Privacy Policy

This Privacy Policy explains how your personal data is collected, used and shared when you use the Travbit mobile application and the website at travbitapp.com (together, the “Service”). We are committed to protecting your privacy and handling your data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Italian law.

1. Who we are (Data Controller)

The data controller responsible for your personal data is:

2. What data we collect

Account & login information

When you create an account or sign in, we collect information needed to authenticate you, such as your email address, display name and account identifiers. Authentication is handled through Google Firebase Authentication.

Subscription & purchase information

When you start a free trial, subscribe to Travbit Pro, or buy a one-time pass, we process subscription and entitlement data (for example, subscription status, product identifiers and transaction identifiers) through RevenueCat. Your actual payment details (card numbers, billing information) are handled entirely by the Apple App Store or Google Play and are never received or stored by us.

Usage & analytics data

We use Google Firebase Analytics to understand how the Service is used. This may include device and app information (device model, operating system, app version, language, approximate region), interactions with features and screens, and unique identifiers associated with your device or app instance.

Content you create

Trips, saved favourites and preferences you create within the app are stored so we can provide the Service to you.

Website data

When you visit travbitapp.com, our hosting provider (Cloudflare) may process limited technical data such as your IP address and request metadata for security and delivery purposes.

3. How and why we use your data

• To create and manage your account and authenticate you.
• To provide the Service, including itineraries, maps, saved trips and Pro/pass entitlements.
• To process and validate subscriptions, trials and one-time purchases.
• To measure and improve performance, reliability and the user experience.
• To communicate with you about the Service, including important updates.
• To protect the Service against fraud, abuse and security threats, and to comply with legal obligations.

4. Legal bases for processing (GDPR)

• Performance of a contract — to provide the app, your account and purchased features.
• Consent — for optional analytics and any non-essential cookies, where required. You can withdraw consent at any time.
• Legitimate interests — to keep the Service secure, prevent abuse and improve our product.
• Legal obligation — to comply with tax, accounting and other legal requirements.

5. Third parties & data sharing

We do not sell your personal data. We share data only with service providers who process it on our behalf, including:

• Google Firebase (Authentication, Analytics) — see Google’s privacy policy.
• RevenueCat — subscription and purchase management.
• Apple App Store / Google Play — payment processing and app distribution.
• Cloudflare — website hosting and security.

These providers are only permitted to use your data as necessary to provide their services to us.

6. International data transfers

Some of our providers may process data outside the European Economic Area (EEA). Where this happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses to protect your data.

7. Data retention

We keep your personal data only for as long as necessary to provide the Service and for the purposes described in this policy, or as required by law. When you delete your account, we delete or anonymise your personal data, except where we must retain it for legal or accounting obligations.

8. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data (“right to be forgotten”).
• Restrict or object to certain processing.
• Request portability of your data.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at info@federico-travel-designer.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).

9. Cookies & similar technologies

Our website uses only essential cookies and similar technologies needed for it to function and stay secure. Within the app, analytics identifiers are used as described above. Where non-essential cookies or analytics require consent, we will ask for it and you can change your choice at any time in your device or browser settings.

10. Children’s privacy

Travbit is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Security

We take reasonable technical and organisational measures to protect your personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and revise the “Last updated” date above. Significant changes may be communicated through the app or by email.

13. Contact

For any questions about this Privacy Policy or your personal data, contact us at info@federico-travel-designer.com.