Privacy Policy
Last updated: November 10, 2026
Who we are
HibiTrip ("HibiTrip", "we", "us") is a travel companion app and website operated by RTV CONSULTING GROUP, 4238 Carteret Dr, Philadelphia, PA 19114, USA.
RTV CONSULTING GROUP is the controller of your personal data. This policy applies to:
- the HibiTrip mobile apps for iOS and Android,
- the HibiTrip web app at app.hibitrip.com,
- the website hibitrip.com, including shared wishlist and visited-places pages.
The HibiTrip web app
The web app at app.hibitrip.com lets you plan trips in a browser. You sign in with the same account as in the mobile app, and your wishlists, trips and visited places are the same on web and on mobile. The web app is for planning only. It has no offline maps, Guide Mode, location sessions, navigation, track recording, photo upload or ads.
Contact from the EU, the EEA and the UK. We are based in the USA and have no office in the EU, the EEA or the UK. Send any question or request about your personal data to support@rtvcg.com, or by post to the address above. You can also contact the data protection authority in your country.
Information we collect
- Account information. When you sign in with Apple or Google, we receive your name, email address and a unique identifier from that provider. If you use Sign in with Apple and hide your email, we receive an Apple relay address. If you sign up with email, we store your email address and a protected (hashed) password.
- Location data. With your permission, the mobile app uses your device's precise location to center the map, show places near you, help you mark the places you visit, and run Guide Mode, navigation and track recording. Only Guide Mode, navigation and track recording use your location while the app is in the background, and only while that session is active. On Android you then see a notification; on iOS you see the system location indicator. When the session ends, background location stops. For the web app, see "Location in the browser".
- Recorded tracks. Tracks that you record stay on your device. We do not upload them to our servers. You can export a track as a GPX file; you then choose where it goes.
- Content you create. Wishlists, saved places, visited places, trips and their stops, notes, and private photos you attach to a visited place.
- Usage data. Screens viewed, features used and similar events, to fix bugs and decide what to improve. We send them to Amplitude (see "Sharing your information"). In the mobile apps and the web app, in all regions, we collect this only after you accept analytics. The data includes a random device ID, a session ID, the screens and features you use, the browser or device type, and the language. Amplitude also receives your IP address and uses it to estimate your approximate location (country, region and city). When you are signed in, the app uses an internal HibiTrip user ID as your user ID in Amplitude. We do not send your email address to Amplitude. We do not send your exact coordinates to analytics.
- Advertising software (mobile apps only). The mobile apps contain Google's ad software (Google Mobile Ads SDK, "AdMob"). The software does not start unless ads are switched on in the app and you have given consent in Google's consent form (Google User Messaging Platform, "UMP"). Until then, the software does not start and ad measurement is delayed. After it starts, it can send Google technical data, such as your IP address, device model and operating system, and on Android the advertising ID, unless you deleted it in your device settings. You can change your ad consent at any time in Settings > Ad privacy. On iOS we do not ask for tracking permission (App Tracking Transparency), so the app does not give Google your iOS advertising identifier.
- Device information. Operating system, device model, browser type and app version, for compatibility and troubleshooting.
We do not sell anything in HibiTrip at the moment. We do not collect payment card data.
How we use your information and our legal bases
| Purpose | Data | Legal basis (EU/EEA/UK) |
|---|---|---|
| Provide your account, map, search, wishlists, trips, visited places and photos | Account, location, content | Performance of our contract with you |
| Guide Mode, navigation, track recording and "near me" features | Precise location | Performance of our contract with you, because you ask for the feature. The app reads your location only after you allow it in the device or browser permission. You can turn the permission off at any time in your settings |
| Recommend places you might like | Wishlists, visited places, usage data | Our legitimate interest in a useful service. Recommendations are suggestions only. We make no decisions about you that have legal or similarly significant effects |
| Product analytics (Amplitude) | Usage and device data, IP address, internal user ID | Your consent, in the mobile apps and on the web, in all regions. You can withdraw it at any time (see "How to change your choice") |
| Ad software in the mobile apps (AdMob); ads, when we switch them on | IP address, device data, Android advertising ID | Your consent, given through Google's consent form (UMP). The software does not start without it. You can change it in Settings > Ad privacy |
| Security, fraud prevention and abuse handling | Account, device data, server logs | Our legitimate interest in a secure service |
| Answer support and data-rights requests | Account, messages | Performance of our contract; legal obligation |
| Comply with the law | As needed | Legal obligation |
Location in the browser
The web app asks for your location only when you use an action that needs it, such as "Center the map on me" or "Search near me". Your browser shows its own permission prompt. You can say no, and the web app still works: you can search for a place by name. If you say yes, the web app sends your position to our server only to center the map and find places nearby. We do not save it in your account or in a location history. On the web we do not run location sessions, we do not record the places you visit, and we do not track you in the background. You can change the permission in your browser settings at any time.
Cookies and browser storage (web app)
Here "cookie" also means similar browser storage, such as local storage and IndexedDB. The web app uses this storage:
| Item | Purpose | Type | How long it lasts |
|---|---|---|---|
| Sign-in tokens (access token, refresh token) | Keep you signed in and call our API for you | Strictly necessary | Access token: 60 minutes. Refresh token: 7 days; each time the app renews your sign-in, a new token replaces the old one. Both are removed when you sign out. Both stop working when you request account deletion |
| Offline copy of your data (profile, wishlists, visited places, trips) | Show your data quickly and when the connection drops | Strictly necessary | Until you sign out or clear browser data |
| Language and units | Remember the language and units (km or miles) that you chose | Strictly necessary, because you asked for them | Until you clear browser data |
| Map settings (layers, route options, hints already seen) | Remember how you set up the map | Strictly necessary, because you asked for them; not personal data by themselves | Until you clear browser data |
| Your analytics choice (accepted or rejected) | Remember your answer to the banner | Strictly necessary | Until you change it or clear browser data |
| Amplitude identifiers (cookie with device ID and user ID, session ID, queued events) | Count screens and features used, to fix bugs and decide what to build | Consent; never set before you accept | Up to 12 months, or until you clear browser data |
We store the strictly necessary items without asking, because the web app cannot work without them or because you asked for them.
The web app and hibitrip.com show no ads and use no advertising or tracking cookies. The public pages of hibitrip.com use no analytics. hibitrip.com can set one cookie (i18n_redirected) that remembers your language. When you use Sign in with Google or Apple, their pages may set their own cookies under their own privacy policies.
How we ask for consent
- The first time you open the mobile app or the web app, a banner asks about analytics. All users see it, in all regions.
- "Accept" and "Reject" have the same size and style, and nothing is preselected.
- We start Amplitude only after you press Accept. Before that, we send no analytics event and set no Amplitude identifier.
- Until you choose, analytics stays off.
If you accept and later change your mind, we stop analytics at once. Events recorded before you changed your mind can still be sent in the next few seconds. Withdrawing consent does not affect analytics collected before. The Amplitude cookie stays in your browser but we no longer use it; to remove it, clear your browser data.
How to change your choice
In the mobile app, open Settings > Analytics. In the web app, open Profile > Settings and use the Analytics switch. You can do this at any time, and analytics stops at once. Withdrawing is as easy as accepting. In the web app you can also clear your browser data; this removes every item in the table, and you will need to sign in again.
Sharing your information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
We share data only with:
- Service providers (processors) that work for us under contracts that limit how they use your data:
- Microsoft Azure — hosting of the web app (Azure Static Web Apps), the API, the database and your private photos, in the USA (West US 2 region).
- Amplitude — product analytics; only after you accept.
- Twilio SendGrid — sending account emails, such as password reset codes.
- MapTiler — map tiles. Your browser and app do not contact MapTiler: the map asks our server, and our server asks MapTiler. MapTiler does not receive your IP address or account details.
- Geoapify — online route building. Our server sends the start, stop and end points of a route to Geoapify, without your account details or IP address.
- Independent controllers, which use data under their own privacy policies:
- Apple and Google, for sign-in.
- Google, for the ad software in the mobile apps (see "Advertising software").
- The OpenStreetMap Foundation (Nominatim service), for place search and for finding the address of a point on the map. Our server sends the search text or the coordinates of the point, without your account details or IP address.
- People you choose to share with. If you create a share link for a wishlist, or make your visited places public, anyone with the link can see the places in that list and your user name. If your user name looks like an email address, we do not show it. Photos are never included. You can turn sharing off at any time.
- Authorities, if the law requires it, or to protect rights, property or safety.
- A buyer or successor, if our business is sold or merged, under the same protections.
International transfers
We are based in the USA, and we store your data in the USA. Our providers may process data in the USA and other countries. When we transfer personal data from the EU, the EEA, the UK or Switzerland to a provider, we rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses. You can ask us for a copy of these safeguards.
How long we keep your data
- Active account. We keep your account data while your account is active.
- Browser storage (web app). As shown in the table under "Cookies and browser storage".
- Account deletion. You can request deletion in the mobile app or the web app: Profile > Help & Support > Request account deletion. When you confirm, we deactivate your account at once and sign you out on every device, mobile and web. Thirty days later we permanently delete your account, location history, wishlists, trips and photos. If you change your mind, email support@rtvcg.com within those 30 days and we can cancel the request. Copies in our database backups are deleted automatically within 35 days after that. We keep data after deletion only where the law requires it, and only as long as that need lasts.
- Analytics data. Amplitude keeps event data until we delete it. You can ask us to delete the analytics data linked to you (see "Your rights").
- Support messages. We keep them as long as we need them to answer your request and any follow-up questions about it.
- Server logs. We keep technical logs for a short time for security and troubleshooting. Some error records can contain search text or the coordinates of a request that failed.
Your rights
Depending on where you live, you have the right to:
- access your personal data and get a copy of it,
- correct it,
- delete it,
- restrict or object to some processing, including processing based on our legitimate interests (for example, recommendations and security),
- receive your data in a portable format,
- withdraw consent at any time, without affecting processing done before,
- complain to a data protection authority, for example in the EU country where you live.
You can request account deletion in the app (Profile > Help & Support > Request account deletion). For other requests, email support@rtvcg.com. We answer within one month (EU, EEA and UK) or within the period that the law of your US state sets, and we may need to confirm your identity first.
Children's privacy
HibiTrip is not directed at children under 16, and we do not knowingly collect personal information from them. If you think a child has given us data, contact us and we will delete it.
Security
We protect your data with encryption in transit, access controls and private storage for your photos. No system is fully secure, so we cannot guarantee absolute security.
Changes to this policy
We may update this policy as HibiTrip changes. We will update the "last updated" date and, for material changes, tell you in the app or by email before the change takes effect.
Contact us
RTV CONSULTING GROUP, 4238 Carteret Dr, Philadelphia, PA 19114, USA Email: support@rtvcg.com