This policy describes what data Trippy handles. The short version: Trippy does not collect or share your journal. The only thing that reaches us is feedback you choose to send. Everything you enter in the journal stays on your device, in your device backups if you make them, and in any export you save. If you turn on iCloud Sync, it is also kept, encrypted, in your own private iCloud database.
Only the feedback you send. Trippy has no servers of its own, no Trippy accounts, no analytics, no advertising and no third-party SDKs that send data anywhere. We do not see, store, or have any way to access your journal entries, mood data, ingestion log, calendar history, or notes, with iCloud Sync on or off. The substance reference data is built into the app; Trippy does not download it or send your searches anywhere.
Feedback (optional). When you tap Send in Send Feedback (Settings) or Suggest an Edit (at the end of a guide), Trippy sends that one report to Trippy's database in Apple's iCloud (the CloudKit public database of the app's container; other users cannot read it). A report holds what you typed, the email address if you entered one so we can reply, which guide it is about, and technical details to help fix problems: app version and build, whether it is an App Store or TestFlight build, iOS version, device model, language, region, time zone, text size, light or dark appearance, the theme, and whether Reduce Motion, VoiceOver, Bold Text, iCloud Sync, the app lock and Private View are on. It never includes your journal, doses, substances you logged, mood data, notes or names. iCloud attaches an identifier for your iCloud account that is specific to Trippy and does not reveal your name or Apple Account. Sending needs you to be signed in to iCloud. A report waiting for a connection stays on your device until it is sent or you delete it; Delete Everything deletes waiting reports. We use reports only to answer you and improve Trippy, never for advertising, and delete them once handled. To have a report you sent deleted, contact us through the support page.
The app stores the following locally, in iOS’s standard sandboxed Core Data storage on your phone:
This data is deleted from your device when you delete the app. Like any app’s data, it is part of your device backups (iCloud Backup or a computer) if you make them. If you create a manual JSON backup via the in-app export, that file goes wherever you choose to save it. Before an import or Replace This iPhone with iCloud replaces your journal, Trippy has you save such an export of it; Trippy keeps no copy of a journal an import replaced. Trippy itself does not upload backups anywhere.
iCloud Sync is off by default. When you turn it on in Settings, your journal (experiences, doses, notes, ratings, locations, friends, custom substances, units, colors and classifications), mood entries and tags, and five settings (24-Hour Time, Week Starts On, the Mood Tracker switch, the Statistics Prescribed/Recreational filter and the Sober Streak selection) sync through your private iCloud database to your devices signed in to the same Apple Account. Every data field is stored with CloudKit field encryption; Apple can still see record metadata such as record types, creation and modification dates, and which records link to which. The app lock, Private View, every other setting and the copies above stay on each device. Turning sync off stops it at once and keeps your iCloud copy until you delete it in your iCloud storage settings; Delete Everything while sync is on also deletes it. Signing out of iCloud while sync is on removes the synced data from the device. We cannot read your private iCloud database.
Trippy does not request access to your location, camera, microphone, photos, contacts, calendar, Health data, motion data, or other personal data. Face ID, Touch ID or your device passcode is used only for the optional app lock and to confirm it’s you before Private View turns off; iOS tells Trippy only whether you were recognized.
Trippy does not track you across apps or websites. The NSPrivacyTracking value in the privacy manifest is false. The app does not use the IDFA or any other tracking identifier.
The app may surface reference links to publicly available harm-reduction resources (for example PsychonautWiki, TripSit). Tapping those opens them in your browser. Trippy does not share any of your data with those sites; their privacy practices are their own.
Trippy is rated 18+ and is intended for adults. It is not directed to children and we do not knowingly collect information about minors. During setup, Trippy asks iOS for your age range through Apple’s Declared Age Range; Trippy uses the answer only on your device to confirm you are 18 or older and does not store or send it.
If this policy changes, the updated version will be posted at this URL with a new effective date.
Questions about this policy or the app: support page.