PRIVATE PREVIEW · UPDATED NOVEMBER 2, 2026
Privacy & your data
Triply helps you discover places and plan trips. This notice describes the current private-preview application. Public launch remains subject to confirming service-provider terms and retention arrangements.
Operator & privacy contact
Triply is operated by Ryan Fernandez in a personal capacity. For support, privacy questions or data requests, email ryanjosefernandez1@gmail.com. Do not email passwords, payment details or identity documents.
What Triply uses
- Sign-in: the hosting/sign-in service supplies an account identifier and email, and may supply a display name. Triply uses the verified identifier for ownership and permissions; when no identifier is supplied, the existing sign-in integration derives a namespaced identifier from the email. Email is not published on your profile.
- Your workspace: trips, dates, destinations, saved places, notes, activities, stays and reservation details you choose to enter. Do not enter passwords, passport numbers, payment-card details or health information.
- Community: profile details, optional avatar, following relationships, reactions and snapshots of trips you explicitly publish. Profile details and social relationships are visible to people who can access the site. Private trip notes and reservation records are excluded from shared snapshots.
- Submissions and moderation: place suggestions, source links, review status, reasons and history. Pending and rejected submissions are limited to their submitter and authorized reviewers.
- Security: bounded request counters, duplicate-prevention receipts and error incident references. Hosting services also necessarily handle network requests, including IP addresses and technical metadata; their log and backup retention must be confirmed before public launch.
Why it is used
To provide the features you request, protect private data, prevent abuse and duplicate actions, and maintain reliable place information. The app has no advertising, cross-site analytics or session-replay integration, and no app mechanism to sell personal data or share it for targeted advertising. It does not request your device location. Choosing a city or entering coordinates is not device-location tracking.
External services
OpenAI Sites and Cloudflare support hosting, sign-in, database and image storage. City maps request map styles/tiles from OpenFreeMap and OpenStreetMap; these requests can reveal your IP address and the map area you view. The homepage globe and illustrated-map geography are served with Triply. Leaflet scripts are served locally. When you explicitly request a supported travel estimate, the server sends stop coordinates and travel mode to Geoapify; it does not send your trip notes or reservation reference. External directions and venue links open the chosen provider, whose own notice applies. Triply suppresses page referrers by default. OpenStreetMap tile requests send only the site origin (such as https://triply.website), never a private trip path or query string, to identify the site to the map provider.
Storage and retention
Workspace records remain until you remove them or use the deletion controls below. Unpublishing removes the shared-trip snapshot while keeping your private trip. Profile photo metadata is stripped before storage. Deletion removes the current profile photo; a cleanup receipt remains if file deletion needs retrying. Approved place information and moderation records with account identifiers replaced remain for catalog integrity and source/rights attribution. A data removal request cannot recall independent copies previously created by other travelers. Platform backups, security logs and sign-in records are separate from the app’s live database; deletion from those systems is not verified here.
Your choices and rights
You can edit your profile, remove saved places, unpublish or delete trips, download your data and delete your Triply workspace. Depending on your jurisdiction, you may also have rights to correction, restriction, objection, portability or deletion and to complain to a data-protection authority. These controls are provided to every signed-in user, regardless of statutory thresholds. No proof-of-identity documents are requested; self-service actions use your authenticated session.
This private preview is for invited users and is not offered as a children’s service. Intended age range, applicable legal bases and international-transfer arrangements must be settled before public registration opens.