Cookie Policy

COOKIE & SIMILAR TECHNOLOGIES POLICY

TripProf

Last updated: February 7, 2026

This Cookie & Similar Technologies Policy ("Policy") explains how TripProf ("TripProf", "we", "us", or "our") uses cookies and similar technologies when you access or use our mobile applications (Android and iOS), website, and related services (collectively, the "Services").

This Policy should be read together with our Privacy Policy and Terms of Service.

1. Do We Use Cookies?

TripProf does not use traditional HTTP cookies (first-party or third-party cookies stored via browser cookie mechanisms).

Instead, TripProf uses "similar technologies", which under applicable privacy laws (including GDPR and the ePrivacy Directive) may still be considered functionally equivalent to cookies.

2. What Are "Similar Technologies"?

For the purposes of this Policy, "Similar Technologies" include:

• localStorage / sessionStorage (web applications),

• AsyncStorage (mobile applications),

• MMKV (react-native-mmkv) — high-performance mobile cache storage,

• SDK-based storage and identifiers used by analytics and monitoring tools.

These technologies allow the Services to function correctly and securely without relying on classic cookies.

3. Technologies Used by TripProf

3.1 Web Platform

On the web version of the Services, TripProf uses:

• localStorage

• sessionStorage

These are used to:

• maintain authenticated sessions,

• store user preferences (e.g. language, theme),

• support core application functionality.

3.2 Mobile Applications (Android & iOS)

On mobile applications, TripProf uses:

• MMKV (react-native-mmkv) — primary high-performance cache storage for offline data, query caching, and application state,

• AsyncStorage — secondary storage for authentication tokens and system preferences.

These serve similar roles to localStorage on the web and are used for:

• authentication tokens,

• system preferences,

• offline data caching and query persistence,

• app functionality and stability.

4. Purposes of Use

TripProf uses Similar Technologies strictly for the following purposes:

4.1 Strictly Necessary / Essential

These technologies are essential for the operation of the Services and cannot be disabled without impairing functionality:

• account authentication,

• session management,

• security and fraud prevention,

• saving user preferences.

4.2 Analytics and Performance

TripProf uses analytics tools to understand how users interact with the Services and to improve performance and usability.

PostHog

Used to:

• analyze feature usage,

• understand user flows and behavior,

• improve product design and functionality.

PostHog processes data in accordance with applicable data protection laws and is configured to avoid unnecessary personal data collection where possible.

4.3 Error Monitoring and Stability

Sentry

Used to:

• detect and diagnose application crashes,

• monitor system errors,

• improve reliability and security.

Sentry may process limited technical information (such as device type, operating system, and error context).

5. Legal Basis (GDPR / UK GDPR)

TripProf relies on the following legal bases:

• Strictly necessary technologies:
  Legitimate interest and contractual necessity (Article 6(1)(b) and 6(1)(f) GDPR).

• Analytics and monitoring technologies:
  Legitimate interests in improving and securing the Services (Article 6(1)(f) GDPR). Analytics are enabled by default under a legitimate interest basis. Users may opt out of analytics at any time through the in-app settings (Profile > App Settings > Analytics toggle).

6. Data Stored via Similar Technologies

Depending on usage, stored data may include:

• authentication tokens,

• system and interface preferences,

• anonymized or pseudonymized usage identifiers,

• technical diagnostics and error logs.

TripProf does not store payment card data or sensitive financial information using these technologies.

7. User Controls and Choices

7.1 Web Users

You may:

• clear localStorage and sessionStorage via browser settings,

• block storage through browser privacy controls (may affect functionality).

7.2 Mobile App Users

You may:

• manage app permissions via your device settings,

• uninstall the application to remove AsyncStorage and MMKV data.

7.3 Analytics Opt-Out

TripProf provides an in-app analytics toggle accessible via Profile > App Settings. This toggle allows you to opt out of PostHog analytics collection at any time.

Analytics are enabled by default under a legitimate interest basis. When you disable the toggle, PostHog data collection ceases for your device.

TripProf also respects applicable opt-out signals under CCPA/CPRA. Global Privacy Control (GPC) signal support is not yet implemented but is planned for a future release.

8. International Data Transfers

Data processed via Similar Technologies may be transferred outside your country of residence.

TripProf ensures appropriate safeguards, including:

• Standard Contractual Clauses (SCCs),

• UK International Data Transfer Addendum,

• equivalent lawful transfer mechanisms.

9. Data Retention

Data stored via Similar Technologies is retained:

• only for as long as necessary for its purpose,

• or until the user deletes the account or clears storage.

Upon account deletion, stored data is deleted from active systems within 24 hours. Automated encrypted backups are purged in accordance with standard infrastructure retention cycles (up to 7 days). Legal retention requirements may apply.

10. Third-Party Technologies

TripProf integrates third-party services (such as PostHog and Sentry).
These providers process data under contractual obligations consistent with applicable data protection laws.

TripProf does not permit third parties to use Similar Technologies for advertising or cross-site tracking.

11. Changes to This Policy

TripProf may update this Policy from time to time.
Material changes will be communicated via the Services.

12. Contact Information

For questions about this Policy or data protection matters:
privacy@tripprof.com