Tripperz

Legal

Privacy policy

This policy explains which personal data Tripperz processes, why, who receives it, how long we keep it and which rights you have. It applies to the Tripperz app (including Android Auto), this website, the organization dashboard and invite and share links.

Last updated: 8 November 2026

Who we are

Tripperz is a product of Bakens Digital, a trade name of Bas Bakens, Fitissingel 9, 5754 CG Deurne, the Netherlands (Chamber of Commerce number 99619717). Bas Bakens, trading as Bakens Digital, is the controller for the personal data described in this policy. Questions and requests about your data can be sent to info@basbakens.nl.

Which data we process

Account and profile

You sign in with Google or Apple, or with your phone number and a one-time code where that option is available. We then receive your name, email address and an account ID from that provider. In your profile you can add a username, profile photo and description, and optionally a phone number and home address. We keep a log of username changes to prevent impersonation.

Guest sessions

You can join a trip without an account. We then create a temporary guest profile with a recovery code. If you create an account later, the guest data moves to that account.

Location data

Tripperz asks for permission to use your precise device location. The app only uses it while it is open; it does not request background location access.

  • Live position: during an active trip your position, heading, speed and whether you are off route are shared with the other participants of that trip, and used for navigation.
  • Drive history: while you drive we record location points so we can show your routes, distance and statistics afterwards.
  • Route history limit: the Free plan stores 1,500 km and the Premium plan 3,500 km of detailed route data. Above that, the detailed route data of your oldest drives is deleted automatically; distance and statistics remain.

Trips, groups and routes

We store the trips and groups you create or join, your role and permissions in them, route proposals and votes, routes and waypoints, completed trips, and the routes you save. Saved routes are private unless you share them with a link.

Invite links

Anyone who opens a trip's invite link on this website sees the trip name, description, planned start, route and stops, and the participants by first name and profile photo, with the road captain marked. No surnames, usernames, contact details or live positions are shown. These pages are not indexed by search engines. Only share an invite link with people you want to invite. When the trip ends, the page only says that it has ended.

Social features

We store friend requests, the people you follow, your posts with photos, comments, likes, trip chat messages and direct messages. Who can see a post depends on the visibility you choose. Others can only find you by your exact email address or phone number if you turn that on in Settings; both are off by default.

Organizations

If you are a member or organizer of an organization (for example a car club or event organizer), we process your membership, role, the organization's trips and participant lists, and usage figures. Organizers can see this in the dashboard.

Payments

Subscriptions are paid through Stripe. Stripe processes your payment details; we never receive your full card number. We store your plan, subscription status, billing interval, whether you used your free trial, invoices and the Stripe references we need to manage your subscription.

Notifications

If you allow notifications, we store a device token from Firebase Cloud Messaging (Google) so we can notify you about trips, invites and messages.

Technical data

Our servers log technical data such as IP address, device type, app version and error information to keep the service secure and working. The app keeps settings and a cache on your device. The dashboard keeps your sign-in in your browser's session storage, which is cleared when you close the tab. This website sets no cookies, uses no analytics or tracking, and hosts its fonts on its own domain. The invite page loads map tiles from OpenStreetMap.

Why we process it

  • To provide Tripperz (performance of the contract): your account, trips, navigation, live location sharing within a trip, drive history, social features, organizations and subscriptions.
  • With your permission (consent): access to your location, photos and notifications on your device, and being findable by email or phone. You can withdraw these at any time in your phone settings or in the app.
  • To keep the service secure and improve it (legitimate interest): preventing abuse, moderating content, fixing errors and understanding how features are used, based on aggregated figures.
  • To meet legal obligations: for example keeping financial records of payments.

We do not use your data for advertising and we do not make automated decisions about you.

Who receives your data

We do not sell your personal data. We share it only where needed to run Tripperz:

  • Other users: participants of your trips and groups, organizers of your organization, and people you share posts, routes or messages with.
  • Our team: a small number of authorized people at Bakens Digital can access data for support, moderation and account deletion. Their actions in the admin tools are logged.
  • Hosting: the app servers, database and uploaded photos run on a server we manage ourselves; Cloudflare carries the traffic to it. Vercel hosts this website and the dashboard.
  • Stripe, for payments, subscriptions and invoices.
  • Google and Apple, when you sign in with them, and Google Firebase for push notifications.
  • Map and routing services: Google Maps shows the map in the app and receives the map area and your device's IP address. OpenStreetMap-based services (Nominatim for place search, Overpass for map data and OSRM for route calculation) receive the search terms or coordinates of a request. On the invite page, the OpenStreetMap tile servers receive the map area and your IP address.
  • An SMS provider, to send the code when you sign in with your phone number.

Some of these providers process data outside the European Economic Area, for example in the United States. Where that happens, the transfer is covered by safeguards such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We may also share data when the law requires it.

How long we keep it

  • Account data, trips, drive history and content: as long as you have an account.
  • Detailed route data on the Free and Premium plans: until the 1,500 km or 3,500 km limit is reached, as described above.
  • Posts and other content you delete yourself: removed when you delete them.
  • Organizations without a paid plan: deleted 90 days after they were blocked for non-payment, with their trips and member lists.
  • Server logs: for a limited period, only as long as needed for security and troubleshooting.
  • Payment records and invoices: for the statutory retention period of seven years under Dutch tax law, also after you delete your account.

Deleting your account

In the app, go to Settings → Delete account, or send an email to info@basbakens.nl from the address linked to your account. We process the request within 60 days and then delete your profile, location data, drive history, routes, posts, comments, likes, messages, contacts and follows. Trips you created are deleted for all participants. Payment records are kept as described above. Cancel a paid subscription first, so it does not renew. A guest session ends when you leave it.

Your rights

Under the GDPR you have the right to access, correct and delete your personal data, to restrict or object to processing, to withdraw consent, and to receive your data in a portable format. Send your request to info@basbakens.nl; we respond within one month. Account deletion is completed within 60 days. You can also file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Security

All connections to Tripperz are encrypted with HTTPS. Access to data is limited to what each user, organizer or team member needs, and sign-ins use signed tokens. No system is perfectly secure; if a data breach affects you, we will inform you and the authorities as the law requires.

Children

Tripperz is not intended for children under 16. If you believe a child under 16 has created an account, let us know and we will delete it.

Changes to this policy

We update this policy when Tripperz changes. The date at the top shows the latest version. If a change is significant, we will let you know in the app before it takes effect.