Privacy
What we collect, and what we don't
TREYN holds your travel history. That is about as personal as a dataset gets, so this page is written to be read rather than to be defensible.
Last updated 21 September 2026 · TREYN
The short version
- Your archive is private by default. Nothing is shared until you choose to share it.
- We never sell your data, and we never use it to build advertising profiles.
- We never use your travel data or mailbox contents to train AI models.
- You can export everything and delete everything, on any plan, at any time.
What we hold
Your account
An email address, a display name if you set one, your language and time zone, and an import address we generate for you. That address is random and can be replaced at any time from the app.
Your travel records
Journeys, segments, stays, operators, service numbers, dates and places - whatever was on the documents you gave us, as you confirmed it. Each field also carries where it came from and how confident we were, which is what lets the app show you exactly which values still need checking.
Booking references are stored under a keyed digest rather than in the clear, so they can be matched against each other without being readable in the database.
Documents you send
The original file or email you forwarded. Raw originals are deleted 30 days after you confirm the draft unless you tell us to keep them. The structured record we extracted stays in your archive until you delete it.
Technical logs
Request logs with personal fields reduced, kept for 30 days for debugging and abuse investigation. Financial records are kept for the period the law requires.
Gmail, in plain terms
If you connect Gmail, Google asks you to grant the gmail.readonly scope.
Here is the part most apps leave out:
That scope grants read access to your entire mailbox. We search only for travel confirmations, but our search narrows what we look at - it does not narrow what Google granted. There is no permission that says "only travel emails". Anyone who implies otherwise is describing something that does not exist.
What we actually do with it:
- We query for messages matching known travel senders and subjects.
- We read only the messages that query returns.
- We keep the extracted travel record, and the message body only for as long as the import needs it.
- We do not read, index or retain the rest of your mailbox.
- We do not use any of it for advertising, profiling, or training AI models.
TREYN's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke our access at any time from the app or from your Google account permissions page.
Who else touches your data
We use third parties to run the service. Each one only receives what its job requires:
| Who | What for | What they see |
|---|---|---|
| Our AI partner | Reading booking documents | The document text you sent for extraction |
| Our email provider | Receiving forwarded mail | Messages you forward to your import address |
| Our hosting and database provider | Running the service | Encrypted storage of everything above |
| App marketplaces | Subscriptions and wallet passes | Purchase records. They never see your travel data |
Document extraction sends text to a third-party model provider. We ask for your explicit consent before that happens, and no provider is permitted to train on your content.
Where your data lives
TREYN operates from Türkiye and serves users in the EU and elsewhere, so data is transferred internationally. We rely on the transfer mechanisms required under KVKK and, for EU users, the GDPR. Choosing a cloud region does not by itself satisfy those obligations, and we do not pretend it does.
Your rights
- Export. Everything, as JSON and calendar files, from the app. On any plan, including the free one.
- Correct. Any field, at any time. Your correction is never silently overwritten by a later sync - a conflict is shown to you.
- Delete. A single record, or your whole account. Account deletion removes your records, files, connection grants, shares and card.
- Object and restrict. Write to us and we will act on it.
Deleting your account is not the same as cancelling your subscription. Subscriptions are managed by the app marketplace you bought them from and must be cancelled there. We show you how to do both, and we will not use one to quietly extend the other.
What we will never do
- Sell your data, or share it with data brokers.
- Turn your archive into an advertising profile.
- Ask for your password to a booking site. You sign in on the provider's own screen.
- Publish anything from your archive without you choosing to.
- Lock your records behind a payment. If you stop paying, your archive stays readable and exportable.
Children
TREYN is not intended for anyone under 16, and we do not knowingly collect their data.
Changes
If this policy changes in a way that affects how your data is used, we will tell you in the app before the change takes effect - not by quietly editing this page.
Contact
Privacy questions and data requests: privacy@treyn.app. We answer within 3 business days, usually much sooner.