Privacy Policy
This policy explains what we collect when you use DIY Trips, why we collect it, and what you can do about it. We have tried to write it in plain language.
Last updated 17 September 2026
Who we are
DIY Trips is operated by DIY Trips. If you have a question about this policy or about your data, email support@diytrips.com.
What we collect
When you create an account
- Your first name, last name and email address
- A password, which is stored only as a cryptographic hash — we cannot read it, and neither can anyone who obtains the database
- A short verification code sent to your email, used once to confirm the address belongs to you
When you use the app
- The tickets and video guides you save to your wishlist
- The tickets and video guides you buy, and what you paid
- Any rating or review you leave
When you pay
Payments are processed by Stripe. Card numbers are entered on Stripe's own checkout page and never reach our servers — we receive only a reference to the completed transaction and the amount. Stripe's handling of that data is governed by Stripe's privacy policy.
What we do not collect
- We do not track your location
- We do not read your contacts, photos or calendar
- We do not run advertising trackers or sell data to advertisers
You can browse without an account
You can open the app, search destinations, and look through tickets and guides without signing up. An account is needed only to save items, buy anything, or keep a purchase across devices.
Why we collect it
| What | Why |
|---|---|
| Name and email | To identify your account and send purchase confirmations |
| Password hash | To sign you in securely |
| Wishlist | So your saved items follow you to a new device |
| Purchases | To give you access to guides you bought, and to support refunds and disputes |
Who we share it with
- Stripe, to take payment.
- Ticket providers. When you book an attraction ticket, the booking is completed with the provider that supplies it, and the details needed to issue that ticket are passed to them. Their own privacy terms apply to what they then hold.
- Our hosting and email providers, who process data on our instructions in order to run the service.
We do not sell your personal data, and we do not share it for advertising.
How long we keep it
Account data is kept while your account is open. Purchase records are kept longer where tax and accounting rules require it, even after an account is closed. Everything else is removed when you delete your account — see deleting your account.
Your rights
You can ask us to:
- Give you a copy of the data we hold about you
- Correct anything that is wrong
- Delete your account and the data attached to it
- Stop sending you email that is not about a purchase
Email support@diytrips.com and we will respond within 30 days. Depending on where you live, you may also have the right to complain to your local data protection authority.
Children
DIY Trips is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, email support@diytrips.com and we will remove it.
Security
Traffic between the app and our servers is encrypted in transit. Passwords are hashed. No system is perfectly secure, but if a breach ever affects your data we will tell you and the relevant authority as required by law.
Changes to this policy
If we change this policy in a way that materially affects you, we will update the date at the top of this page and notify you in the app or by email. Questions in the meantime go to support@diytrips.com.
Questions about any of this? Email support@diytrips.com and a person will reply.