When you register for a Tino account, we collect the information you voluntarily provide, including your display name, email address, date of birth (used to verify you are 18 years of age or older), profile photograph, home country, preferred travel styles (e.g., backpacking, luxury, adventure), and any optional biography. If you sign in via a third-party provider such as Apple Sign-In or Google, we receive a limited profile data set as authorized by you and that provider.
We automatically collect technical data when you access the Service, including your device model, operating system version, unique device identifiers, IP address, mobile network carrier, app version, crash reports, and performance diagnostics. This data helps us maintain service quality and diagnose technical issues.
With your permission, Tino accesses your device's GPS and network-based location to power core travel features such as nearby destination discovery, check-in functionality, and location-tagged posts. You may choose between “While Using the App” or “Always On” location access, or deny location access entirely, though this will limit certain features. We do not collect background location without your explicit consent. See Section 3 for full details.
If you use Tino's trip planning and itinerary features, we collect the destinations, dates, travel notes, and bucket list items you create or save. This data is associated with your account and stored on our servers to enable cross-device access and personalized recommendations.
We collect any photos, videos, travel journals, destination reviews, tips, comments, and community posts you upload or create within the Service. See Section 4 for full details on UGC handling.
We record how you interact with the Service, including destinations you search for, content you view or save, creators you follow, features you use, and the duration and frequency of your sessions. This data informs our recommendation systems and product improvements.
If you contact our support team, respond to in-app surveys, or participate in research studies, we retain the content of your communications, your contact details, and relevant metadata for the purpose of resolving your inquiry and improving our services.
All payments within Tino are processed by Apple App Store or Google Play. We do not store your payment card details. We receive only anonymized transaction tokens and purchase confirmation data sufficient to validate your in-app entitlements.
We use your personal information to authenticate your account, render the travel community feed, enable destination check-ins, process in-app purchases, facilitate community interactions, and deliver all other core Service functions. Without this processing, the Service cannot operate.
We analyze usage patterns in aggregated and de-identified form to identify areas for improvement, measure feature adoption, and prioritize our development roadmap. Where we conduct qualitative research with users, participation is voluntary and separately consented to.
We use your travel history, saved destinations, and behavioral signals to power Tino's recommendation engine, surfacing destinations, itineraries, and community content tailored to your interests. See Section 5 for how personalization works and how to opt out.
We process certain data to detect and prevent fraud, spam, harassment, and other policy violations; to enforce our Community Guidelines; to investigate reported content; and to protect the safety of our users and the integrity of the platform.
With your consent where required by applicable law, we may send you promotional emails, in-app notifications about new travel features, and personalized destination inspiration. You can manage these preferences at any time in Settings or via the unsubscribe mechanism in any email.
We process personal data as necessary to comply with applicable laws and regulations, respond to valid legal process, enforce our Terms of Service, and protect the rights, safety, and property of Tino, our users, and the public.
Location data is central to Tino's travel community experience. When you grant location permission, we use your coordinates to: display nearby points of interest and community-recommended spots; enable destination check-ins and automatic location tagging on posts (with your confirmation); surface locally relevant travel content from other community members; and provide distance-based filtering for destination searches.
Tino requests precise location access only when you are actively using location-dependent features. We request “While Using the App” access by default and will seek separate, explicit consent before requesting “Always On” access for any background travel logging features. You may revoke location permission at any time through your device's settings.
When you create a post or check in to a destination, Tino may attach a location label (such as a city or landmark name) to your public content. We display location at the city or region level by default for public posts, not precise GPS coordinates. You may choose to omit location entirely from any post.
Photos and videos you upload may contain embedded GPS coordinates in their EXIF metadata. Tino automatically strips precise EXIF geolocation data before your media is made publicly visible on the platform, to protect your physical location privacy.
Precise location data collected during active sessions is not retained beyond the session unless you explicitly create a location-tagged post or check-in. Aggregate, anonymized location analytics (e.g., which cities are most-visited by our user base) may be retained indefinitely for research and product development purposes.
When you contribute to the Tino community, we collect and store all content you upload or create, including travel photographs and videos, written destination reviews, trip journals, packing lists, travel tips, comments on other users' posts, and any reactions or ratings you submit. This content is associated with your account and stored on our secure cloud infrastructure.
By posting UGC to Tino, you grant us a non-exclusive, worldwide, royalty-free, sublicensable license to host, store, reproduce, distribute, display, and adapt your content (solely for formatting and technical compatibility) in connection with operating and promoting the Service. You retain ownership of all original content you create. This license persists for a commercially reasonable period following deletion to account for technical caching and content shared by other users.
You warrant that you hold all necessary rights to any content you post, including photographs, written material, and any third-party assets incorporated therein. Tino respects the intellectual property rights of others. If you believe content on the Service infringes your copyright, please contact us at service@tino.run with a detailed notice.
We use a combination of automated content-detection systems and human reviewers to ensure UGC complies with our Community Guidelines. Content that is off-topic for a travel community, that is misleading about destinations or travel experiences, or that violates our policies on hate speech, harassment, explicit material, or illegal activity may be removed without prior notice. Users whose content is removed will be notified where operationally practicable.
You control the visibility of your posts through per-post and account-level privacy settings. Public posts are visible to all Tino users and may appear in search results. Followers-only posts are restricted to approved followers. Private posts are visible only to you. You may change visibility settings at any time.
When you delete a post or your account, your content is removed from public display within 48 hours. Full deletion from our production servers occurs within 30 days, and from backup archives within 90 days. Content that other users have legitimately re-shared or engaged with cannot be fully retroactively removed from those interactions.
Tino's discovery feed is powered by a recommendation engine that analyzes your saved destinations, followed creators, search history, content engagement patterns, travel style preferences, and (with your permission) approximate location to surface destinations, itineraries, travel stories, and community members we believe will resonate with you.
Over time, Tino builds an internal travel preference profile based on your in-app behavior. This profile is used exclusively for in-app personalization and is not shared with travel brands, airlines, hotels, or any external advertising networks without your explicit consent.
You may disable personalized recommendations at any time in Settings > Privacy > Personalization. Tino will then display a non-personalized, editorially curated global travel feed instead. Your usage data will still be collected for security, analytics, and core service operations unless you exercise broader data deletion rights under Section 12.
We share personal information with third-party service providers who support our operations, including cloud infrastructure providers, content delivery networks, analytics platforms, customer support tools, and fraud detection systems. All providers are contractually bound to process your data only on our instructions and in compliance with applicable data protection law.
We do not sell your personal information to third parties. We do not share your personal data with travel advertisers, tour operators, airlines, or hotel chains for their own marketing purposes without your explicit, informed, and revocable consent.
In the event of a merger, acquisition, restructuring, or asset sale, your personal data may be transferred to the acquiring entity as part of the transaction. We will provide you with advance notice via in-app notification or email before your data becomes subject to a materially different privacy policy, and you will have the opportunity to request account deletion prior to the transfer.
We may disclose your information to government authorities, law enforcement agencies, or courts when we are required to do so by applicable law, valid legal process, or when disclosure is reasonably necessary to protect life, prevent fraud, or enforce our legal rights. Where legally permissible, we will notify affected users before complying with such requests.
Your public profile, posts, destination reviews, and check-ins are visible to other Tino users and may be indexed by search engines. Switching your account to “Private” in Settings restricts content visibility to your approved followers only and de-indexes your profile from external search engines within a reasonable period.
Tino integrates third-party mapping services to render destination maps, calculate distances, and display points of interest. These services may collect your IP address and location data in accordance with their own privacy policies when map tiles or place data are requested. We configure these integrations to minimize unnecessary data transmission.
We use mobile analytics SDKs to measure app performance, session length, and feature engagement. These SDKs are configured with privacy-preserving settings where available, including anonymized event tracking and the suppression of advertising identifiers when you have not granted tracking consent.
If you register or log in using Apple Sign-In or Google, those platforms operate under their own terms and privacy policies, which we encourage you to review. Our use of data obtained through social sign-in is strictly limited to account creation and profile population.
User data is hosted on cloud infrastructure operated by providers with internationally recognized security certifications. Data processing agreements are in place with all infrastructure providers. Details are available on request at service@tino.run.
We retain personal information for as long as your account remains active or as needed to deliver the Service. If your account has had no login activity for 24 consecutive months, we will notify you and, following a 30-day notice period, may anonymize or delete inactive account data.
Records of in-app purchases and financial transactions are retained for a minimum of seven years to satisfy applicable tax, accounting, and consumer protection obligations.
Records of content moderation actions, user reports, and enforcement decisions may be retained for up to three years after account closure to enable pattern analysis, defend against legal claims, and support law enforcement cooperation where applicable.
Aggregate, irreversibly anonymized data derived from your usage (which cannot be used to re-identify you) may be retained indefinitely for research, product development, and business intelligence purposes.
We employ industry-standard security measures including TLS 1.2+ encryption for all data transmitted between your device and our servers; AES-256 encryption for sensitive data at rest; strict role-based access controls limiting data access to authorized personnel; and automated anomaly detection systems that flag unusual access patterns for review.
All Tino employees with access to personal data are subject to confidentiality agreements and undergo regular data protection training. Access to production systems requires multi-factor authentication and is logged and audited on a periodic basis.
We conduct regular security assessments, including third-party penetration testing of our core infrastructure. Critical vulnerabilities are prioritized and remediated as rapidly as possible. We maintain a responsible disclosure program; if you discover a security vulnerability in our Service, please report it to service@tino.run.
In the event of a personal data breach that presents a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware (where required by applicable law) and will notify affected users without undue delay, describing the nature of the breach, the categories of data affected, and the steps we are taking to mitigate potential harm.
The Tino mobile application uses in-app local storage, session tokens, and analytics SDKs rather than traditional browser cookies. These technologies are used to maintain your authenticated session, remember your in-app preferences (such as language and map view settings), and measure feature engagement for product improvement purposes.
On iOS, we request your consent through Apple's App Tracking Transparency (ATT) prompt before accessing your IDFA. On Android, we respect your choice to opt out of personalized advertising via your device's advertising ID settings. We use advertising identifiers solely to measure the effectiveness of our own user acquisition campaigns and do not use them to serve third-party behavioral advertising within the Service.
Our website and help center may use standard browser cookies for session management, analytics, and security purposes. You may control web cookies through your browser settings; disabling essential cookies may impair functionality of our web properties.
As a global travel community, Tino operates infrastructure across multiple regions. Your personal data may be transferred to and processed in countries other than your country of residence, which may have different data protection standards than your home jurisdiction.
For transfers of personal data from the EEA, UK, or Switzerland to third countries not recognized as providing an adequate level of protection, we rely on the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, the UK International Data Transfer Addendum (IDTA). For transfers involving other jurisdictions, we implement equivalent contractual or technical safeguards.
Where applicable national laws impose mandatory data localization requirements, we take reasonable steps to ensure that the required categories of personal data are stored and processed within the mandated territory or in compliance with the applicable framework.
You may request a copy of the personal information we hold about you. Much of this is directly accessible via your in-app profile and settings. For a comprehensive data export, email service@tino.run with the subject line “Data Access Request.”
You may correct or update inaccurate personal information directly in your account settings at any time. For data that cannot be self-corrected, contact us and we will action the correction within 30 days.
You may request deletion of your account and associated personal data via Settings > Account > Delete Account, or by emailing us. We will process your request within 30 days, subject to any legal obligations requiring us to retain certain data. See Section 19 for full account deletion details.
You may object to or request restriction of processing in certain circumstances, such as where you dispute the accuracy of your data or object to processing based on our legitimate interests. We will pause relevant processing while we assess your objection.
Where processing is based on your consent or contract performance and is carried out by automated means, you have the right to receive your data in a structured, machine-readable format (e.g., JSON) and to have it transmitted to another service provider where technically feasible.
Where our processing relies on your consent (e.g., marketing communications, personalized recommendations), you may withdraw that consent at any time through in-app settings or by contacting us. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
To exercise any rights listed in this section, email service@tino.run with “Privacy Rights Request” in the subject line, your registered email address, and a description of your request. We will verify your identity and respond within the timeframe required by applicable law (generally 30 days, with a possible 30-day extension for complex requests).
For users in the European Economic Area and the United Kingdom, Tino acts as the data controller of your personal information as defined under the General Data Protection Regulation (GDPR) and the UK GDPR respectively. Our contact details are provided in Section 24.
We process your personal data under the following legal bases: (a) contractual necessity (to provide the Service you have requested); (b) legal obligation (to comply with applicable laws); (c) legitimate interests (service improvement, security, fraud prevention), where those interests are not overridden by your fundamental rights; and (d) consent (for personalization and marketing), which you may withdraw at any time.
If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the data protection supervisory authority in your EU member state or, for UK residents, with the Information Commissioner's Office (ICO). We encourage you to contact us first so we can attempt to resolve your concern directly.
California residents have specific rights under the CCPA as amended by the CPRA, including the right to know what personal information is collected about you; the right to delete personal information; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information; and the right to limit use of sensitive personal information.
We do not sell personal information and do not share personal information for cross-context behavioral advertising as defined under the CCPA/CPRA. You therefore do not need to submit a “Do Not Sell or Share” request, but all other rights described in Section 12 remain fully available to you.
Exercising your California privacy rights will not result in any discriminatory treatment, including denial of services, different pricing, or reduced quality of experience.
California residents may designate an authorized agent to submit privacy requests on their behalf by providing written proof of authorization. We will verify the identity of both the agent and the California resident before processing any such request.
Brazilian users have rights under the Lei Geral de Protecao de Dados (LGPD), including confirmation of whether we process your data; access to your data; correction of incomplete or inaccurate data; anonymization, blocking, or deletion of unnecessary data; data portability; deletion of data processed with consent; information about third-party sharing; and the right to withdraw consent at any time.
We process personal data of Brazilian users based on contract performance, compliance with a legal obligation, the exercise of rights in judicial, administrative, or arbitration proceedings, and consent where applicable. We do not rely on legitimate interests as a basis for processing sensitive personal data of Brazilian users without express consent.
Brazilian users may lodge complaints with the Autoridade Nacional de Protecao de Dados (ANPD) if they believe their data has been processed in violation of the LGPD.
Tino is intended exclusively for users who are 18 years of age or older. We do not knowingly collect, store, or use personal information from individuals under 18. During registration, users are required to provide their date of birth, which we use to enforce this restriction. If we become aware that we have inadvertently collected information from a person under 18, we will delete that information and the associated account promptly without prior notice.
If you are a parent or legal guardian and believe a minor has created a Tino account, please contact us immediately at service@tino.run. We will investigate and, where confirmed, permanently delete the account and all associated personal data without delay.
Tino enforces a strict zero-tolerance policy toward any content, activity, or behavior that constitutes, promotes, facilitates, or glorifies Child Sexual Abuse and Exploitation (CSAE) in any form. This includes, without limitation, child sexual abuse material (CSAM), grooming, solicitation of minors, trafficking of minors, and any other form of exploitation or endangerment of individuals under 18 years of age. Such content and behavior are categorically prohibited on our platform without exception.
We employ automated hash-matching technology, AI-assisted content scanning, and trained human moderators to detect and eliminate CSAE material. Upon detection or credible report, we take the following immediate actions: removal of the content from the platform; permanent termination of the responsible account and all associated identifiers; mandatory reporting of the material to the National Center for Missing and Exploited Children (NCMEC) CyberTipline or the legally mandated equivalent authority in the applicable jurisdiction; and full, proactive cooperation with law enforcement investigations.
If you encounter any content on Tino that you suspect constitutes CSAE, please report it immediately using the in-app reporting function on the relevant post or profile, or by emailing service@tino.run with the subject line “CSAE Report.” All CSAE reports are treated as our highest-priority safety matter and acted upon without delay.
We conduct regular reviews of our child safety policies and moderation procedures, informed by industry best practices and evolving legal requirements, to ensure Tino remains a platform where the safety of all users, and especially the most vulnerable, is paramount.
The Tino community may include content referencing travel products and services, including accommodations, tours, airlines, and equipment. Some of these references may be affiliate links through which Tino or an individual creator may receive a commission. The presence of an affiliate link does not influence how your personal data is processed, and we do not share your personal information with affiliate partners without your consent.
We do not transfer your personal information (including your travel plans, destinations, or itineraries) to airlines, hotels, tour operators, or other travel industry partners for their direct marketing purposes. Any integrations with travel booking services are performed at your explicit initiation and with clear disclosure at the point of action.
Tino may send push notifications for the following purposes: community engagement alerts (new comments, reactions, or followers); destination and travel inspiration updates; announcements about new features or content; travel challenge and community event reminders; and critical account security notifications.
You can granularly control which notification types you receive in Settings > Notifications. Push notifications can also be managed or disabled entirely through your device's operating system notification settings. Note that disabling all notifications may cause you to miss important security alerts.
We send two categories of email: (a) transactional emails (account confirmations, purchase receipts, security alerts), which are necessary for Service operation and cannot be unsubscribed from while your account is active; and (b) marketing and promotional emails, which are optional and can be unsubscribed from at any time using the link in any such message or in Settings.
You may permanently delete your Tino account at any time via Settings > Account > Delete Account. Alternatively, submit a deletion request to service@tino.run from your registered email address with the subject line “Account Deletion Request.”
Following a confirmed deletion request, your profile and public content are removed from view within 48 hours. Personal data is deleted from our production systems within 30 days. Residual copies in encrypted backup archives are purged within 90 days of the next scheduled backup rotation.
Certain data may be retained after account deletion where required by law, including financial transaction records (up to 7 years), moderation records (up to 3 years), and data subject to a legal hold. Retained data is isolated and used only for the specific legal purpose requiring retention.
All in-app purchases on Tino are processed exclusively through Apple App Store or Google Play. Tino does not collect, transmit, or store your payment card numbers, bank details, or any other sensitive financial information. We receive only a transaction confirmation token and entitlement data necessary to activate your purchased features.
If Tino offers subscription-based features, subscriptions renew automatically at the end of each billing period unless cancelled at least 24 hours before renewal through your App Store or Google Play account settings. Transaction and subscription records are retained for a minimum of 7 years for accounting and legal compliance purposes.
We are committed to making our privacy settings and rights-request mechanisms accessible to all users, including those using assistive technologies such as screen readers, magnification tools, or alternative input devices. Our in-app privacy controls are designed in accordance with accessibility best practices. If you encounter an accessibility barrier when exercising your privacy rights, contact us at service@tino.run and we will accommodate your request through an alternative channel.
This Privacy Policy is published in English as the governing language. Where we provide courtesy translations, the English version shall be authoritative in the event of any inconsistency or dispute.
This Privacy Policy is governed by applicable international data protection law and the laws of the jurisdiction in which Tino is incorporated, to the extent not superseded by mandatory local law in your country of residence (including, without limitation, GDPR, CCPA/CPRA, LGPD, PDPA, or PIPL). Nothing in this Policy is intended to limit any non-waivable consumer or data subject rights you hold under the laws of your jurisdiction.
If you have a concern about our data practices and our response to a direct complaint has not resolved it to your satisfaction, you retain the right to escalate the matter to the relevant data protection or privacy authority in your country of residence.
We may update this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or Service features. When we make material changes, we will notify you at least 14 days before they take effect by: (a) displaying a prominent in-app notice on your next session; (b) sending a push notification; and/or (c) emailing your registered address. Minor or non-material corrections may be made without advance notice.
Your continued use of Tino after the effective date of any revised Policy constitutes acceptance of the updated terms. If you do not agree with any changes, you may delete your account before the revised Policy takes effect.
Prior versions of this Privacy Policy are archived and available upon request by emailing service@tino.run with the subject line “Prior Policy Version.”
For any questions, concerns, or data rights requests regarding this Privacy Policy or our data practices, please reach our Privacy team at:
We aim to acknowledge all privacy inquiries within 5 business days and to provide a substantive response within 30 days.
To report suspected CSAE content or any child safety concern on the Tino platform, use the in-app “Report” button on any post, video, or profile, or contact us immediately at service@tino.run with the subject line “CSAE Report.” These reports receive our highest-priority response.
We believe great journeys start with trust. If you have any questions about how Tino handles your data, we're always here to help.
service@tino.run