Last updated 7 October 2026
Privacy
Triivl is built so that your trips stay yours. This page says what is kept where, what our server handles when you use a feature that needs it, for how long, and how you have it deleted.
In short
- Your trips, bookings, documents and notes live on your devices and in your own iCloud. We cannot read them.
- Our server only gets what a feature needs to work: signing in, friends, share links, live travel data, notifications, e-mail import and whether Triivl Pro is paid for.
- No advertising, no tracking across apps or sites, and nothing is sold or handed to data brokers. The app contains no analytics or advertising code from anyone else.
- You can delete your Triivl account in the app at any time, and it is gone from our server at once.
Who is responsible
Triivl is made by Oclin Home AS, a Norwegian company (organisation number 930 930 423). Oclin Home AS is the data controller for the personal data described here. Write to chb@oclin.no about anything on this page.
What stays with you
- Your trips. Trips, flights, stays, bookings, documents, receipts, packing lists and notes are stored on your device and kept in step between your devices through your private iCloud database. Apple runs iCloud for you under its own terms; Oclin Home AS has no access to it.
- Scans and documents. Tickets you scan with the camera and files you import are read on your device and go nowhere else.
- Your location. If you allow it, your location is used on your device to show ideas nearby and to estimate walking and driving times with Apple Maps. It is not sent to our server.
What our server handles
The features below need a server. Each of them comes into play only when you use it, and each can be left alone.
Your account
You sign in with Apple. We receive Apple's identifier for your account, the e-mail address Apple passes on (your own, or a private relay address if you chose to hide it) and the name you let Apple share, which is the name your friends in Triivl see. We keep sign-in sessions so that you stay signed in; an unused session ends after 30 days.
Notifications
To send you notifications we keep each device's notification address from Apple, whether it is an iPhone, iPad or Mac, the app version, and which kinds of notifications you have turned on. The list under Recent activity in the app is kept for 90 days.
Friends
We keep who you are friends with in Triivl, the invitations you send, and the settings you have for each friend. An invitation that is not used expires after seven days.
Seeing when friends are in the same place
This is off until you turn on Share planned presence with friends. When it is on, the app sends the cities and dates of the trips you include, and the flights on them (airline, flight number, date, from and to), so that you and a friend can be told when you will be in the same city or on the same flight. Only friends who have also turned it on are matched. Work trips are left out unless both of you include them. Booking references, addresses and everything else about the trip stay with you. Days are removed from our server once they are over.
Share links
When you share a trip, the app publishes a copy of it made for sharing. It leaves out booking references, ticket and seat numbers, exact hotel addresses, coordinates, prices and contact details. Anyone who has the link can open it until it expires or you withdraw it, and the page asks search engines not to list it. We count how many times a link is opened so that you can see it.
Live travel data and timetables
With Triivl Pro the app shows gates, delays, departures and weather. For that it tells our server which flights (number and date), stops and departures to look up, and roughly where on your trip to get weather for (a point rounded to about a kilometre, taken from the trip and not from where you are). We ask Avinor, Entur, the Norwegian Meteorological Institute and FlightAware. They receive the flight, stop or place, and never who is asking. If you are signed in and have notifications on, we keep which of your devices follows which flight or departure until it is over, so that we can tell you when something changes.
E-mail import
You can forward booking e-mails to Triivl. We keep your personal import address and the sender addresses you have verified. A forwarded e-mail is read by programs on our server; if they cannot make sense of it, its text is read by a language model that runs on our own server. It is never sent to an outside AI service. The e-mail itself is deleted within 24 hours. What was read from it is offered to you in the app as a suggestion, which is deleted when you accept or dismiss it and after 14 days at the latest. Nothing is added to a trip unless you accept it, and then it is saved in your iCloud.
Triivl Pro
Purchases are made through Apple. We never see your card or payment details. To know whether Pro is active we keep Apple's transaction identifiers, which subscription it is, when it runs out and whether it renews.
Keeping the service safe
We keep a record of actions such as signing in or creating a share link, with identifiers and no content. Our servers also keep ordinary access logs (IP address, time and the address requested) for a short time to find faults and stop abuse. Tokens, e-mail addresses, postal addresses and booking references are kept out of our application logs.
These websites
The front page of triivl.app and the shared trips on share.triivl.app count visits with Plausible, which we run ourselves. It sets no cookies and builds no profile of you. The secret part of a share link is never sent to it. This page and the terms count nothing.
Who else is involved
- Apple provides iCloud, Sign in with Apple, notifications, App Store purchases and Apple Maps, under Apple's own privacy policy.
- Exoscale (Akenes SA, Switzerland) hosts our server in Europe.
- Avinor, Entur, the Norwegian Meteorological Institute and FlightAware answer our server's questions about flights, departures and weather. FlightAware is in the United States. None of them receive anything about you.
We use no advertising networks and no data brokers, and we do not sell personal data.
Why we are allowed to
Under the EU and Norwegian data protection rules (GDPR) we handle your account and the features you use because that is needed to provide the service you asked for. Sharing planned presence with friends and notifications rest on your consent, which you withdraw by turning them off. Records and logs for security, and the cookie-free visitor counts, rest on our legitimate interest in running a safe service and knowing whether it is used.
How long things are kept
| What | Kept |
|---|---|
| Account, friends, settings, devices | Until you delete your account or remove them |
| Sign-in sessions | 30 days after last use |
| Planned presence | Until the day is over, or until you turn it off |
| Share links | Until they expire or you withdraw them; the shared copy is then removed |
| Flights and departures followed | Until they are over |
| Forwarded e-mails | 24 hours at most |
| Import suggestions | Until you accept or dismiss them, 14 days at most |
| Record that an import took place | 90 days |
| Recent activity | 90 days |
| Unused invitations | Expire after 7 days, removed 30 days later |
| Subscription status | Until about a year after the subscription has ended, or until you delete your account |
| Record of actions, without content | Kept, and no longer tied to you once you delete your account |
Deleting and your rights
In the app, Settings has Delete server account. It removes your account, devices, friends, presence, share links, imports and subscription link from our server straight away. Your trips are untouched, since they are in your iCloud; you delete those in the app. Export all trip data in Settings gives you a copy of everything the app holds.
You have the right to know what we hold about you, to have it corrected or deleted, to have its use restricted, to object, and to take it with you. Write to chb@oclin.no and we will answer within 30 days. If you are not satisfied you can complain to the Norwegian Data Protection Authority (Datatilsynet) or to the authority where you live.
Children
Triivl is not meant for children under 13, and we do not knowingly keep data about them.
Changes
When this page changes, the date at the top changes with it. If a change matters for how your data is used, we say so in the app before it takes effect.