TripFumi logoTripFumi
Get the app

TripFumi Privacy Policy

Last updated: October 27, 2026
Effective: October 26, 2026

Quick summary (not part of the policy)

TripFumi is an AI-assisted travel planner published by Zenfumi, Inc. We collect the information needed to provide travel planning, search, trip sharing, notifications, customer support, analytics, security, and service improvement. This can include account information, trip and itinerary content, forwarded travel emails, files, photos, traveler details you choose to save, search parameters, saved flight and lodging details, device data, and analytics events. We do not sell your personal information, and we do not use your User Content to train AI models, ours or anyone else's. When you book a flight or hotel in TripFumi, we send the traveler and contact details needed for the booking to Nuitée, our booking supplier, which makes the booking with the airline or hotel; you pay in a form provided by Nuitée's payment processor, and TripFumi never receives your full card number. For other bookings and reservations, we hand you off to the provider's own website or app, and the details you enter there are handled by that provider under its own privacy policy. On our websites, we and our advertising partners use cookies and similar technologies to measure our ads and, unless you opt out, to show TripFumi ads to people who have visited our sites; you can opt out at any time (see Sections 6 and 7).

1. Scope

This Privacy Policy explains how Zenfumi, Inc., a Delaware corporation doing business as TripFumi ("Zenfumi," "TripFumi," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you access or use the TripFumi mobile applications, websites at tripfumi.com and its subdomains, application programming interfaces, notifications, email-ingest features, travel search, booking, and booking hand-off features, and related services we provide (collectively, the "Services").

This Privacy Policy is incorporated into the TripFumi Terms of Service. Capitalized terms not defined here have the meanings given in the Terms.

This Privacy Policy does not apply to third-party websites, apps, airlines, hotels, payment processors, ride-share services, travel suppliers, app stores, or other services that we do not own or control, even if they are linked from or integrated with TripFumi. Those third parties handle your information under their own privacy policies.

2. Information we collect

2.1 Account and authentication information

We collect information you provide or that is provided by authentication partners when you create or use an account, such as:

  • name;
  • email address;
  • account identifiers;
  • sign-in method, such as one-time passcode, Sign in with Apple, or Sign in with Google;
  • authentication metadata needed to keep you signed in and secure;
  • profile details, avatar, and settings you choose to add.

We may receive limited profile information from Apple or Google when you choose those sign-in options, subject to your choices with those providers.

2.2 Trip, itinerary, and planning content

We collect the travel information you create, import, upload, forward, or ask TripFumi to generate or organize, including:

  • trips, destinations, dates, time zones, notes, preferences, and plan details;
  • flights, rail, lodging, restaurants, activities, transportation, rideshare plans, cruise or other travel plans;
  • confirmation numbers, booking URLs, vendor names, prices, receipts, and reservation notes;
  • lodging details such as property information, brand, check-in and check-out times, room details, and reservation metadata;
  • traveler details such as names, emails, phone numbers, home city, home country, and other profile or companion details you choose to store;
  • expense records, payment notes between travelers, split details, currencies, categories, and settlement records;
  • trip cover images, photos, files, attachments, imported documents, and generated media;
  • messages, assistant chats, prompts, and other content you submit to AI-assisted features.

Some travel records may include information about other people, such as co-travelers, friends, family members, or expense participants. You are responsible for making sure you have the right to provide their information to TripFumi.

2.3 Forwarded emails, uploads, imported content, and Inbox Sync

TripFumi may let you forward travel-related emails, share files, or upload documents. We collect the content and metadata needed to process those materials, such as sender and recipient information, subject lines, message bodies, attachments, MIME metadata, receipt details, booking references, dates, locations, prices, and extracted structured travel data.

Inbox Sync (Gmail). Where available, you can connect a Gmail account so that TripFumi imports your travel emails automatically. With your permission, TripFumi uses Google's Gmail API with read-only access and reads only the messages that Gmail has placed in its Travel category, such as flight, hotel, car, train, and restaurant confirmations and their change or cancellation notices. For each such message we collect the same content and metadata described above. TripFumi does not read the rest of your mailbox and cannot send, modify, or delete your email. We store the Google credential that keeps this access working in encrypted form and delete it when you disconnect Gmail, when your access to Inbox Sync ends, or when your account is deleted.

Forwarded or uploaded materials may contain personal information unrelated to your trip. Please avoid forwarding or uploading confidential or unrelated information that TripFumi does not need.

2.4 Flight, hotel, and restaurant search information

When you search for flights, hotels, restaurants, or other travel options, we collect and process the information needed to run the search and show you results, such as:

  • origin, destination, dates, cabin, guest or passenger counts, location, cuisine, and similar search parameters and preferences;
  • the results we retrieve from our search-data provider, such as flight offers, fares, hotel rates, restaurant listings, prices, and availability; and
  • the options you choose to save to a trip, and any notes you add to them.

When you book a flight or hotel in TripFumi (an "In-App Booking"), we also collect the information needed to make and support the booking:

  • for each traveler or guest: name, and for flights, date of birth, gender, nationality, and travel document details (document type, number, issuing country, and expiry date);
  • contact details for the booking, such as email address and phone number;
  • frequent flyer or hotel loyalty numbers you choose to send, special requests, and seat or bag choices; and
  • the booking record, such as the booking ID, airline or hotel confirmation numbers, status, amounts paid, and any refund or cancellation fee.

Other bookings and reservations are completed on the third party's own website or app after we hand you off (see Section 5.3 and Section 5.4). For those, TripFumi does not collect passenger or guest identity documents, payment card details, or booking records; you provide that information directly to the airline, hotel, travel agency, restaurant, or reservation platform, which handles it under its own privacy policy.

2.5 Payment information

For an In-App Booking, you enter your payment card in a payment form provided by Nuitée's payment processor. TripFumi does not receive or store your full card number or security code. We keep only a masked summary of the payment method — such as the card type, brand, last four digits, and any wallet used — to show on your receipt and confirmation email.

For other travel bookings, any payment information you enter on a third party's own website or app is handled by that third party (and its payment processor) under its own terms and privacy policy.

Paid TripFumi subscriptions ("TripFumi Premium") are sold through the Apple App Store or Google Play, which process your payment details under their own terms and privacy policies. We do not receive your payment card details. We use RevenueCat, a subscription-management service, to process purchase and subscription events from the app stores; RevenueCat receives your TripFumi account identifier, your subscription state (such as product, trial or paid status, and expiry), and the campaign that led to your install (see Section 2.14), so we can provide and reconcile paid features and measure which ads bring paying subscribers.

Subscription events from the app stores, such as a purchase, renewal, or cancellation, are transactional records. We record them in our product-analytics system for every subscriber, whether or not you have turned product analytics on, so we can reconcile paid features and measure our marketing.

2.6 Collaboration, friends, and sharing information

When you use TripFumi's sharing and collaboration features, we collect information such as friend requests, friend lists, invitees, collaborator roles, shared trip IDs, recipient counts, invitation status, blocked-user settings, and content shared between collaborators.

If you share a trip, expense, plan, file, photo, or other content with another user, that content becomes visible to the people you share it with according to the permissions you set. Those people may copy, save, screenshot, or further disclose it outside TripFumi.

2.7 Device permissions and device data

Depending on the features you use and the permissions you grant, we may collect or access:

  • Location data, including precise or approximate location, for nearby places, trip context, time zones, weather, ride estimates, maps, and location-aware suggestions;
  • Contacts, such as selected contact details or contact-list information, for friend discovery and invitations;
  • Calendar data, so TripFumi can write trip plans to your device calendar when you enable calendar sync;
  • Photos, camera, and files, for trip covers, attachments, profile images, imported documents, and shared files;
  • Notifications, including push tokens and notification preferences, so we can send trip, collaboration, finance, upload, and flight alerts;
  • Device and app data, such as device type, operating system, app version, build number, runtime version, update channel, app lifecycle events, and crash diagnostics.

Operating-system permission prompts control access to many of these categories. You can revoke permissions in your device settings, though doing so may disable or degrade the related feature.

2.8 Calendar integration information

If you enable calendar sync, TripFumi writes selected trip and plan details to the calendar database on your device using your operating system's calendar provider. Device-local calendar identifiers, sync timestamps, and event maps are stored locally on that device and are not synced through TripFumi. Calendar events may be stored or synced by your operating system or calendar provider depending on your device and calendar settings.

2.9 Flight status, places, weather, and travel data provider information

To provide flight tracking, candidate matching, status alerts, place lookup, geocoding, time-zone resolution, weather, airport metadata, and related travel features, we may process and send relevant trip details to third-party providers. This may include flight numbers, airline codes, origin and destination airports, travel dates, airport identifiers, place names, addresses, geographic coordinates, and trip timing information. To display approximate currency conversions for expenses, we may also retrieve exchange rates from a third-party exchange-rate service; those requests carry currency codes, not your personal information beyond standard network metadata.

2.10 Rideshare information

TripFumi may help you open a rideshare service with pickup, dropoff, timing, and provider preference prefilled. If you open a rideshare app or web link, the rideshare provider receives the information included in the link and handles it under its own privacy policy.

Where optional price or ETA estimates are enabled, TripFumi may send pickup and dropoff coordinates to a rideshare provider through our backend in order to retrieve estimates. TripFumi does not handle rideshare authentication, dispatch, ride payment, driver assignment, or ride-state management.

2.11 Analytics, diagnostics, and observability information

We collect analytics and diagnostic information to understand product usage, operate feature flags, improve reliability, and debug issues. This may include:

  • account ID and, in some cases, account email associated with product analytics;
  • events such as sign-in, trip creation, plan creation, sharing, expenses, flight search, hotel search, restaurant search, booking hand-off, assistant usage, and onboarding interactions;
  • app environment, update channel, app version, build number, runtime version, platform, and app lifecycle events;
  • crash reports, stack traces, error names and messages, performance traces, logs, breadcrumbs, and coarse device or OS metadata;
  • mobile session replay on eligible platforms where enabled for debugging.

Our observability systems are configured to avoid default personal-information collection where supported and to redact sensitive data. We do not intentionally log session tokens, OTPs, passwords, secrets, raw email bodies, raw AI prompts, raw model outputs, raw imported files, raw request or response bodies, precise coordinates, push tokens, or raw payment card details.

2.12 Communications and support information

If you contact us, respond to surveys, request support, report a bug, submit feedback, or communicate with us by email, through contact or press forms on our websites where offered, or another channel, we collect the information you provide and related metadata, such as contact details, message content, attachments, and support history. Contact forms may ask for your name, email address, company, and message.

2.13 Website analytics, session recordings, and heatmaps

When you visit our websites, we and our providers collect information about your visit, such as the pages you view, the site or ad that referred you (including campaign parameters in the link), the buttons and links you tap (such as app-store buttons and QR codes), approximate location derived from your IP address, device and browser type, and timestamps. We use Google Analytics and PostHog for this.

With your consent where required, we may also use session-recording and heatmap tools (such as PostHog) that capture how visitors interact with our pages, such as clicks, taps, scrolling, mouse movement, and page layout, so we can find problems and improve our pages. Text typed into form fields is masked and not recorded. We use this information in aggregate and to review individual visits for troubleshooting; we do not use it to identify you for advertising.

If you install the app from a link or button on our websites, the link can carry the campaign that brought you to the site and, where you have allowed analytics, an identifier for your website visit. We use them to tell which website visit, page, or ad led to the install and to a later sign-up or purchase.

2.14 Advertising and attribution information

We advertise TripFumi on platforms such as Google, Apple, LinkedIn, Meta (Facebook and Instagram), and TikTok. To measure our ads and, unless you opt out, to show TripFumi ads to people who have visited our websites, we use cookies, pixels, and tags from these platforms on our websites, such as the Google tag, the LinkedIn Insight Tag, the Meta Pixel, and the TikTok Pixel. These technologies may collect information such as the pages you visit, the buttons you tap, whether you arrived from an ad (including click identifiers in the link), cookie and device identifiers, browser information, and IP address. We may also send this information, such as a tap on an app-store button with the ad's click identifier, your IP address and browser information, to these platforms from our own servers, through our analytics provider. The advertising platforms may combine this information with other information they hold about you.

In our apps, we receive install-attribution information, meaning which campaign, ad group, keyword, or ad led to an install, from Apple Ads on iOS and from Google Play on Android. This does not use your device's advertising identifier. We also send limited conversion events, such as that an account was created, a first trip was planned, or a subscription was purchased or renewed, to Google Analytics, and may send similar events to the other advertising platforms named above, so they can measure which ads work. These events carry pseudonymous identifiers, not your name or email address.

We do not share your trip content, forwarded emails, files, photos, expenses, traveler details, or AI chats with advertising platforms.

3. How we use information

We use personal information to:

  • create, authenticate, secure, and administer accounts;
  • provide, personalize, and improve trip planning, itinerary organization, collaboration, expenses, notifications, calendar sync, file handling, and AI-assisted features;
  • parse travel emails, receipts, files, and reservation confirmations;
  • search for flights, hotels, restaurants, and other travel options, show prices and availability, and let you save options to a trip;
  • complete, confirm, and support flight and hotel bookings you make in TripFumi;
  • provide and reconcile paid subscriptions through the app stores, where offered;
  • provide flight tracking, flight alerts, candidate matching, airport metadata, weather, places, maps, time zones, ride estimates, and related travel context;
  • send transactional, security, support, trip, collaboration, finance, upload, flight-alert, and notification messages;
  • operate feature flags, analytics, diagnostics, crash reporting, performance monitoring, fraud prevention, abuse prevention, and service security;
  • understand how visitors use our websites, including through session recordings and heatmaps, and improve them;
  • measure and improve our marketing and advertising, including showing TripFumi ads to people who have visited our websites, where permitted and unless you opt out;
  • enforce our Terms, protect users and the Services, comply with law, respond to legal process, and defend legal claims;
  • conduct internal research, testing, debugging, and product development (information received from Google APIs is used only as described in Section 4.1);
  • communicate with you about changes to the Services, policies, or your account.

4. AI and automated processing

TripFumi uses artificial intelligence and machine-learning systems to power features such as trip planning, chat, itinerary suggestions, reservation parsing, email classification, email segmentation, trip matching, flight-risk or connection-risk inference, and cover-image generation.

To provide those features, we may send your inputs, User Content, attachments, trip context, email content, and related metadata to third-party AI providers, depending on the feature. We use those providers to generate outputs for you, parse content you submit, and operate the Services. These requests are processed on Cloudflare, which routes them to AI model providers (currently including OpenAI for email, document, and trip processing) under zero-data-retention terms: the model provider does not keep your prompts or the model's responses once the request is complete. We configure these services so that your content is not used to train AI models.

We do not sell your User Content. We do not use your User Content to train or improve AI models, whether our own or a third party's. Any future change to this commitment would require your affirmative opt-in and would be disclosed in this Privacy Policy.

4.1 Google user data and Inbox Sync

If you connect Gmail through Inbox Sync, the Gmail data we receive is used only to provide and improve the Inbox Sync and trip-building features you can see in the TripFumi app: turning your travel emails into trips, plans, and expenses, keeping them up to date when a booking changes, and showing you the source email when you ask for it. We do not use Gmail data for advertising. We do not sell it, and we do not transfer it to third parties except to the service providers that process it on our behalf as described in Section 5.1. We do not use it to train or improve AI models. Our staff do not read your Gmail data unless you ask us to while we help you with a problem, where it is necessary for security purposes, or where the law requires it.

TripFumi's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

AI outputs may be incorrect, incomplete, outdated, biased, or unreliable. You should verify important travel, safety, legal, health, immigration, financial, and booking information with authoritative sources before relying on it.

5. How we disclose information

We disclose personal information as described below.

5.1 Service providers and processors

We disclose information to categories of vendors and service providers that help us operate the Services, including:

  • cloud infrastructure, hosting, storage, networking, security, and communications providers;
  • AI model and related infrastructure providers;
  • travel search and data providers for flights, lodging, restaurants, places, maps, time zones, weather, rideshare estimates, airport information, and currency conversion;
  • identity, mobile-platform, app-store, subscription-management, notification-delivery, and app-update providers;
  • booking suppliers and their payment processors for In-App Bookings (see Section 5.3);
  • analytics, feature-flag, experimentation, diagnostics, crash-reporting, performance-monitoring, and debugging providers;
  • website analytics, session-recording, and heatmap providers;
  • data-storage and data-warehouse providers that store and analyze analytics and campaign data for us; and
  • customer-support and similar operational providers.

As described in Section 2.5, we currently use RevenueCat for subscription management and entitlement status. RevenueCat receives your account identifier and subscription state.

These providers may process personal information only as needed to provide services to us or as otherwise permitted by their contracts and applicable law. Some providers, such as app stores and rideshare services — and any airline, hotel, travel agency, restaurant, or reservation platform you choose to book with — may also act as independent controllers for parts of the transaction or service they provide directly to you.

5.2 Other users and collaborators

We disclose your information to other TripFumi users when you direct us to do so, such as when you share trips, invite friends, collaborate on plans, participate in expenses, or join a shared trip. The information disclosed depends on the feature and permissions you choose.

If you create a friend-invite link or QR code, anyone who receives the link can see the profile details attached to the invitation (such as your display name and photo) before accepting, and a person who accepts receives the contact details needed to connect with you. Treat invite links like invitations and share them only with people you want to connect with.

5.3 Booking suppliers and travel providers

When you make an In-App Booking, we send the traveler, contact, and booking information described in Section 2.4 to Nuitée, our booking supplier, so it can make the booking with the airline or hotel and provide booking support. Nuitée shares that information with the airline or hotel as needed to provide your travel. Your payment card details go directly from the payment form to Nuitée's payment processor, not through TripFumi. Nuitée, its payment processor, and the airline or hotel handle that information under their own terms and privacy policies.

For other bookings and reservations, we hand you off to the third party's own website or app, and you provide the information needed to complete and support the booking — such as traveler details, contact information, and payment information — directly to that third party (and any payment processor or supplier it uses). The third party handles that information under its own terms and privacy policy.

5.4 Third-party integrations you choose

If you choose to connect with or open a third-party service, such as a rideshare app, calendar provider, map provider, app store, airline, hotel, or booking-management website, information may be disclosed to that third party as needed to complete your request. The third party's own terms and privacy policy apply.

5.5 Legal, safety, and business transfers

We may disclose information if we believe it is reasonably necessary to:

  • comply with law, legal process, subpoenas, court orders, or government requests;
  • enforce our Terms or other agreements;
  • protect the rights, property, safety, or security of TripFumi, our users, the public, or others;
  • detect, prevent, or investigate fraud, abuse, security incidents, or technical issues;
  • support a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction.

5.6 Advertising partners

We disclose the information described in Section 2.14 to advertising platforms such as Google, LinkedIn, Meta, and TikTok. These platforms may use it for their own purposes, such as improving their advertising services, under their own privacy policies. Under some US state laws, this may be considered "sharing" of personal information for cross-context behavioral advertising, "targeted advertising," or a "sale." You can opt out as described in Section 6.

6. Sale, sharing, and targeted advertising

We do not sell your personal information for money. However, some of the website advertising activities described in Sections 2.14 and 5.6 may be considered "sharing" of personal information for cross-context behavioral advertising under the California Consumer Privacy Act and California Privacy Rights Act, or "targeted advertising" or a "sale" under other US state privacy laws.

You can opt out at any time by using the "Privacy choices / opt out" link in the footer of our websites, or by turning on a Global Privacy Control (GPC) signal in your browser, which we treat as an opt-out request for that browser. In the European Economic Area, the United Kingdom, and Switzerland, and where we cannot determine your region, we do not use advertising, session-recording, or heatmap technologies unless you consent through our cookie banner. We do not knowingly sell or share the personal information of consumers under 16.

We may disclose personal information to service providers, processors, analytics providers, and other operational partners as described in this Privacy Policy. We may also use aggregated or de-identified information for analytics, product improvement, research, and business purposes. Information received from Google APIs is used only as described in Section 4.1.

7. Cookies, SDKs, and similar technologies

TripFumi and our providers use cookies, pixels, tags, mobile SDKs, local storage, identifiers, analytics events, and similar technologies to operate the Services, keep you signed in, remember preferences, measure usage, provide feature flags, detect fraud, improve reliability, and debug errors.

On our websites, they fall into these categories:

  • Strictly necessary: to run the site, remember your privacy choices, and keep it secure. These are always on.
  • Analytics: to measure visits, pages, and button taps (for example, Google Analytics).
  • Session recordings and heatmaps: to see how visitors use our pages so we can improve them (for example, PostHog).
  • Advertising: to measure our ads and show TripFumi ads to people who have visited our sites (for example, the Google tag, the LinkedIn Insight Tag, the Meta Pixel, and the TikTok Pixel).

You can manage these through our cookie banner where shown, the "Privacy choices / opt out" link in our website footer, a Global Privacy Control signal, your browser settings, and the ad settings of each advertising platform.

For mobile apps, many controls are available through your device settings, app permissions, app-store account settings, and operating-system privacy controls. For websites, browser settings may allow you to block or delete cookies, though doing so may affect functionality.

8. Retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain your account, comply with law, resolve disputes, enforce agreements, protect the Services, and support legitimate business purposes.

Examples include:

  • account and trip content is generally retained while your account remains active or until you delete it, subject to backup and legal-retention periods;
  • account deletion uses an approximately 30-day grace period during which you can cancel the deletion, after which your data is purged from our systems;
  • emails imported through Inbox Sync, and the files saved from forwarded emails and uploads, are retained until you delete them in the app, turn off saving source files, or delete your account; disconnecting Gmail stops new imports but does not by itself delete what was already imported;
  • data-export download links expire automatically (currently after 7 days);
  • flight-alert event data is retained for a limited period (currently about 30 days);
  • for an In-App Booking, the contact email entered at checkout is deleted once the confirmation email is sent, and hotel guest details are kept, encrypted, only until the booking is confirmed or ends; frequent flyer numbers sent with a flight are kept, encrypted, with the booking; the booking record (such as the booking ID, status, amounts, and any refund or cancellation fee) is kept for receipts, accounting, and dispute resolution; and when you delete your account, the masked payment summary, the frequent flyer numbers, and any remaining booking contact or guest details are deleted;
  • shared content may remain visible to collaborators who already received access, even if you later remove your own copy or delete your account;
  • tax, fraud-prevention, dispute, and legal records may be retained longer where necessary or required by law;
  • device-local calendar sync state remains on the device unless you disable the feature, delete the local calendar, clear app data, or remove the app, subject to your operating system and calendar-provider behavior;
  • analytics, diagnostic, logs, and crash data are retained according to operational needs and provider settings;
  • website session recordings and heatmap data are retained for no more than 90 days;
  • website analytics data is retained according to our analytics settings (currently 14 months);
  • messages sent through website contact or press forms are retained as long as needed to respond and for related records;
  • backups are deleted or overwritten on our routine schedules.

When you delete your account, we will delete or de-identify personal information as required by applicable law, except where retention is necessary for legal, security, fraud-prevention, financial, dispute-resolution, or legitimate business purposes.

9. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. These include access controls, authentication, encryption in transit where appropriate, cloud-provider security controls, secret management, logging controls, and redaction practices designed to avoid sensitive information in observability systems.

No method of transmission or storage is completely secure. We cannot guarantee absolute security. You are responsible for protecting your account credentials, devices, and any third-party accounts you connect or use with TripFumi.

10. International transfers

TripFumi is operated from the United States, and our providers may process information in the United States and other countries. These countries may have privacy laws that differ from those where you live. Where required, we use appropriate safeguards for international transfers, such as contractual protections or other mechanisms recognized by applicable law.

11. Your choices and rights

11.1 Account and content controls

You may use the Services to access, edit, export, or delete certain account and trip content. You may delete your account from inside the app or by contacting privacy@tripfumi.com.

You may also manage feature-specific settings, such as notification preferences, trip mutes, quiet hours, calendar sync, sharing permissions, and device permissions.

Inbox Sync. You can disconnect Gmail at any time in the app under Settings, Email Inbox Sync, Gmail, Disconnect Gmail. This stops imports and revokes TripFumi's access to your mailbox. You can also remove TripFumi's access from the third-party connections page of your Google Account. To delete the emails already imported, open Settings, Files & Attachments, and turn off Save automatic source files, which deletes the saved email files from every trip; deleting your account deletes them as well.

Product analytics is optional. In the European Economic Area, the United Kingdom, and Switzerland (and where we cannot determine your region), analytics is off unless you opt in; elsewhere it is on by default and you can opt out at any time in the app's settings. Your choice is recorded with your account and applied across your devices.

Websites. On our websites, you can turn analytics, session-recording, and advertising technologies on or off at any time through the cookie banner where shown or the "Privacy choices / opt out" link in the footer. A Global Privacy Control signal from your browser turns advertising off for that browser.

11.2 Device and platform controls

You can use your device settings to manage permissions for location, contacts, calendar, notifications, photos, camera, files, and similar device features. You can manage app-store subscriptions through your app-store account. You can manage third-party identity, rideshare, airline, hotel, restaurant, booking, and calendar services through those services directly.

11.3 Privacy requests

Depending on where you live, you may have rights to:

  • know or access the personal information we collect about you;
  • request correction of inaccurate information;
  • request deletion of personal information;
  • receive a portable copy of certain information;
  • restrict or object to certain processing;
  • withdraw consent where processing is based on consent;
  • opt out of sale or sharing for cross-context behavioral advertising;
  • appeal a denied privacy request where applicable;
  • not be discriminated against for exercising privacy rights.

To exercise privacy rights, contact us at privacy@tripfumi.com. We may need to verify your identity before responding. If you submit a request on behalf of another person, we may require proof of authorization.

12. California notice

The categories of personal information we may collect are described in Section 2. They may include identifiers, customer records, commercial information, internet or electronic network activity, geolocation data, sensory or media content, professional or travel-related information you provide, inferences, and sensitive personal information such as account credentials and precise location when enabled.

We collect, use, and disclose these categories for the purposes described in Sections 3 and 5. We retain them as described in Section 8.

We do not sell personal information for money. We may share identifiers and internet or other electronic network activity information collected on our websites with advertising partners for cross-context behavioral advertising, as described in Sections 2.14 and 5.6, and you can opt out as described in Section 6. We do not use sensitive personal information to infer characteristics about you. We use sensitive personal information only as reasonably necessary to provide the Services, maintain security, comply with law, and support the purposes described in this Privacy Policy.

13. Legal bases for EEA, UK, and similar jurisdictions

Where applicable law requires a legal basis for processing personal information, we rely on one or more of the following:

  • Contract, to provide the Services, create and manage accounts, provide support, and enforce our Terms;
  • Consent, where you grant device permissions, connect optional integrations, enable certain notifications, submit optional information, accept analytics, session-recording, or advertising cookies on our websites, or where consent is otherwise required;
  • Legitimate interests, to improve, secure, debug, measure, and operate the Services, prevent fraud and abuse, communicate with users, and develop new features;
  • Legal obligations, to comply with law, tax, accounting, dispute, travel, payment, and regulatory requirements;
  • Vital or public interests, in rare cases where necessary to protect safety or respond to emergencies.

14. Children's privacy

TripFumi is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it. If you believe a child under 13 has provided personal information to TripFumi, contact us at privacy@tripfumi.com.

Users under the age of majority in their jurisdiction may use the Services only with the consent and supervision of a parent or legal guardian, as described in the Terms.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice, such as by in-app notice, email, or updating the date at the top of this page. Your continued use of the Services after the updated Privacy Policy becomes effective means that you acknowledge the updated policy.

16. Contact

For privacy questions or requests, contact us at:

  • Privacy: privacy@tripfumi.com
  • General support: support@tripfumi.com
  • Legal notices: legal@tripfumi.com

Mailing address for privacy and legal notices:

Zenfumi, Inc.
Attn: Privacy
8 The Green
Suite B #8151
Dover, DE 19901
United States of America