Privacy Policy
This page explains what personal data Trip Reality collects, why we collect it, where it goes, and what rights you have over it. We've tried to write it in plain English instead of legal language.
1. Who we are
Trip Reality is made by Helkrypt AI AS, a company registered in Norway (org. no. 936 351 034). Our postal address is Postboks 14, 4756 Hovden i Setesdalen, Norway. We are the data controller for the personal data described on this page. Questions or requests: hello@tripreality.app.
2. What we collect and why
| Where | What we collect | Why (legal basis) |
|---|---|---|
| Free check | Nothing. The calculator runs in your browser and nothing leaves it unless you choose to email yourself a report. | Not applicable — no personal data collected. |
| Report email | Your email address, the destination, travel style, nights, and traveler count, plus a record that you agreed to receive the email. The amount you typed only ever lives inside the link we send you — we never store it. | Your consent (GDPR Article 6(1)(a)). |
| Account & purchase | Your email, your purchase record, and the trips you save — including the amount you plan to spend and the purchases you log. | Necessary to run our contract with you (Article 6(1)(b)). |
| Payments | Handled by Stripe. We store a reference to your Stripe customer record — never your card number. | Necessary to run our contract with you (Article 6(1)(b)). |
| Service emails | Your email address, to send login links and receipts. | Necessary to run our contract with you (Article 6(1)(b)). |
| Analytics | Anonymous, aggregated visit counts from Vercel Analytics. No cookies, no per-person tracking. | Our legitimate interest in knowing the site works (Article 6(1)(f)). |
3. Automated suggestions
The app computes your cost estimate and any cut-to-budget suggestion automatically, from the numbers you enter and our public benchmark data. Nothing is decided for you: the suggestion has no legal or similarly significant effect, and you can ignore or change every step. We don't profile you across other users or other services.
4. What we never collect
We never ask for or store your bank login, account numbers, income, or account balances. Trip Reality never connects to your bank.
5. Where your data goes
We use a small number of specialist companies to run Trip Reality. Here is every one of them:
| Company | What they do | Where | Safeguard |
|---|---|---|---|
| Supabase | Database, authentication, file storage | EU (Frankfurt) | Data stays inside the EU. |
| Vercel | Hosting | USA | EU Standard Contractual Clauses + Data Processing Agreement. |
| Stripe | Payments | USA / Ireland | Standard Contractual Clauses + DPA. Card numbers never touch our servers. |
| Resend | Sending email | EU-region data; US company | Standard Contractual Clauses + DPA. |
We never sell your personal data. This is also true under the California Consumer Privacy Act (CCPA).
6. How long we keep it
| Data | Kept until |
|---|---|
| Leads (report emails) | Deleted 24 months after the date you gave consent, or earlier when you ask us to delete your data. Unsubscribing stops the emails immediately (handled by our email provider); it does not by itself delete the record. |
| Account data | You delete your account. |
| Purchase records | 5 years, as required by the Norwegian Bookkeeping Act. |
| Erasure records (proof we deleted your data) | 3 years, with no personal data inside them. |
7. Your rights
- See the data we hold about you.
- Fix anything that's wrong.
- Delete your account and your data — one click in your account settings.
- Get a copy of your data as a file (JSON export) — also in your account settings.
- Object to processing, or withdraw consent at any time — use the unsubscribe link in any email.
- Ask us to pause using your data while we sort out a request (restriction of processing).
- Complain to Datatilsynet (the Norwegian Data Protection Authority) or the authority where you live.
- If you live in California, you have the same rights under the CCPA: access, deletion, and no sale of your data. We already meet all three.
We answer requests within 30 days.
8. Cookies
We use one cookie: the session cookie that keeps you logged in. We don't use tracking cookies or ad cookies, and we don't show a cookie banner, because a cookie that only makes the site work doesn't need your consent.
9. Age
Trip Reality is for adults. You must be 18 or older to use it.
10. Changes
We date every update to this page. If a change is significant, we'll email people with an account before it takes effect.
Last updated 2026-09-07.