TBTI focuses on activity discovery and outing crews. The travel-personality test helps you understand your preferences and compare group fit. This policy explains what we collect, why we use it, and how you can manage your data.
Scope and data controller
This policy covers the TBTI/TREKX website, travel-personality test, outing crews, notifications, and related services. The ChillOut Travel Planner team currently operates the service. The complete operator and contracting-party information required by law will be added before paid services launch.
Data we may collect
This may include account data (name or nickname, email, avatar, sign-in identifier, and necessary contact details), TBTI answers and results, outings you create or join, comments, reports, blocks, attendance and feedback, plus payment amount, order reference, and payment or refund status. If you do not provide data required for an account, registration, or payment, some features may be unavailable.
How we use data
We use data as needed to provide sign-in and account management, calculate personality results, show group-fit information, create and manage outings, confirm seats and bookings, process payments and refunds, send required notices, prevent abuse, provide support, analyze the service, and meet legal obligations. We do not sell personal data.
What other outing members can see
After you join an outing, other members may see your display name, avatar, TBTI code, and simplified compatibility information. The group pentagon chart is aggregated and does not show individual answers. To reduce identification risk, the overlay is hidden for groups under three people and scores are shown in ranges rather than exact values.
Quiz, matching, and AI features
For signed-in users, we save the latest persona code, dimension scores, and answers for profiles and outing comparisons. Anonymous answer logs may be used for question quality and aggregate statistics. When you use AI text features, the required persona and answer summary may be processed by an AI provider; we do not intentionally attach your name or contact details. Anonymous answer records are stored under a randomly generated session UUID. We do not store IP addresses, email, browser fingerprints or user agents alongside them, and we never join that UUID to subscriber or account data, so even if you subscribe or sign in later we still cannot trace a set of answers back to you.
Cookies, device, and usage logs
Necessary cookies support sign-in and security. Aggregate statistics on page traffic and load speed (Vercel Web Analytics and Speed Insights) run without consent and are used only for overall numbers. Google Analytics, which we use to measure funnel completion, is opt-in. We ask on your first visit; if you decline it is never loaded at all, and if you accept, clearing your browser data withdraws consent. Our systems and providers may log IP address, browser, device, time, errors, and security events. You can manage non-essential tracking through cookie or browser controls, but blocking necessary cookies may affect sign-in.
Sharing and service providers
We share data only as needed with sign-in, hosting, database, email, analytics, AI, payment, and booking providers. To confirm a booking, we may share a name, contact details, headcount, and required order information with the activity merchant. We otherwise disclose data only where required by law, safety, or dispute handling.
International processing
Some cloud, sign-in, analytics, AI, or payment providers may process data outside Taiwan. We select providers according to service needs and use reasonable contractual, access, and security safeguards. Each provider also handles data under its own privacy policy.
Retention and deletion
Account and service data is generally retained until account deletion, the purpose is complete, or a legal period expires. Transaction, refund, tax, accounting, dispute, and anti-fraud records may be kept longer where required by law or to establish, exercise, or defend rights. Account deletion may not immediately remove legally required or de-identified records.
Your privacy rights
Subject to applicable law, you may request access or review, a copy, supplementation or correction, cessation of collection, processing or use, and deletion. Signed-in users can use account settings; other requests may be sent through our official channels, and we may first verify your identity.
Security and minors
We use reasonable access control, permission management, transport protection, and anomaly monitoring, but no online service can guarantee absolute security. Users below the legal age of majority should have a legal representative review and agree before using features that require registration, joining, or payment.
Changes and contact
If the service, data uses, or law materially changes, we will update the date and provide an appropriate notice. For privacy questions, rights requests, or deletion, contact us through official TBTI/ChillOut Travel Planner channels. A direct customer-service contact will be added before paid services launch.