Trip2Art Privacy Policy

Last updated: 2026-10-29

Trip2Art ("we," "us," "the app") turns your own travel photos into a printable coloring book. This policy explains what we collect, why, and what happens to it. We wrote it in plain language on purpose.

Who this app is for

Trip2Art accounts are for people aged 13 and over. By creating an account you confirm that you are 13 or older.

Upload your own travel photos. We do not screen the content of your photos. The AI providers we use apply their own safety filters, and if one of them declines a photo we will tell you it was declined and delete it — but the decision is theirs, not ours, and we make no promise about which photos will or will not be accepted. You are responsible for having the right to upload the photos you choose.

What we collect

What	Why	How long we keep it
Your email address	To create and manage your account	For as long as your account exists
Your email address and Google account number (only if you sign in with Google)	To sign you in without a password, and to recognize you next time	For as long as your account exists. We do not ask Google for your name, and where Google sends it anyway we do not read it. See "Signing in with Google" below.
The travel photos you upload	To generate your coloring book pages	Each photo is deleted as soon as its page is finished — usually within minutes. An automatic sweep removes anything left over, and we aim to have every photo gone within a day. Photos you pick are sent to us only when you make your book. If you don't make it, they never leave your device.
The coloring-book pages we generate, and your finished PDF book	This is the product you're making — it's meant to stay in your library	For as long as your account exists, or until you delete that book
The title you give your book	To name it on your shelf and on the book itself	For as long as the book exists. You type it yourself, so it may contain a name — that is your choice, and it goes when the book or your account goes
The coloring you add to a page, and to a free printable you color while signed in	So your colored page is waiting for you next time, on any device, and a book's page prints in color	For as long as the book exists, or until you reset that page to black and white. A free printable's coloring: until you reset it, or delete your account
What you bought and what you paid	So you keep what you paid for, so support can tell you whether a payment went through, and so our own accounts add up	Kept with no end date — a sales record is one of the few things we are not allowed to throw away. When you delete your account the link between the sale and you is cut, and an internal number takes its place.
The receipt the store gives us	So we can ask Google whether your plan is still running, and so the same receipt cannot be used twice	Until it can no longer be asked about: we erase it when the purchase is refunded, when you delete your account, or 60 days after a Play subscription ends, whichever comes first. A one-way code made from it stays, so a spent receipt cannot be redeemed again. It is a store reference and nothing else — it is not a card number and cannot be used to charge you.
What your plan lets you do	So the app knows what you can do right now, and gives it back if you are refunded	For as long as your account exists, and deleted with it
The date you first download a finished book	To count how many new accounts get as far as a book they can print	For as long as your account exists
Messages you write to us in the app, and the reply address you give us if you choose to	So we can read what you tell us, answer you, and fix it	180 days after we close it, and sooner if you delete your account. Once a day we also mail ourselves a summary of what people have written, and the copy sitting in our own mailbox is not on that clock — "Where your data lives" says where that mailbox is
Your email address, if you ask for our free sample pack, with a record of what you agreed to and when	To send you the pack, and a note when new free pages are published	Until you unsubscribe. After that we keep it only so that we do not email you again, and you can ask us to delete it. "Our mailing list" below says exactly what we keep
Push-notification token (if you allow notifications)	So we can tell you when your book is ready	Until you sign out on that device, or delete your account
Reports you submit (using the in-app report button)	So we can review flagged content	For as long as needed to review and act on the report
Basic safety/refusal records (e.g., if a photo couldn't be processed)	To keep the service safe and to improve it	Up to 12 months
Crash and diagnostic reports (if the app runs into an error)	To find and fix bugs so the app keeps working	30 days, then deleted automatically. These reports carry nothing that identifies you — no name, no account, no device ID, no IP address.
Where your photos were taken (only if your camera saved it into the photo)	To suggest a title for your book, like "Punta Cana · September"	A rounded, town-sized location — never the exact spot — stays with the book for as long as the book does. See "Where your photos say you were" below.
A billing record and a device record, which stay after you delete your account	The billing record is what we paid the AI services to make your pages. The device record stops a deleted account being used to claim the free allowance again on the same device	Kept with no end date. When you delete your account, the billing record's link to it is replaced by an internal number. The device record holds a one-way code made from a random number the app makes up on your device, when that device was last used, how much of each day's free allowance it has used, and whether we have blocked it. Neither holds your name, your email address, a photograph, a page or a file name.

We never see your card. Your card details go to Google, or to Stripe when you buy on our website, and never reach us — we are told what you bought, what it cost and that it went through, and nothing that could be used to charge you again. We collect no advertising identifier, and we use no analytics or advertising SDKs of any kind. We never ask your phone for your location — the app has no location permission and cannot see where you are. But the photos you pick often carry a location of their own, and we'd rather tell you what happens to it than leave you to find out. The section called "Where your photos say you were" explains it in full.

Why we are allowed to use it

Data-protection law asks us to say, for each thing we do, which rule lets us do it — our legal basis for it. This is the whole list.

What we do	The rule we rely on
Create and run your account, sign you in, reset your password, and send you the emails an account needs — confirming your address, confirming a deletion	Our contract with you. You asked for an account; this is what an account is.
Make the book: take your photo, send it to Replicate to be drawn, have Anthropic check the drawing will print, keep the pages and the PDF in your library, and tell you it is ready	Our contract with you. This is the thing you came here for.
Handle the photographs of people who did not sign up themselves — your children, your family, anyone else in the picture	Our legitimate interest in making the book you asked for, set against their privacy. The safeguards that came out of weighing those two are in this policy: one company receives the photograph, its hidden details are stripped out first, nothing is used to train an AI, and it is deleted as soon as its page is finished. Choosing the photographs is yours, and so is having the right to use them.
Suggest a title from the rounded place and the date your photos carry	Our legitimate interest in a book that names itself. Type your own title instead and nothing is lost.
Give out the free daily allowance, keep the device record behind it, and hold our own AI spending down	Our legitimate interest in sharing the allowance out fairly rather than having it farmed.
Keep security logs, run a firewall, limit how often something can be tried, and record that an AI service refused a photograph	Our legitimate interest in a service that stays secure and free of abuse.
Count pages opened and books made, and read crash reports	Our legitimate interest in knowing the app works. Neither one identifies anybody.
Read what you write to us, answer it, and act on a report	Our contract with you when you are asking about your own account or book; our legitimate interest in a safe service otherwise; and our legal obligations where a report concerns a child.
Send a notification to your phone	The permission you gave your phone. Switch notifications off there and it is withdrawn, with no effect on anything else.
Email you the sample pack you asked for, and a note when new free pages are published	The permission you gave when you checked the box on the form. The law calls this consent. Unsubscribe and it is withdrawn, with no effect on anything else.
Remember that you unsubscribed, and which of our pages and links you joined the mailing list from	Our legitimate interest in not emailing you again after you have said no, and in knowing which pages bring people to the list.
Delete your account, your books and your photographs when you ask, and be able to show that we did	Our legal obligation to do it, and to be able to prove it.
Keep the billing record of what your pages cost us after your account has gone	Our legitimate interest in our own financial records, and the law that says a company keeps its accounts.
Sell you a plan or a book, give you what you paid for, and take it back if it is refunded	Our contract with you. You asked to buy it; this is what buying it is.
Keep the record of a sale, and of the tax charged on it, after your account has gone	Our legal obligation. Tax law and company law say how long a business keeps its sales records, and that is longer than most accounts last.
Print the venue name you asked for on the pages of your books, on a Business plan	Our contract with you. You asked for it, and you can ask us to stop.

Where the rule is a legitimate interest, you can object to it. "Your choices and rights" below says how.

Signing in with Google

You can create an account or sign in with Google instead of a password. If you do, Google tells us your email address and a number that identifies your Google account. That is what we ask for and it is all we use. We never see your Google password, and we never send Google your photos, your books, or anything you make here.

On the web we do not even ask Google for your name. On an Android phone the sign-in sheet is Google's own, and its answer carries your name whether we asked for it or not — so we drop it without reading it, and it is never stored anywhere. We keep your email address and the Google account number because you asked us to — they are how we give you the account you signed up for, and how we know it is you next time. If you delete your account, the link to your Google account is deleted with it. You can also remove Trip2Art from your Google Account's settings at any time.

The "Continue with Google" button is ours, and nothing is sent to Google when it appears. Only if you press it does your browser go to Google's own sign-in page, and what happens there — including the ordinary information any website visit sends, such as your IP address — is Google's, under Google's own privacy policy: we do not control it and we do not receive it. If you would rather Google knew nothing about you, create your account with your email address instead. Everything in Trip2Art works the same way either way.

When you pay

Trip2Art has a free allowance, and you can pay for more. Here is what happens to your information when you do.

Your card never reaches us. In the Android app the payment is Google's own checkout, and on our website it is Stripe's: you type your card into their page, not ours, and there is no card form anywhere in Trip2Art. We are told what you bought, what it cost, that it went through, and nothing more.

The checkout is Google's. We sell Trip2Art in the United States, Australia, Azerbaijan, Bermuda, Hong Kong, India, Japan, New Zealand and Singapore. In the United States, Australia, Bermuda, Hong Kong, India, Japan, New Zealand and Singapore we are the seller and Google processes the payment; in some other countries Google is the seller of record and charges the tax. Either way the checkout itself is Google's, under Google's own privacy policy, and your billing address and payment details stay with Google.

On our website, the checkout is Stripe's. Stripe sells it to you as the seller of record, under Stripe Managed Payments, and takes the payment through Link, the service Stripe uses to take it; your bank statement shows LINK.COM. When you pay, we send Stripe the email address on your account, once you have confirmed it, so the checkout is filled in for you and Stripe's receipt reaches you, and a code that stands for your account, never your name, so the purchase comes back to it. Your card, your billing address and anything else you type there go to Stripe, under Stripe's own privacy policy, and stay with Stripe.

What we keep. The product you bought, the price and the currency the store charged, the tax it took, the two-letter country code the tax was worked out for, the store's own order and invoice numbers, and the receipt the store hands us so we can check later whether your plan is still running. The two-letter country is all we hold of where you are — not a street, not a postal code, not a town. We also record which version of our Terms was on screen when you bought, so that a question about what you agreed to has an answer a year later.

Why it outlives your account. Delete your account and your plan, your books and your photos go. The record of the sale does not: a business has to keep its sales and tax records, and a refund or a card dispute can still arrive months afterwards. What we do instead is cut the link — your account is replaced by an internal number, and the receipt itself is erased once nothing can need it again. What is left holds no name, no email address, no photograph and no page.

Free is still free. Nothing here applies if you never pay. No purchase record exists for an account that has not bought anything.

How we choose what to draw next

To decide what to draw next, our own Pinterest account reads Pinterest's list of popular coloring searches once a week. That involves no visitor and nothing about you: your browser never contacts Pinterest because of us, and nothing of yours is sent there.

How your photo is actually used

You pick photos from your own phone using your phone's built-in photo picker — we never ask for full access to your photo library.
Your photo is uploaded over an encrypted connection and sent to an AI image service to generate a black-and-white coloring-book page from it. We use Replicate, running the open-source Qwen image model. It is the only image service your photo goes to — there is no second one, and if Replicate is unavailable your book waits rather than being sent somewhere else.
The generated line-art page — never your original photo — is separately reviewed by Anthropic's AI (Claude) to check that it's clean and printable. Anthropic never sees your original photo.
Once your page (or your whole book) is finished, your original photo is deleted. Our target is minutes. An automatic sweep removes anything left over, and we aim to have every photo gone within a day. Photos you pick are sent to us only when you make your book. If you don't make it, they never leave your device.
Unlike your original photo, the finished black-and-white pages and your PDF book are not deleted after generation — they're the product you made, so they stay in your account until you delete them, and you can re-download and reprint them any time.

If you tap Send this page, we make a link that shows that page colored and uncolored to anyone who has it — never your photo, never your name. It works for 7 days and 20 opens, and you can stop it in the app.

If you hold a Business plan and ask us for a venue footer, the venue name you give us is printed at the bottom of each page of your books from then on, beside a QR code that opens trip2art.com. The cover, and a book with a frame, go without it. The code is the same on every venue's pages: it says only that the visit came from a venue's printed page, and nothing about you, your venue or your account. We keep the name for as long as your account exists.

Replicate, Anthropic and Google handle this data under their own terms. Anthropic's commercial terms with us include a data-processing agreement. Replicate works under its standard terms of service, and Google's Geocoding service works under Google's own terms.

Where your photos say you were

We never ask your phone for your location. The app requests no location permission, and it cannot see where you are.

Most cameras, though, write the spot into the photo itself. When you pick a photo, that comes along with it. Here is everything we do with it.

We blur it the moment it arrives. As your photos come in we read the location out of them and immediately round it off to a cell about five kilometers across. Five kilometers is enough to name a town. It is not enough to find a house, a street or a hotel. The rounded version is the only one we ever store — the exact spot your camera recorded is never written down anywhere in our systems.

We use it to name your book. One rounded point per book goes to Google's Geocoding service, which sends back the name of the place, so your book can call itself "Punta Cana · September" instead of "Untitled". Google gets the rounded point and nothing else — no photo, no email, no account, nothing that says the question came from you. If Google can't name it, or we can't reach them, nothing breaks: you just type your own title.

What we keep, and for how long. The rounded point and the place name sit with your book for as long as the book does, and they go when you delete the book or your account. Separately, we keep a short list of rounded points and the names they map to, so we never pay to ask about the same town twice. Nothing in that list points at you: it is a coordinate and a town name, the same pair any map already prints. It has no account, no book and no photo attached, so we keep it, and deleting your account does not remove it — there would be nothing of yours in it to remove.

We take it out of the photo. Before your photo is stored or sent to the AI service that draws your page, we remove the location and the other hidden details your camera saved in it, such as the time and the phone's make and model. We keep only what is needed to draw it: the picture itself, which way up it goes, and its colors. So the AI service never receives the exact spot. If you would rather the location never left your phone at all, most phones can remove it from a photo before you share it, and Trip2Art works just as well without it.

Where your data lives

Your photos, your books and your account are stored in Germany — in Amazon Web Services' Frankfurt region (eu-central-1). We would rather name the place than round it off:

Your photos and your finished pages sit in our storage there: the photos only until your book is done, the pages — and the coloring you add to them — for as long as you keep them.
Your account records are in our database, in that same region — your email address and account details, the bookkeeping about your books (titles, dates, statuses — never the images themselves), your push-notification token if you allow notifications, and any reports you submit.
Making a page sends your photo to one of the AI services named above. Both are US companies, so making your page sends your photo outside Germany. We do not promise a specific processing location and you should not read one into this.
Emails we send you — such as the link that confirms your email address or the note that your book is ready — go through Resend, an email service in the United States. If you write to us through the app, the message we send ourselves about it goes the same way. Resend receives your email address and the message, and keeps a copy of each email it sends for us for 30 days. If an email to you bounces, or you mark one as spam, Resend also puts your address on a list of addresses it will not send to, and keeps it there with no end date. It works under a data-processing agreement that is part of its terms with us.
App notifications, if you allow them — such as the note that your book is ready — go through Expo, a notification service in the United States. Expo receives your device's notification token and the note, which names your book. On an Android phone, Expo hands the note to Google's Firebase Cloud Messaging, which delivers it, so Google receives your phone's notification token and the note too.
Paying on our website goes through Stripe, in the United States. Stripe receives the email address on your account, which fills in its checkout for you, a code that stands for your account, and what you are buying. Your card and billing address you type into Stripe's page, never ours.
Checks for a newer version of the app go to Expo in the United States too, each time the app starts. That request carries a random number made up on your device the first time you ran the app, and which version you are running — not your name, your email, your account or anything from your photos. Uninstalling the app or clearing its data throws the random number away and a new one is made. It is how we can fix something in the app without waiting for a store release.

We are a United States company, and we keep your photos, books and account in Germany. If you are in the United States, they are sent to and stored in the European Union. In the other direction: making a page sends your photo to AI services run by US companies, so at that moment your photo leaves Germany, and it is deleted afterwards. The emails we send you go through Resend, app notifications through Expo and, on an Android phone, Google's Firebase Cloud Messaging, and payments on our website through Stripe, all in the United States.

Everyone outside our own systems who receives something, and what protects it. Each is named above; this is the same list in one place, with the safeguard for sending data out of Europe, which the law asks us to state.

Who	What they receive	Where	What protects it
Amazon Web Services	Everything we store: your photos while the book is being made, your pages, your PDF, your account record, our mailing list, our logs, our backups, and any mail you send to the addresses at the end of this policy	Germany (`eu-central-1`)	Its own data-processing terms. Nothing here leaves the European Union.
Replicate	Your photograph, with the hidden details already taken out of it, and nothing that says who you are	United States	Only its ordinary terms of service. There is no data-processing agreement with us and no transfer clause. What stands in place of one: it is the only company your photograph goes to, it receives no name, email address or account, the location and the other hidden details are removed before it is sent, and the photograph is deleted afterwards.
Anthropic	The black-and-white drawing. For a book with story captions, also the list of things drawn on each page and your language. Never your photo.	United States	A data-processing agreement in our commercial terms with it, carrying the standard contractual clauses the European Commission publishes for exactly this, and the United Kingdom's addendum to them for data from the UK.
Resend	Your email address, and every message we send you — which includes your book's title and, for a finished book, a link that opens it for 7 days	United States	A data-processing agreement that comes with its terms, carrying the same standard contractual clauses and the same UK addendum.
Expo	Your phone's notification token and the notification itself, which names your book; and, at each app start, the random number described above together with your app version	United States	Not settled yet, and we would rather say so. Notifications went live before these terms had been reviewed and that review is still outstanding. Switching notifications off in your phone's settings stops all of it.
Google (Firebase Cloud Messaging)	On an Android phone: your phone's notification token, and each notification we send it, which names your book. Expo hands both to it to deliver	United States	Not settled yet, as with Expo. Notifications went live before these terms had been reviewed.
Stripe (Link, under Stripe Managed Payments)	Only if you buy on our website: the email address on your account, so its checkout is filled in for you and its receipt reaches you; a code that stands for your account, never your name; and what you are buying. Your card and billing address go to Stripe directly when you type them on its page, and never pass through us	United States	For that purchase Stripe is the seller of record, under Stripe Managed Payments, and takes the payment through Link, its own payment service. What it does with your details is under Stripe's own terms and privacy policy.
Google	One rounded, town-sized point per book, so the place can be named — no photograph, no email address, nothing saying the question came from you. Separately: if you choose "Continue with Google", Google runs that sign-in itself. And mail you send us, together with a daily summary of messages written to us inside the app, is read in a mailbox Google hosts.	United States	Google's own terms for the place-name lookup and for sign-in. The mailbox is an ordinary one, so no data-processing terms cover the messages sitting in it.

To see any agreement this table names, write to privacy@trip2art.com and we will send you a copy.

Crash and diagnostic reports

When something in the app goes wrong, it can send us a short crash report so we can find the bug and fix it. A report is plain technical text: the error message, a technical stack trace (the internal trail that shows a developer where the error happened), the name of the screen it happened on, the app version, and which kind of device it was running on. That is the whole of it.

A crash report carries nothing that identifies you. We do not store a name, an email, an account link, a device ID, or an IP address with it — so we can see that a bug happened, but not who it happened to. If an error message happens to pick up anything that looks like photo data, that part is stripped out before the report is saved. We keep these reports for 30 days and then delete them automatically.

These diagnostics are entirely first-party: they go only to our own systems, under our own rules. We do not use any third-party crash-reporting or analytics service, and our build is set up to keep those out — a check fails the build if such a tool is ever added.

What we count

We count a handful of things, and this is all of it: how many times the front page was opened, how many accounts were created, and how many books were started, finished and paid for. Each is a single number per day.

There is nothing in those numbers about you. No cookie is set. No identifier is created, stored or hashed. The counts do not include your IP address or your browser's user-agent string, and they are not a record of visits — a day's traffic is one integer, so there is nothing in it to link back to a person, by us or by anybody else. Our security logs are separate, and are described below.

We do separate the front page's number into "people" and "automated", because search engines and link previewers open the page too and a single number would mostly be measuring them. To do that we look at the user-agent string your browser sends, decide which of the two counters to add one to, and then discard it. The counters do not store it.

We count these because we would otherwise have no idea whether the page works at all, and the usual way to find out — an analytics service and a cookie — would make the promises above untrue.

Where you came from

If you reach our website through a link that says where it came from — trip2art.com/?utm_source=reddit, say — and you create an account during that same visit, we save that label on your account, so we can tell which places are worth writing in. It is the label in our own link, the same for everyone who followed it, and nothing in it identifies you.

Nothing is stored in your browser for this. The label travels in the page's own links and is held by the page until you sign up; close the tab and it is gone. If you sign up in the app, or with Google on the website, no label is saved. Deleting your account deletes it with everything else.

The same goes for our mailing list: ask for the sample pack from a page you reached through such a link, and its label is saved with your email address.

Our mailing list

On our free printable pages you can ask us to email you a sample pack: up to six of our newest pages in one PDF. You do not need an account for it, and asking does not create one.

What we keep. Your email address, and a record of your consent: the exact sentence beside the box you checked, and when you asked for the pack. With them we note which of our free pages you asked from and, if a link brought you there, its label. We also note when we sent the pack and, if you unsubscribe, when you did. Your place on the list is not linked to a Trip2Art account, even if you have one.

What we use it for. To send you the pack, and a note when new free pages are published. Those are the two things the sentence you agreed to names, and we use your address for nothing else. We never sell it or share it with anyone else, and we never use it, or anything else on the list, to build a profile of you. If you ask for the pack again later, you join the list again. We add a fresh record of your consent and keep the earlier ones, with the date you unsubscribed if you did.

Who handles it. The list is in our database in Frankfurt, Germany, at Amazon Web Services. The email that brings you the pack goes through Resend, the service that sends all our email. No one else is given your address.

How to leave. Every email from the list has an Unsubscribe link, and it needs no account and no password: open it and press Unsubscribe. If your mail app shows its own Unsubscribe button, that works too, in one click. Or write to support@trip2art.com and we will take you off.

How long we keep it. Until you unsubscribe. After that your entry stays, marked with the date you left, only so that we do not email you again; write to support@trip2art.com and we will delete it. Deleting a Trip2Art account deletes the list entry for its email address as well. A copy in our backups is gone within 35 days, as "Backups" describes.

Security logs

Our servers keep a log of each request they receive: your IP address, the address (URL) you asked for, the time, and the user-agent string your browser or app sends. We use these logs to keep the service secure, to stop abuse, and to find and fix problems. They are stored in Frankfurt and deleted automatically after 30 days. Our firewall also keeps the same details for each request it blocks, for 7 days. We also keep an audit trail of the changes we make to our own systems — what changed, by whom and when — for 90 days.

Backups

We back the database up so that a failure cannot lose your books. A backup is a copy of the whole database as it stood at that moment, so something you have deleted can still sit inside an older copy for a while after it has gone from the live service.

Backups are held in Frankfurt with everything else and are only ever used to bring the service back. The longest a copy lives is 35 days, and then it is deleted automatically; the nightly copy we take ourselves is kept for 7 of those days.

Your photographs are in none of it. They are not in the database, and the storage they sit in has no backups and keeps no old versions — so when a photograph is deleted, that is the end of it.

What we never do

We never show you ads, and we never let anyone else show you ads in this app.
We never use third-party analytics, advertising or tracking SDKs, and this app has no advertising identifier. The only measurement we do is the daily counts described above, plus the label of the link you signed up through, and nothing in either identifies anyone. One thing does leave your phone on its own: the app's check for a newer version of itself, described under "Where your data lives".
We never sell your photos, your data, or access to either.
We never share your original photo with anyone except the AI service that draws your page — Replicate, and only Replicate — and never for anything but making your coloring book.
We never ask your phone for your location, and we never store the exact spot a photo was taken.
Where your data lives is stated plainly above, under "Where your data lives", rather than left unsaid.
We never send crash or diagnostic reports to a third-party crash-reporting or analytics service — the diagnostics we collect stay first-party, and our build blocks those tools from ever being added. There is one narrow exception and we would rather name it: if the part of the app that installs updates fails to start, the error it wrote down goes to Expo with the next update check, so that a bad update can be withdrawn.

Children's privacy

Trip2Art is not directed at children under 13, has no account for them and no separate login for them. Accounts are for people aged 13 and over. We do not knowingly collect personal information from children under 13. We do not screen the content of uploaded photographs — our AI providers apply their own filters and may decline a photo, but we make no claim to detect what a photo contains.

The photos you upload may show your children. We handle them like every other photo:

Your original photo is deleted once its page has been drawn — usually within minutes. An automatic sweep removes anything left over, and we aim to have every photo gone within a day. Photos you pick for a book you don't make never leave your device.
The pages made from it stay in your library until you delete the book or your account.
We do not use your photos, or the pages made from them, to train AI models.
You can report any page from inside the app, with the report button on that page.

If you believe a child has created an account, tell us at privacy@trip2art.com.

Your choices and rights

Delete your account: in the app, under Settings, or at trip2art.com/public/delete. Deleting your account removes your books, your photos (if any remain in transit), and your account data, typically within 24 hours. A book you have not finished, and its photos, are deleted at once. We keep a billing record of what making your pages cost us, with your account replaced by an internal number, and a record of each device you used, so that deleting an account cannot be used to claim the free allowance again on it. Neither holds your name, your email address, a photograph or a page.
Delete a single book: from your library, at any time.
Report content: every generated page has a report/flag button that sends a report directly to us.
Ask us questions: contact us at privacy@trip2art.com.
Ask for a copy of what we hold about you: write to privacy@trip2art.com and we will send it — your account record, the details of your books, and the pages themselves.
Ask for it in a portable form: the same request, answered as a machine-readable file you can take elsewhere. Your books are already PDFs you can download whenever you like.
Have something corrected: tell us and we will fix it. There is no screen for changing the email address on your account yet, so that one is a message to privacy@trip2art.com.
Object, or ask us to pause: where the rule we rely on is a legitimate interest — the table under "Why we are allowed to use it" says exactly where — you can object, and we stop unless we have a reason that outweighs yours. You can also ask us to stop using something while a question about it is still open.
Take a permission back: turn notifications off in your phone's settings, or unsubscribe from our mailing list. Either one withdraws that permission, and nothing else changes.
What we keep after the account has gone: the billing record with your identity replaced by an internal number, the device record that names no account, the place-name lookups, and the record of a photograph an AI service refused, which goes after 12 months. Not one of them holds your name, your email address, a photograph or a page. The account-deletion page lists all four.
How long we take: we answer within one month. If a request turns out to be complicated we will tell you that, and it can take up to three.
Complain to a regulator: you do not have to come to us first, and a complaint costs you nothing. In the European Union or the European Economic Area, complain to the data-protection authority — the law calls it a supervisory authority — of the country where you live, where you work, or where the thing you are complaining about happened. In the United Kingdom, complain to the Information Commission, which was called the Information Commissioner's Office until September 30, 2026. Elsewhere, your own country may have an equivalent authority.

Security

Your photo is sent over an encrypted (HTTPS) connection to the AI provider that generates your page. Our own photo and book storage runs in Amazon Web Services' eu-central-1 region, in Frankfurt.

Changes to this policy

If we change what we collect or how we use it — especially anything about photo processing — we will update this page before the change ships in the app, not after.

Contact us

Trip2Art is run by TheBloomsbridge LLC, a Florida limited liability company. It is the company responsible for your personal information under data-protection law.

Trip2Art · support@trip2art.com · privacy@trip2art.com

Child-safety concerns: childsafety@trip2art.com

The person responsible for your data

Asim Salimli, Founder of TheBloomsbridge LLC, is responsible for how Trip2Art handles your personal information. He is our data protection officer, our privacy officer and our person in charge of the protection of personal information. Email him at privacy@trip2art.com, call him at +1 267-265-4199, or write to him at the address at the foot of this page.

If you are in India, he is also our grievance officer. He acknowledges your complaint within 48 hours and resolves it within one month of receiving it.

Rendered from the Trip2Art privacy-policy source document, the same text the app and the store listings are generated from.