ImpulsTrip Privacy Policy

Last Updated: May 1, 2026 Effective Date: May 1, 2026

1. Introduction

ImpulsTrip ("ImpulsTrip," "we," "our," or "us") is a mobile-first travel discovery platform that connects people through shared trips, experiences, and travel content. We are committed to protecting your privacy and handling your personal information with care, transparency, and respect for applicable law.

This Privacy Policy describes how we collect, use, store, disclose, and process personal information when you use the ImpulsTrip iOS and Android applications and any related services (collectively, the "App" or "Services"). This includes all current features of the App - including trip discovery, identity verification, and user profiles - as well as upcoming social and content features such as posts and short-form video ("Clips").

By downloading, accessing, or using the App, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

Note: If you are located in the European Economic Area (EEA), the United Kingdom (UK), Canada (including Quebec), or California, additional jurisdiction-specific rights and obligations apply. Please refer to the relevant sections below.

2. Who We Are and How to Contact Us

ImpulsTrip is the data controller responsible for personal information collected through the App. Our primary user base is located in Canada, and we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25), as well as other applicable international privacy laws.

Contact Information:

General inquiries and privacy requests: info@impulstrip.com

We will respond to all legitimate privacy requests within 30 days, or within the timeframe required by applicable law.

3. Information We Collect

3.1 Information You Provide Directly

When you create an account or use the App, you may provide:

Email address
Phone number
Username and display name
Date of birth
Gender
Profile photos
Messages and chat content
Trip content, descriptions, and posts you create

3.2 Social and Video Content (Clips)

As ImpulsTrip expands its social features, users will be able to share short-form video content ("Clips"), follow other users, and interact with community posts. When you use these features, we collect:

Short-form video content you record or upload (Clips)
Captions, hashtags, and descriptions attached to your content
Reactions, comments, and interactions with other users' content
Social graph data, including accounts you follow and accounts that follow you
Content visibility preferences (public, followers only, private)
Engagement metrics associated with your content (views, likes, shares)

Note: Video content and social interactions are subject to the same data security, retention, and moderation standards described in this Privacy Policy. You control the visibility of your content through your in-app settings.

3.3 Identity Verification Information

To maintain a safe and authentic community, ImpulsTrip requires identity verification during onboarding or when account security requires it. During this process, we collect:

A live selfie image captured through your device camera, used solely to confirm you are a real person through face comparison

This biometric data is subject to the heightened protections described in Section 6.

3.4 Location Information

With your explicit permission, we collect your precise GPS location while you are actively using the App. Location data is used to display nearby trips, experiences, and travel content relevant to your current area. We do not collect location data in the background.

You may withdraw location permission at any time through your device settings. Some features may be limited if location access is disabled.

3.5 Automatically Collected Information

When you use the App, we automatically collect certain technical and usage data, including:

Device information (device type, model, operating system version)
App usage data and interaction logs
Diagnostic and crash data
IP address
App version and language settings
Authentication and session logs
Content engagement signals (views, time spent, interactions)

3.6 Information from Third Parties

We may receive limited information from third-party service providers (such as identity verification or payment processors) as necessary to operate the App. We do not purchase personal data from data brokers.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

To create and manage your user account
To provide, operate, and improve the App and its features
To enable trip discovery, social features, and community interactions
To surface Clips and social content relevant to your interests and location
To verify your identity and maintain platform safety and authenticity
To moderate user-generated content, including photos, videos, and posts
To display nearby trips and experiences based on your location
To communicate with you about your account, updates, and support matters
To improve App performance and reliability through diagnostic data
To detect, prevent, and respond to fraud, abuse, and security incidents
To enforce our Terms of Service and community guidelines
To comply with applicable legal obligations

We do not use personal data for advertising profiling. We do not sell personal information to third parties for their own marketing or commercial purposes.

5. Legal Bases for Processing (GDPR / UK GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), we process your personal data under the following legal grounds:

Contractual Necessity (Article 6(1)(b)): Processing required to create your account, provide the Services, and fulfill our obligations - including identity verification, trip discovery, social features, and account management.

Consent (Article 6(1)(a)): Processing based on your explicit permission — including access to your precise location, biometric identity verification, and any special categories of data. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Legitimate Interests (Article 6(1)(f)): Processing necessary for our legitimate business interests, such as fraud prevention, content moderation, platform security, and improving the App - where these interests are not overridden by your rights and freedoms.

Legal Obligation (Article 6(1)(c)): Processing required to comply with applicable laws, regulations, court orders, or lawful requests by public authorities.

Note: For biometric and special category data (Article 9 GDPR), we rely exclusively on your explicit consent. You may withdraw this consent at any time by contacting info@impulstrip.com.

6. Biometric and Face Verification Data

ImpulsTrip uses face verification technology to promote a safe, authentic community. We treat biometric data with the highest standard of care and apply heightened protections beyond what we apply to other personal information.

6.1 What We Collect

A live selfie image captured during onboarding or account security review
Face comparison is performed using Amazon Web Services (AWS) Rekognition

6.2 How We Use It

Biometric data is used solely and exclusively to confirm that a user is a real person. It is never used for advertising, analytics, AI model training, marketing profiling, or any secondary purpose beyond identity verification.

6.3 Retention and Deletion

The live selfie image is automatically deleted within 3 days of completed verification
A verification status record (e.g., "verified" or "failed") is retained for the duration your account remains active
Upon account deletion, all associated face verification data is permanently deleted

6.4 Jurisdiction-Specific Biometric Obligations

Where required by applicable biometric privacy law - including but not limited to the Illinois Biometric Information Privacy Act (BIPA), Texas Capture or Use of Biometric Identifier Act (CUBI), Washington My Health MY Data Act, and equivalent Canadian provincial legislation - we commit to:

Obtaining your explicit written consent prior to collecting biometric data
Maintaining and publishing a biometric data retention schedule
Not selling, leasing, trading, or otherwise profiting from biometric identifiers or templates
Protecting biometric data using reasonable security standards no less protective than those applied to other sensitive personal data
Destroying biometric data within the timeframe required by applicable law

Note: Residents of Illinois, Texas, Washington, or jurisdictions with specific biometric privacy statutes may contact info@impulstrip.com for jurisdiction-specific disclosures and consent forms.

7. Social Features and Video Content (Clips)

ImpulsTrip is introducing social features that allow users to share short-form video content ("Clips"), follow other travelers, react to posts, and engage with community content. This section describes how we handle data related to these features.

7.1 Content You Post

When you create and share Clips or other social content, that content - including the video, audio track, captions, and associated metadata - is stored on our secure infrastructure and displayed to other users in accordance with your visibility settings.

You control who can see your content through your in-app privacy settings:

Public: visible to all ImpulsTrip users
Followers only: visible only to users you have approved
Private: visible only to you

7.2 Content Moderation

All user-generated content - including Clips, photos, captions, and comments -may be reviewed using automated moderation tools to detect content that violates our Community Guidelines, including explicit, violent, fraudulent, or otherwise prohibited material.

Flagged content may be reviewed by trained human moderators operating under confidentiality obligations. ImpulsTrip does not use your uploaded videos or images to train external AI models.

7.3 Social Graph Data

When you follow other users or interact with content, we collect and store your social connections and engagement history to provide you with a personalized feed and relevant trip recommendations. This data is used only within the App and is not sold or shared with third parties for their own purposes.

7.4 Audio in Video Content

When you record a Clip within the App, the audio captured as part of your video recording is processed and stored as part of that video. The App does not record, capture, or transmit audio independently of video content you deliberately create and post. The App does not access your microphone in the background.

7.5 Retention of Social Content

Clips, posts, comments, and social interactions you create are retained for as long as your account is active. You may delete individual pieces of content at any time through the App. Upon account deletion, all associated social content is permanently removed, except where retention is required by law or ongoing legal proceedings.

8. Camera and Photo Library Access

ImpulsTrip may request access to your device camera and photo library for the following purposes:

To capture a live selfie for identity verification
To upload profile photos and trip content
To record short-form video content (Clips) when you initiate a recording

Camera and microphone access is activated only while the App is in active foreground use and only when you initiate a recording or photo action. ImpulsTrip does not access your camera or microphone in the background at any time.

9. Location Data

Location data is collected only with your explicit permission and only while the App is actively in use in the foreground.

We use your location to display nearby trips, experiences, and Clips from other travelers in your area. We do not store a history of your location movements. Your precise location is never displayed to or shared with other users.

You may withdraw location permission at any time through your device settings. This will limit location-based features but will not affect your ability to use the rest of the App.

10. How We Share Your Information

ImpulsTrip does not sell personal data. We do not share your information for cross-context behavioral advertising or with data brokers.

We may share limited personal information only in the following circumstances:

10.1 Service Providers

We share data with trusted third-party service providers strictly to the extent necessary to operate the App. Current providers include:

AWS Rekognition - biometric identity verification (face comparison)
Cloud infrastructure providers - secure data storage and hosting in North America
Apple In-App Purchase - payment and subscription processing
Content moderation tools - automated and human review of user-generated content

All service providers are bound by data processing agreements requiring them to process data securely, solely for specified purposes, and in compliance with applicable privacy law. Service providers are prohibited from using your data for their own commercial purposes.

10.2 Other Users

Content you choose to share publicly - including your profile, trips, Clips, and social interactions - will be visible to other ImpulsTrip users in accordance with your privacy settings. We do not share your private data (such as your email address, phone number, or exact location) with other users.

10.3 Legal and Compliance Disclosures

We may disclose your personal information when required:

In response to a lawful court order, subpoena, or legal process
To comply with applicable laws, regulations, or government requests
To prevent, investigate, or respond to fraud, security incidents, or threats to safety
To enforce our Terms of Service or protect the rights, property, or safety of ImpulsTrip, our users, or the public

Where permitted by law, we will notify you of such disclosures before they occur.

10.4 Corporate Transactions

If ImpulsTrip undergoes a merger, acquisition, reorganization, bankruptcy, dissolution, or sale of all or a portion of its assets, your personal information may be transferred to the successor entity. We will notify you via in-app notification or email before your personal information becomes subject to a materially different privacy policy. Where required by law, you will have the opportunity to request deletion of your data before any transfer takes effect.

10.5 With Your Consent

We may share your information with third parties where you have provided explicit, informed consent to do so.

11. International Data Transfers

ImpulsTrip stores user data on secure cloud infrastructure hosted primarily in North America. Some of our service providers may process data in other jurisdictions, including the United States and countries within the European Economic Area.

If you are located in the EEA or the United Kingdom, your data may be transferred to countries that do not provide the same level of data protection as your home jurisdiction. Where required, we rely on the following safeguards:

Standard Contractual Clauses (SCCs) approved by the European Commission
UK International Data Transfer Agreements (IDTAs) for transfers from the UK
Adequacy decisions issued by relevant supervisory authorities

For details about the specific safeguards applicable to your data, contact us at info@impulstrip.com.

12. Data Security

ImpulsTrip implements administrative, technical, and physical safeguards to protect your personal information against unauthorized access, loss, misuse, disclosure, or alteration. These include:

Encryption of data in transit (TLS/HTTPS)
Encryption of sensitive data at rest
Access controls limiting data access to authorized systems and personnel
Regular security assessments and monitoring for suspicious activity

No security system is entirely impenetrable. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant regulatory authorities as required by applicable law, within the timeframes prescribed by law.

13. Data Retention

We retain personal data only as long as necessary to fulfill the purposes described in this Privacy Policy, or as required or permitted by law.

Face verification images: deleted within 3 days of completed verification
Verification status records: retained until account deletion
Account data, profile information, and user content (including Clips): retained until you delete your account or request deletion, subject to legal holds
Social interactions (follows, comments, reactions): retained until deleted by you or upon account deletion
Legal and compliance records: retained as required by applicable law, which may exceed account deletion periods

When data is no longer required, we securely delete or anonymize it in accordance with our internal data retention schedule.

14. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

14.1 Rights Available to All Users

Access: Request a copy of the personal data we hold about you
Correction: Request that inaccurate or incomplete data be corrected
Deletion: Request that we delete your personal data, subject to legal retention obligations
Withdraw Consent: Withdraw any previously given consent at any time

14.2 Additional Rights for EEA / UK Users (GDPR / UK GDPR)

Right to restriction of processing
Right to object to processing based on legitimate interests
Right to data portability - receive your data in a structured, commonly used, machine-readable format
Right not to be subject to solely automated decision-making with legal or significant effects
Right to lodge a complaint with a supervisory authority in your country of residence

14.3 Rights for Canadian Users (PIPEDA / Quebec Law 25)

Right to access and correct personal information held about you
Right to withdraw consent where processing is consent-based
Right to file a complaint with the Office of the Privacy Commissioner of Canada

Quebec residents have additional rights under Law 25, including the right to data portability, the right to be informed of automated decision-making that significantly affects them, and the right to object to such decisions.

14.4 Rights for California Residents (CCPA / CPRA)

Right to know what personal information we collect, use, disclose, or share
Right to delete personal information we hold about you
Right to correct inaccurate personal information
Right to opt out of the sale or sharing of personal information (we do not sell personal information)
Right to limit the use of sensitive personal information
Right to non-discrimination for exercising your privacy rights

14.5 How to Exercise Your Rights

To exercise any of the rights above, contact us at info@impulstrip.com. We will respond to all verifiable requests within 30 days. In certain circumstances, we may extend this period by an additional 30 days with prior notice. We may request additional information to verify your identity before fulfilling a request.

15. Automated Decision-Making

ImpulsTrip does not make decisions with legal or similarly significant effects based solely on automated processing of personal data.

Automated tools - including AWS Rekognition for identity verification and content moderation systems for user-generated content - assist with platform operations. Where an automated process produces an outcome that affects your access to features (such as a failed identity verification), you may contact us at info@impulstrip.com to request human review of that decision.

16. Payments and Subscriptions

All payments and subscriptions are processed through Apple's In-App Purchase system. ImpulsTrip does not collect, store, or have access to your payment card details, financial account information, or billing data. All payment transactions are governed by Apple's terms and privacy policy.

17. Children's Privacy

ImpulsTrip is not directed to or intended for use by children under the age of 13 (or under 16 where required by applicable law, including in the EEA and UK).

We do not knowingly collect, use, or disclose personal information from children below the applicable age threshold. Social and video features (Clips) are available only to users who have completed identity verification confirming they meet our minimum age requirement.

If you believe a child has provided us with personal information, please contact us immediately at info@impulstrip.com and we will take prompt steps to delete that information.

18. Third-Party Services and Links

The App may contain links to or integrations with third-party websites, services, or platforms. ImpulsTrip is not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access through or in connection with the App.

Current third-party service providers whose practices directly affect your data include AWS Rekognition (identity verification) and Apple (payment processing). Their data practices are governed by their own privacy policies.

19. Do Not Track

Some browsers and mobile operating systems include a "Do Not Track" (DNT) feature. Currently, our App does not respond to DNT signals because no uniform technical standard for recognizing them has been adopted. We will revisit this position if a formal standard is established by relevant regulatory bodies.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, features, technology, or legal requirements. When we make material changes - such as the introduction of new data types related to Clips and social features - we will notify you by:

Sending a notice to the email address associated with your account
Displaying a prominent in-app notification before the change takes effect
Updating the "Last Updated" date at the top of this Policy

For non-material or administrative changes, we will update the "Last Updated" date without separate notice. We encourage you to review this Privacy Policy periodically, particularly before using new features.

Your continued use of the App after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree, you should discontinue use of the App and may request deletion of your account.

21. Governing Law and Jurisdiction

This Privacy Policy is governed by applicable Canadian federal and provincial privacy law, including PIPEDA and Quebec Law 25, as the primary frameworks governing ImpulsTrip's operations and its Canadian-majority user base.

Where our users are located in other jurisdictions, ImpulsTrip also complies with:

European Union / EEA: General Data Protection Regulation (GDPR)
United Kingdom: UK GDPR and the Data Protection Act 2018
United States: CCPA / CPRA (California), BIPA (Illinois), CUBI (Texas), Washington My Health MY Data Act, and other applicable state privacy laws
Other jurisdictions: applicable local data protection and privacy laws

Nothing in this Privacy Policy limits any rights you may have under the mandatory laws of your country of residence.

22. Complaints and Supervisory Authorities

If you believe we have not handled your personal information in accordance with this Privacy Policy or applicable law, you have the right to lodge a complaint with a relevant supervisory authority:

Canada (Federal): Office of the Privacy Commissioner of Canada - priv.gc.ca
Canada (Quebec): Commission d'accès à l'information du Québec - cai.quebec.ca
EEA: The data protection authority in your EU member state of residence
United Kingdom: Information Commissioner's Office (ICO) - ico.org.uk
California: California Privacy Protection Agency (CPPA) - cppa.ca.gov

We encourage you to contact us first at info@impulstrip.com so we have the opportunity to address your concerns directly before you escalate to a supervisory authority. We take all privacy complaints seriously and will investigate and respond promptly.

23. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:

Email: info@impulstrip.com

We will acknowledge your request promptly and respond within the timeframe required by applicable law - no later than 30 days from receipt.

ImpulsTrip Privacy Policy - Last Updated May 1, 2026 - info@impulstrip.com