Privacy Policy
Last updated: 5 July 2026
Tripisa ("we", "our", "us") operates the Tripisa application (package: com.tvshuru.voyager) for Google TV and Android TV. This Privacy Policy explains how we collect, use, and protect your information in compliance with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000.
You can browse destinations and experiences in Tripisa without creating an account. Some features — saving your itinerary across your TV and phone, personalized recommendations, and account settings — require signing in, which is done by scanning a QR code shown on the TV with your phone. What we collect depends on whether, and how, you use that sign-in.
1. Data We Collect
| Data Type | Collected? | Purpose | Legal Basis (DPDP Act) |
|---|---|---|---|
| Name | Only if you create a Tripisa account | Identify your account and personalize your display name | Consent (Section 6) |
| Email address | Only if you create a Tripisa account | Account sign-in and identification | Consent (Section 6) |
| Password | Only if you create a Tripisa account | Authenticate you on future sign-ins | Consent (Section 6) |
| Trip / itinerary data (destinations, activities, dates) | Only if you build a trip while signed in | Save and sync your itinerary across your TV and phone | Consent (Section 6) |
| Profile preferences (home city, interests, trip pace) | Only if you turn on "Personalization" in your Profile | Personalize recommendations | Consent (Section 6) — separate, revocable toggle |
| Device information (OS version, device model) | Minimal, via Google Play | App compatibility & crash diagnostics | Legitimate use (Section 4) |
| Local storage (DOM storage) | On-device only | App preferences & UI state | Not transmitted; stays on your device |
| IP address | Incidentally, via network requests | Content delivery | Legitimate use (Section 4) |
| Usage / analytics data | No | — | — |
| Location data | No | — | — |
| Financial / payment data | No — booking payment is completed on our booking partner's own checkout page, not in Tripisa | — | — |
Browsing destinations and experiences never requires an account. Name, email, password, and itinerary data are collected only if you choose to sign in or create an account.
2. How We Use Your Data
- Account & sign-in: If you create a Tripisa account, your name and email identify your account and your password authenticates you on future sign-ins. Account data is stored on our servers, not just on your device.
- Trip syncing: If you build an itinerary while signed in, it is stored on our servers so it can be viewed and edited from both your TV and your phone, and restored if you sign in on another device.
- Personalization (opt-in): Home city, interests, and trip pace are only requested if you explicitly turn on "Personalization" in your Profile, and are used solely to tailor recommendations. Leaving this off means we don't collect these fields.
- App functionality: Local storage (DOM storage) is used on your device to remember preferences and UI state that aren't tied to an account. This data is never transmitted to our servers.
- Content delivery: Network requests are made to load and stream content. Your IP address may be incidentally processed during these requests.
- Crash diagnostics: If you have opted into Google Play's crash reporting, basic device information may be shared with us through the Google Play Console.
3. Your Rights Under the DPDP Act, 2023
As a Data Principal under the DPDP Act, you have the following rights:
3.1 Right to Access (Section 11)
If you have a Tripisa account, you can obtain a full copy of the personal data we hold about you at any time, free of charge, from the phone companion app: Profile → Your data → Download my data. If you have never created an account, we hold no personal data about you to access.
3.2 Right to Correction and Erasure (Section 12)
You can update your display name and profile attributes at any time from Profile in the phone companion app. You can permanently delete your account and the personal data associated with it from Profile → Your data → Delete my account; deletion is scheduled after a 30-day grace period, after which your data is permanently purged from our systems. If you never created an account, clearing the app's data or uninstalling it from your TV removes everything Tripisa stored on your device.
3.3 Right to Grievance Redressal (Section 13)
If you have any concerns about how your data is handled, you may contact our Grievance Officer (details below). We will respond within 30 days of receiving your complaint, as required by the DPDP Act.
3.4 Right to Nominate (Section 14)
You have the right to nominate another individual to exercise your data rights in the event of your death or incapacity.
3.5 Right to Withdraw Consent
Where a feature depends on optional consent — such as Personalization — you can grant or withdraw that consent at any time from Profile → Consent & privacy in the phone companion app, without losing access to your account or core trip-planning features. Each consent choice is recorded against the privacy policy version in effect at the time.
4. Data Storage and Security
- If you don't create an account, app preferences are stored locally on your device only using DOM storage (localStorage), and are never transmitted to our servers.
- If you create a Tripisa account, your name, email, itinerary, and (if enabled) personalization attributes are stored on servers operated by our infrastructure providers. Your password is used only to authenticate you and is protected using industry-standard security measures — we do not display it back to you anywhere in the app.
- Content and account data are transmitted over HTTPS encrypted connections.
5. Data Retention
If you don't have an account, we retain no personal data on our servers; local data on your device persists until you clear the app's data or uninstall it. If you have an account, we retain your account, profile, and trip data for as long as your account remains active. If you request deletion, your data is retained only through a 30-day grace period and then permanently purged, as per Section 8(7) of the DPDP Act.
6. Third-Party Services
The app may interact with the following third-party services:
- Google Play Services: For app distribution and optional crash reporting. Governed by Google's Privacy Policy.
- Android WebView: Used to render app content. WebView operates locally on your device.
- Booking checkout partner: Completing a booking opens a QR code that you scan with your phone to finish payment on our booking partner's own checkout page. That partner's handling of your payment and booking details is governed by their own privacy policy, not this one.
- Our backend infrastructure: If you create an account, your account, profile, and trip data are processed and stored by the cloud infrastructure providers we use to run Tripisa's servers.
We do not use third-party analytics, advertising SDKs, or tracking services.
7. Children's Privacy
We do not knowingly collect personal data from children, and account creation is not directed at children. Browsing destinations and experiences does not require any personal information from any user, including children. In accordance with Section 9 of the DPDP Act, we do not knowingly process personal data of children in any manner that could cause harm, and we do not knowingly permit children to create a Tripisa account.
8. Cross-Border Data Transfer
If you don't have an account, no personal data leaves your device. If you create a Tripisa account, your account, profile, and trip data may be processed and stored on cloud servers operated by our infrastructure providers, which may be located outside India. Where this occurs, we take reasonable measures to protect your data consistent with the DPDP Act's cross-border transfer provisions.
9. Data Breach Notification
In the unlikely event of a data breach affecting personal data, we will notify the Data Protection Board of India and affected Data Principals as required under Section 8(6) of the DPDP Act.
10. Consent
Before you can use the Tripisa app at all, the TV shows a one-time consent screen summarizing this Privacy Policy, which you must acknowledge to continue. If you choose to create a Tripisa account, you additionally give a separate, explicit consent — an "I agree to the Terms of Service and Privacy Policy" checkbox on the phone sign-up screen — which is recorded against the specific policy version you agreed to. Optional processing, such as Personalization, is gated behind its own separate consent toggle in your Profile, which you can grant or withdraw at any time (Section 3.5). For any processing not covered by these mechanisms, we will obtain clear, informed, and specific consent as required under Section 6 of the DPDP Act.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Where a change is material, we may re-prompt the in-app consent screen so you can review it again. Continued use of the app after changes constitutes acceptance of the revised policy.
12. Grievance Officer / Contact
For any privacy-related queries, concerns, or to exercise your rights under the DPDP Act:
- Name: Tripisa Privacy Team
- Email: privacy@tripisa.com
- Response time: Within 30 days of receiving your request
If you are unsatisfied with our response, you may file a complaint with the Data Protection Board of India as established under the DPDP Act, 2023.
13. Governing Law
This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.