Last updated 14 October 2026
Privacy
Triivl is built so that your trips stay yours. This page says what is kept where, what our server handles when you use a feature that needs it, for how long, and how you have it deleted.
In short
- Your trips, bookings, documents and notes live on your devices and in your own iCloud. We cannot read them.
- Our server only gets what a feature needs to work: signing in, friends, share links, live travel data, notifications, e-mail import and whether Triivl Pro is paid for.
- No advertising, no tracking across apps or sites, and nothing is sold or handed to data brokers. The app contains no analytics or advertising code from anyone else.
- You can delete your Triivl account in the app at any time, and it is gone from our server at once.
Who is responsible
Triivl is made by Oclin Home AS, a Norwegian company (organisation number 930 930 423). Oclin Home AS is the data controller for the personal data described here. Write to chb@oclin.no about anything on this page.
What stays with you
- Your trips. Trips, flights, stays, bookings, documents, receipts, packing lists and notes are stored on your device and kept in step between your devices through your private iCloud database. Apple runs iCloud for you under its own terms; Oclin Home AS has no access to it.
- Scans and documents. Tickets you scan with the camera and files you import are read on your device and go nowhere else.
- Your location. If you allow it, your location is used on your device to show ideas nearby and to estimate walking and driving times with Apple Maps. It is not sent to our server.
- Your calendars. If you turn on calendar sync (Triivl Pro) and allow access, the app writes your trips as events in the calendar you choose, without booking codes or seats, and changes or removes only the events it added. It does this on your device; your calendars are not sent to our server.
What our server handles
The features below need a server. Each of them comes into play only when you use it, and each can be left alone.
Your account
You sign in with Apple. We receive Apple's identifier for your account, the e-mail address Apple passes on (your own, or a private relay address if you chose to hide it) and the name you let Apple share, which is the name your friends in Triivl see. We keep sign-in sessions so that you stay signed in; an unused session ends after 30 days.
API and AI connections (MCP)
API and MCP are both off until you enable them separately in the app's Settings. For each, you choose the trips it may access and whether it may read, create, change, delete or restore. Reading booking codes and references is a separate choice, off by default. Authorized create and change requests can enter a reference without receiving existing references back.
For this feature, the app sends our server a private, limited copy of the selected travel plans: titles, dates, time zones, travel types, cities and route endpoints. Booking codes and references are included only when reading them is allowed for at least one active connection to that trip, and are filtered separately for each connection. Documents, receipts, rental photos, private notes, seats, exact addresses, coordinates and packing lists are excluded. These copies are encrypted at rest with a server-held key; they are not public share links.
An API key or an AI chat you authorize can receive the permitted data. The AI service you choose handles what it receives under its own terms and privacy policy. Disconnecting it prevents further access; it cannot remove data the service already received. We do not provide an AI service with access to your iCloud credentials.
Changes wait for the app to save them in your own iCloud-backed trip. Pending changes expire after 24 hours. An execution that was interrupted may be reported as unconfirmed; check the current trip before retrying. Completed change records retain identifiers and status, without their input payload, for up to 90 days. Turning a connection off revokes its credentials and withdraws unsaved work. Removing a trip from both active connections deletes its server copy; removing booking-read permission from all active connections deletes its references. Deleting the server account removes all connection data.
Notifications
To send you notifications we keep each device's notification address from Apple, whether it is an iPhone, iPad or Mac, the app version, and which kinds of notifications you have turned on. The list under Recent activity in the app is kept for 90 days.
Friends
We keep who you are friends with in Triivl, the invitations you send, and the settings you have for each friend. An invitation that is not used expires after seven days.
If you choose a profile photo, the app makes it a small square picture without the photo's details (such as where and when it was taken) and sends it to us. Only you and your friends can see it. Removing it in the app, or deleting your account, deletes it from our server.
The new-trip form offers sharing with friends, enabled by default. You can switch this off before saving or later in Sharing. When a trip is visible to friends, we keep the copy you chose to show them and use it in the shared timeline. You can separately choose to include passenger seats and cabin, train, vehicle and room classes for the elements currently in that trip; this is off by default. Public share links still leave these details out. Everyone with access to a published trip can read its comment conversation, including friends added later. Like and comment notifications can include the actor’s display name and the already-shared element, trip title and day. Comment bodies and booking data are not included in push notifications. Booking codes, private notes and street addresses are not included in the friend copy.
Likes and comments on a published element are stored on our server and are visible to the trip owner and their current friends who can see the trip. You can remove your own likes and comments; the trip owner can also remove comments on their trip. Removing a friendship deletes the pair's interactions on each other's trips. These interactions are also removed when the published copy is deleted or expires, or when their author's account is deleted.
Seeing when friends are in the same place
This is off until you turn on Share planned presence with friends. When it is on, the app sends the cities and dates of the trips you include, and the flights on them (airline, flight number, date, from and to), so that you and a friend can be told when you will be in the same city or on the same flight. Only friends who have also turned it on are matched. Work trips count like other trips, unless you or your friend turns off Share work trips with friends (in Settings, or for one friend). Booking references, addresses and everything else about the trip stay with you. Days are removed from our server once they are over.
Share links
When you share a trip, the app publishes a copy of it made for sharing. It leaves out booking references, ticket and seat numbers, exact hotel addresses, coordinates, prices and contact details. Anyone who has the link can open it until it expires or you withdraw it, and the page asks search engines not to list it. We count how many times a link is opened so that you can see it.
Live travel data and timetables
With Triivl Pro the app shows gates, delays, departures and weather. For that it tells our server which flights (number and date), stops and departures to look up, and roughly where on your trip to get weather for (a point rounded to about a kilometre, taken from the trip and not from where you are). We ask Avinor, Entur, the Norwegian Meteorological Institute and FlightAware. They receive the flight, stop or place, and never who is asking. If you are signed in and have notifications on, we keep which of your devices follows which flight or departure until it is over, so that we can tell you when something changes.
E-mail import
You can forward booking e-mails to Triivl. We keep your personal import address and the sender addresses you have verified. A forwarded e-mail is read by programs on our server; if they cannot make sense of it, its text is read by a language model that runs on our own server. It is never sent to an outside AI service. The e-mail itself is deleted within 24 hours. What was read from it is offered to you in the app as a suggestion, which is deleted when you accept or dismiss it and after 14 days at the latest. Nothing is added to a trip unless you accept it, and then it is saved in your iCloud.
Triivl Pro
Purchases are made through Apple. We never see your card or payment details. To know whether Pro is active we keep Apple's transaction identifiers, which subscription it is, when it runs out and whether it renews.
Keeping the service safe
We keep a record of actions such as signing in or creating a share link, with identifiers and no content. Our servers also keep ordinary access logs (IP address, time and the address requested) for a short time to find faults and stop abuse. Tokens, e-mail addresses, postal addresses and booking references are kept out of our application logs.
These websites
The front page of triivl.app and the shared trips on share.triivl.app count visits with Plausible, which we run ourselves. It sets no cookies and builds no profile of you. The secret part of a share link is never sent to it. This page and the terms count nothing.
Who else is involved
- Apple provides iCloud, Sign in with Apple, notifications, App Store purchases and Apple Maps, under Apple's own privacy policy.
- Exoscale (Akenes SA, Switzerland) hosts our server in Europe.
- Avinor, Entur, the Norwegian Meteorological Institute and FlightAware answer our server's questions about flights, departures and weather. FlightAware is in the United States. None of them receive anything about you.
We use no advertising networks and no data brokers, and we do not sell personal data.
Why we are allowed to
Under the EU and Norwegian data protection rules (GDPR) we handle your account and the features you use because that is needed to provide the service you asked for. Sharing planned presence with friends and notifications rest on your consent, which you withdraw by turning them off. Records and logs for security, and the cookie-free visitor counts, rest on our legitimate interest in running a safe service and knowing whether it is used.
How long things are kept
| What | Kept |
|---|---|
| Account, friends, settings, devices, profile photo | Until you delete your account or remove them |
| Sign-in sessions | 30 days after last use |
| Planned presence | Until the day is over, or until you turn it off |
| Share links | Until they expire or you withdraw them; the shared copy is then removed |
| Flights and departures followed | Until they are over |
| Forwarded e-mails | 24 hours at most |
| Import suggestions | Until you accept or dismiss them, 14 days at most |
| Record that an import took place | 90 days |
| Recent activity | 90 days |
| Unused invitations | Expire after 7 days, removed 30 days later |
| Subscription status | Until about a year after the subscription has ended, or until you delete your account |
| Record of actions, without content | Kept, and no longer tied to you once you delete your account |
Deleting and your rights
In the app, Settings has Delete server account. It removes your account, profile photo, devices, friends, presence, share links, imports and subscription link from our server straight away. Your trips are untouched, since they are in your iCloud; you delete those in the app. Export all trip data in Settings gives you a copy of everything the app holds.
You have the right to know what we hold about you, to have it corrected or deleted, to have its use restricted, to object, and to take it with you. Write to chb@oclin.no and we will answer within 30 days. If you are not satisfied you can complain to the Norwegian Data Protection Authority (Datatilsynet) or to the authority where you live.
Children
Triivl is not meant for children under 13, and we do not knowingly keep data about them.
Changes
When this page changes, the date at the top changes with it. If a change matters for how your data is used, we say so in the app before it takes effect.