from partners involved in your booking.
| Category | Examples | Where it comes from |
|---|---|---|
| Account | Name, email, phone, sign-in method | You |
| Chats with the AI assistant | Your messages, the assistant's responses, timestamps, files you upload | You; generated by the Service |
| Travel preferences | Preferred airlines, airports, seat, hotel style, budget, loyalty program numbers, and preferences the assistant learns from your chats | You; inferred from your use of the Service |
| Traveler details | Names, dates of birth, gender as shown on ID, contact details for you and your co-travelers, TSA Redress or Known Traveler numbers | You |
| Travel documents | Passport number, nationality, issuing country, and expiry, when an international flight requires them | You |
| Booking and transaction records | Itineraries, confirmation numbers, prices paid, refunds, approval records, change and cancellation history | You; suppliers; the Service |
| Payment information | Card type, last four digits, billing address, payment token. We never receive your full card number (Section 6.2). | You; our payment partners |
| Searches and usage | Searches, destinations viewed, features used, clicks, pages visited | Your use of the Service |
| Device and technical | IP address, device type, browser, operating system, approximate location from IP, crash logs | Your device |
| Connected services | Data and permissions you authorize when you connect an AI assistant or other service | The connected service |
| Support communications | Emails and messages with our team | You |
| Fraud and security signals | Login patterns, device fingerprints, payment risk scores | Our service providers; the Service |
If you sign in with Google, we receive your name, email address, and Google profile picture from your Google account, and use them to create and identify your account. If you sign in with Apple, we receive your email address, which may be an Apple private relay address, and your name the first time you sign in.
We do not ask for health information, but you may choose to share it, for example to request an accessible room. Section 6 explains how we handle it.
We use de-identified or aggregated information for analysis and do not attempt to re-identify it.
3.1 Text messages. If you give us your mobile number and agree to receive texts, we use it to send booking confirmations, trip updates, price-watch alerts, and replies when you message Tripp. These may arrive by SMS, by RCS (a branded “TRIPP” thread in your messaging app), or by WhatsApp, depending on your phone and your settings. A link we text you to one of your chats may sign you in to open that chat; it works once and for up to a day. We do not sell or share your mobile number, or your consent to receive texts, with any third party or affiliate for marketing or promotional purposes. The only companies that handle your number are the ones that deliver the messages (our messaging provider and, for RCS and WhatsApp, Google, Meta, and your mobile carrier), and only to deliver them. Reply STOP to any text to stop them.
4.1 AI providers. HeyTripp's assistant runs on large language models from a third-party AI provider, currently Anthropic (Claude). When you chat, your messages and the context needed to answer them, such as your trip details and saved preferences, are sent to that provider to generate responses. If we add or change providers, we will update this section.
4.2 No training by AI providers. Our contracts with AI providers prohibit them from using your conversations to train or improve their models. Providers may retain data for up to 30 days for abuse monitoring, or longer if a conversation is flagged for a policy violation, as their terms allow.
4.3 How HeyTripp uses chats. We do not use your conversations to train or fine-tune AI models. If that ever changes, we will update this policy with advance notice and apply the change only to conversations after it takes effect. We may review de-identified samples to measure and improve response accuracy, and we use conversations to fix errors you report.
4.4 Human review. Authorized HeyTripp staff may read a conversation when you contact support, when it relates to a booking problem or dispute, to investigate fraud or abuse, or to evaluate response quality. Access is limited to staff who need it.
4.5 What HeyTripp remembers. The assistant remembers travel preferences you state or that it learns from your chats, such as a preferred airline or a budget range, to improve future results. You can view, edit, or delete what it remembers in your account settings. Deleting a preference stops it from being used going forward.
4.6 Chat history. You can delete individual conversations. A deleted conversation disappears from your account right away and is removed from our active systems within 30 days. We keep booking and approval records even if you delete the conversation that created them.
We do not sell your personal information. We share it only as follows.
| Recipient | What we share | Why |
|---|---|---|
| Airlines and hotels you book | Traveler names, contact details, dates of birth, travel documents, loyalty numbers, special requests | To make and service your booking. Airlines pass required data to government agencies, such as TSA Secure Flight. |
| Booking and supply partners | The same booking details, routed through flight and hotel distribution partners, such as airline booking platforms, global distribution systems, and hotel wholesalers | To reach supplier inventory and confirm bookings |
| Payment partners | Payment details, billing address, transaction data | To process charges and refunds and prevent fraud |
| AI providers | Chat content and context needed for responses | To generate the assistant's responses (Section 4) |
| Service providers | Data needed for their task | Cloud hosting, customer support, email delivery, analytics, security, and fraud prevention, under contracts that limit their use of your data |
| Connected services you authorize | Only the data and actions you approve on the connection screen | To let the service act within the permissions you grant |
| Authorities and legal | Information required by law | To comply with law, respond to valid legal process, or protect the rights and safety of users and others |
| Business transfers | Information held by HeyTripp | In a merger, financing, acquisition, or sale of assets, including transfer to an affiliate such as a future HeyTripp operating entity. The recipient must honor this policy. |
Connected services and suppliers handle data under their own privacy policies once they receive it. You can revoke a connected service at any time in your account settings.
Shared trip links. You can share a trip by link. Anyone with the link can view the shared itinerary, including traveler names, dates, and destinations shown on it. Shared views never include payment details, travel documents, or account information. You can turn off a shared link at any time from the trip, and it stops working immediately.
6.1 Passports and travel documents. We collect passport details only when a booking requires them. We encrypt them, limit access to staff who need them to service bookings, and share them only with the airline and booking partners for that trip. We do not save them to your profile unless you choose to.
6.2 Payment cards. You enter card details into a secure field hosted by our payment processor. HeyTripp never receives, sees, or stores your full card number or security code; we keep only a token, card type, and last four digits. If you use a pay-at-property rate, you pay the hotel directly.
6.3 Sensitive information. Please do not share health details, government ID numbers, or full card numbers in chat unless your booking needs them. If you share sensitive information, such as a disability or medical need to request an accessible room or assistance, we use it only to fulfill that request, share it only with the relevant supplier, and never use it for advertising or profiling.
6.4 Co-travelers. When you add another traveler, you confirm you have their permission to share their information with us and suppliers for the trip. We use it only to book and service that trip.
6.5 Children. HeyTripp accounts are for adults 18 and over. We do not knowingly collect information from children except traveler details a parent or guardian provides to book travel for them. We use that information only for the booking. If you believe a child has created an account, contact us and we will delete it.
We use cookies, local storage, and similar technologies in two categories:
HeyTripp does not use advertising cookies, retargeting pixels, or third-party advertising SDKs, and does not share your information for targeted advertising. If that changes, we will update this policy first, ask for consent where required, and honor opt-outs, including Global Privacy Control signals.
We keep information only as long as needed for the purposes in this policy, including legal, tax, accounting, Seller of Travel, and dispute purposes.
We give these rights to every HeyTripp user in the United States, whether or not your state's law requires it:
How to make a request. Email [email protected] with the subject line "Privacy Request." We will verify your identity by confirming control of your account email. An authorized agent may make a request for you with your signed permission. We respond within 45 days and will not treat you differently for exercising your rights.
California residents. California law gives you the rights above, plus the right to know the categories of information we collect, their sources, our purposes, and the categories of recipients. Sections 2, 3, and 5 provide that information. We do not sell or share personal information as those terms are defined in California law.
10.1 Security. We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and at rest, role-based access controls, and logging of access to sensitive data. No system is perfectly secure, and we cannot guarantee absolute security.
10.2 Security incidents. If a breach affects your personal information, we will notify you and regulators as required by law.
10.3 Where we process data. HeyTripp is offered only to users in the United States, and we store your information in the United States. Our team and some service providers are located in other countries, including Malaysia, and may access your information from there under the same protections described in this policy.
10.4 Changes. We will post updates here and change the "Last updated" date. For material changes, we will notify you by email or in the app before they take effect and ask for your consent where required.
10.5 Contact. TPixel, Inc. d/b/a HeyTripp, 1808 Wedemeyer St, Suite 328, San Francisco, CA 94129. Email: [email protected].