M-Trip mobile app

Privacy policy

Last updated October 13, 2026

What M-Trip is

M-Trip is a mobile app that travel agencies use to give their travelers and their partner companies (outfitters, lodges, local agencies) a private view of the trips the agency organises: the itinerary, travel documents, who is looking after the trip, and a chat with the agency. Nobody can register in the app. A login is created by the travel agency for a specific person and works only for that agency's trips.

Who is responsible for your data

The travel agency that created your login decides what is stored about you and why; it is the “controller” of that data. M-Trip processes the data on the agency's behalf and under its instructions. Questions about your personal data, corrections and deletion go to your agency first; its contact details are on the Home page of the app.

What the app stores

• Your login: name, e-mail address and a password (stored only as a one-way hash), plus the date of your last sign-in.
• Your traveler profile (travelers): the details the agency needs to book and run your trip — contact details, address, date of birth, passport details, emergency contacts, and any health notes or preferences you or the agency entered. You can see and edit most of these under My details.
• Your company profile (partners): company name, contact person, phone, e-mail and address.
• Trips: destinations, dates, itinerary, status, the travelers and partner companies on each trip, and the agency staff member looking after it.
• Documents: files the agency attaches to your trips and copies of papers you upload yourself (for example a passport or licence copy).
• Chat with the agency: the messages you exchange with the agency in the Chat tab, including the photos, files and voice messages you send there. A voice message you send to the agency is turned into text automatically, so the team can read it; voice messages in a direct chat are never turned into text.
• Direct chat: travelers, the partner companies on their trips and the other travelers of the same trip can message each other directly, in the app or in the web app. Those messages — and the photos, files and voice messages sent with them — are encrypted on your own devices (end-to-end: each phone and each browser you use keeps its own key, which never leaves it); the server stores and delivers only the encrypted copies and cannot read them, and neither can the agency or M-Trip — also not when agency staff look at your account to help you. Either side can switch direct chat off in Settings or block a single contact, and the agency can switch it off for a login. If you report a conversation, your device sends the recent messages you choose to share to your agency together with the report — the only way anyone else can read them — so the agency can review it and act.
• Notifications: the in-app notices about your trips and which kinds you switched off.
• Your device: the platform (iOS/Android), the app version, a sign-in token for this device and, if you allow notifications, a push-notification token. No advertising identifier, no location tracking, no contacts or photos beyond the file you choose to upload. The microphone is used only while you record a voice message, after you have allowed it; nothing is recorded at any other time.
• Server logs: the time and network address of requests, kept briefly for security and troubleshooting.

What it is used for

• Showing you your trips, itineraries and documents, and keeping your details current for your bookings.
• Sharing travel essentials (name, passport details, uploaded passport copies) with the partner companies working on your trips — the lodge or outfitter that must register your arrival, for instance. Partners see only the trips they are on.
• Sending you notifications about your trips (new trip, changes, documents, reminders) if you keep them on.
• The chat between you and your agency.
• Keeping the service secure: sign-in checks, lockout after repeated failed attempts, revoking lost devices.

M-Trip shows no advertising, sells no data, and contains no third-party analytics or tracking SDKs.

Who else sees it

• Your travel agency and its staff, in the agency's own system.
• Partner companies on your trips, as described above.
• Service providers that run the technical side: the hosting provider of the M-Trip server (DigitalOcean), Apple and Google for delivering push notifications, Expo for the app's build and notification service, the agency's messaging tool (Missive) which carries the chat messages to the agency's inbox, and OpenAI's speech-to-text service, which receives the recording of a voice message you send to the agency in order to return its text. They process the data only to provide those services.

Data is not sold or shared with anyone else, except where the law requires it.

How long it is kept

As long as your agency keeps your profile and trips in its system, and as long as it needs them for its records and legal obligations. Your login can be disabled or removed by the agency at any time; sign-in tokens for a device are removed when you sign out. Deleting the app from your phone removes everything the app cached on the device.

Your choices and rights

• Edit your own details under Settings → My details (travelers) or My company (partners); the agency sees the change immediately.
• Turn each kind of notification on or off under Settings → Notifications, or in your phone's settings.
• Ask your agency for a copy of your data or a correction. To have your login and all your data deleted, follow the account and data deletion page — through the agency, or directly with us. Depending on where you live you may have further rights under data-protection law; the agency will handle those requests.

Security

All traffic between the app and the server is encrypted (HTTPS). Passwords are stored as one-way hashes. Each device signs in with its own revocable token; the agency can sign a person out of every device. Documents are kept outside the public web space and are served only to signed-in people who are allowed to see them.

Children

M-Trip is meant for adults who book travel and for the companies that serve them. It is not directed at children under 16, and the agency creates no logins for them.

Changes to this policy

When something changes in what the app collects or how it is used, this page is updated and the date at the top changes. The current version is always at this address.

Contact

For questions about the app itself: mytrip.sovellus@gmail.com. For questions about your trips or your personal data: your travel agency. See also the support page.