TravelCo 智能旅遊助手

Our Privacy Policy

Effective Date: 1 January 2025

Last Updated: 7 August 2025
 

​

1  Introduction

TravelCo (“we”, “us”, “our”) is an AI-powered travel-planning companion. This Privacy Policy explains how we collect, use, share and protect your information when you use our mobile application and related services (collectively, the “App”).

We help you plan and manage trips—including itinerary building, expense tracking and real-time assistance—while giving you clear control over your data.

2  Information We Collect

The exact data we collect depends on how you use the App and the permissions you grant. We apply the principle of data minimisation and collect only what is necessary.

2.1  Account & Authentication Data

• Email address and display name (to create and manage registered accounts)

• Sign-in tokens for Apple ID or Google accounts (to authenticate you securely)

• Anonymous device identifier (to enable guest mode and enforce usage limits)

​

2.2  Travel Planning Data

​

• Trip details such as destination, travel dates, budget amounts and personal notes

• Itinerary items: activities, places, timestamps and task-completion status

• Companion names you add for group travel

• Documents you upload (e.g., visa scans, insurance proofs, currency notes)

2.3  Expenses & Finance

• Expense records: amount, currency, category, date, description and location

• Budget limits, remaining balances and settlement calculations for shared costs

• Receipt photos you choose to upload

​

2.4  Bookings & Reservations

​

• Flight, hotel, restaurant, attraction and local transport bookings that you enter or import

2.5  Location & Map Data

​

• GPS coordinates when you grant location permission (collected only while the App is in use)

• Places you search, view or request directions for

• Optional location history, stored locally unless you enable cloud sync

​

2.6  AI & Communication

​

• Chat queries sent to our AI travel assistant

• Preference settings such as travel style or dietary needs

• Messages you send to customer support

​

2.7  Tasks & Lists

​

• Packing lists, to-dos, shopping items, decisions and their completion status

​

​

2.8  Technical & Analytics

​

• Device model, operating-system version and App version

• Anonymous usage metrics, crash logs and performance data

​

2.9  Media You Provide

​

• Photos, videos and notes you capture or upload inside the App

​

3  How We Use Your Information

​

• Core services: build itineraries, track expenses, coordinate group travel

• Personalisation: tailor AI suggestions to your interests and past trips

• Sync & backup: allow optional iCloud/CloudKit synchronisation across Apple devices

• Security: authenticate users, detect fraud and enforce freemium limits

• Improvement: analyse aggregated usage data to fix bugs and develop features

• Legal compliance: meet legal obligations and enforce our Terms of Service

​

We never sell your personal data.

​

4  Data Sharing With Trusted Partners
 

We share data only with processors essential to run the App, and we limit each partner to the minimum information required.

• Google Gemini AI – receives anonymised travel-context queries to generate recommendations.

• Firebase Authentication – stores email addresses (if provided) and encrypted sign-in tokens.

• RevenueCat – holds anonymous user identifiers and purchase records to manage subscriptions.

• Apple CloudKit – synchronises trip data and user settings when you enable iCloud sync; data is end-to-end encrypted.

• Apple WeatherKit – uses location coordinates you provide at query time to fetch weather forecasts; Apple does not retain this information.

• Google Maps Platform – processes location coordinates and search queries for maps and routing; API keys are secured in the iOS Keychain.

We do not share data with advertising networks.

​

5  Storage & Security

​​

• API keys are stored securely in the iOS Keychain and rotated regularly.

• Access to production data is restricted to authorised staff who use multi-factor authentication.

​

Retention periods

• Account data: kept while your account is active

• Trip data: retained until you delete it.

• Crash and analytics logs: anonymised and kept for up to 36 months.

​

6  Your Rights & Controls

​

• Access and export – download a copy of your data in Settings.

• Edit – update or correct personal information at any time.

• Delete – remove individual items or delete your entire account.

• Opt-out – disable analytics, marketing emails or location access in Settings.

• Sync control – switch CloudKit synchronisation on or off per device.

​

7  International Transfers

Your data may be processed outside your home country by our global service providers. 

​

8  Children’s Privacy

TravelCo is not directed to children under 13. We do not knowingly collect data from minors. Parents may request deletion of any child-related data by contacting us.

​

9  Subscriptions

​

• Free tier: includes 15 AI queries per day.

• Premium tier: offers unlimited AI, advanced analytics, offline maps and priority support.

• Payments are processed by Apple; we do not store payment-card details.

10  Analytics

We collect only anonymous analytics to measure feature adoption and App stability. You can disable analytics in Settings without affecting core functionality.

​

11  Policy Updates

​

We may update this Policy to reflect changes in law or our services. You will receive at least 30 days’ notice of any material changes via in-App notification and email.

​

13  Contact Us

• admin@xco-ai.com

This version supersedes previous editions as of 7 August 2025.