Privacy Policy

Last updated: 23 August 2026

This Privacy Policy explains how Xense Limited ("Xense", "we", "our", or "us"), a company incorporated in Hong Kong SAR, collects, uses, discloses, and protects your information when you use the Travobear mobile application and related services (collectively, the "Service").

1. Information we collect

  • Account information. Email address, display name, username, profile photo, and authentication identifiers when you sign up or sign in (including via third-party providers such as Apple or Google).
  • Trip & content data. Itineraries, places, notes, journal entries, photos, videos, and any other content you create or upload to the Service.
  • Camera & photo library. With your permission, the Service can open your camera or photo library so you can attach photos and videos. We only receive the items you actually choose to add — we never browse or upload your library in the background. You can change this permission at any time in your device settings.
  • Location data. With your permission, the Service may access your device location to suggest nearby places or tag trip entries. You can disable this at any time in your device settings.
  • Purchase & subscription data. If you buy a subscription, we receive a record of the purchase from the app store via our subscription provider — the plan, its status, renewal and expiry dates, and an anonymous purchase identifier. We never receive or store your card number or other payment credentials; those stay with Apple or Google.
  • Device & usage data. Device model, OS version, app version, IP address, language, and basic usage events used for security, debugging, and product improvement.
  • Diagnostics & crash reports. If the app crashes or errors, we receive a diagnostic report containing device state and a technical stack trace, so we can fix the problem.
  • Communications. Messages you send us (e.g. support requests, feature suggestions, content reports) and waitlist signups.

2. How we use information

  • To provide, maintain, and improve the Service;
  • To personalise itinerary suggestions and recommendations;
  • To authenticate users and protect against abuse;
  • To operate subscriptions — unlocking paid features, applying usage limits, and restoring purchases across your devices;
  • To review reported content and enforce our Terms of Service;
  • To communicate with you about your account or the Service;
  • To comply with legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising or cross-app tracking.

3. AI processing

Travobear uses large language models and other AI systems to generate itineraries and recommendations. Trip prompts and limited context may be sent to AI model providers acting as data processors on our behalf. We do not use your private trip content to train third-party foundation models.

4. Third-party services

We rely on the following categories of processors to operate the Service:

  • Supabase — authentication, database, and file storage.
  • Cloud hosting & CDN providers — to deliver the app and serve media.
  • AI model providers — to generate itinerary content.
  • Subscription management (RevenueCat) — to validate in-app purchases made through the Apple App Store or Google Play and keep your subscription status in sync across devices.
  • Analytics & crash reporting (Google Firebase Analytics and Crashlytics) — to understand which features are used and to diagnose crashes.
  • Push notification services — to deliver notifications to your device (e.g. Apple Push Notification service, Firebase Cloud Messaging).
  • Mapping & places data providers — to surface location information.

5. Sharing

We do not sell your personal information. We share content you explicitly choose to share (e.g. a public journey or journal). We disclose information to processors above, and to authorities where required by law.

6. Data retention & deletion

We retain your information for as long as your account is active or as needed to provide the Service.

You can delete your account yourself, from inside the app — Profile → Settings → Edit profile → Delete account. Deleting removes your profile and the content associated with it. Some records are kept where we are required to (for example, transaction records for tax and accounting, or content-report records needed for safety and abuse investigations), and backups are purged on our normal rotation. If you would rather we did it for you, or you can no longer sign in, email hello@travobear.com.

7. Security

We use industry-standard safeguards to protect your information, but no method of transmission or storage is fully secure. You are responsible for keeping your account credentials confidential.

8. Children

Travobear is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect information from them.

9. International transfers

We operate from Hong Kong and may transfer information to processors in other jurisdictions. We rely on appropriate safeguards for these transfers.

10. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal information. Contact us at hello@travobear.com to exercise these rights.

11. Changes

We may update this Privacy Policy from time to time. We will indicate the "Last updated" date above and, where appropriate, notify you in the app.

12. Contact

Xense Limited (Hong Kong) · hello@travobear.com