Privacy Policy

Last updated: April 25, 2026

Welcome to Piral (“Piral”, “we”, “us”, “our”). This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website and application (the “Service”).

By using the Service, you agree to the practices described in this Privacy Policy.

1. Information we collect

A. Information you provide

  • Account information: name, email address, password (stored in hashed form by our authentication provider), profile details you choose to add.
  • Content you create: recommendations, reviews, ratings, notes, lists/trips, comments, saved items, and any other content you submit.
  • Communications: messages you send us for support or feedback.

B. Information collected automatically

  • Usage data: pages/screens viewed, clicks, interactions, time spent, referring URLs.
  • Device and log data: IP address, browser type, device identifiers, operating system, timestamps.
  • Approximate location: derived from IP address, and location context you provide through searches (e.g., city names) or map interactions.

C. Location and Places data (Google Maps/Places)

If you use features powered by Google Maps or Google Places, we may process:

  • Place identifiers (e.g., Google Place ID)
  • Coordinates (latitude/longitude) associated with places you select or save
  • Search queries you enter in the map/search interface

This data helps us display maps, pins, and place details.

2. How we use information

We use your information to:

  • Provide and maintain the Service (accounts, lists/trips, feed, saved items).
  • Display your content and activity to you and (if you choose) to your friends or other users based on your visibility settings.
  • Personalize your experience (show relevant recommendations).
  • Improve the Service, troubleshoot issues, and develop new features.
  • Communicate with you about updates, security alerts, or support.
  • Enforce our Terms of Service and protect against fraud/abuse.

3. How we share information

A. With other users

  • Your profile and content may be visible to others depending on your settings (e.g., public/private, friends-only).
  • If you follow or are followed by others, some activity (e.g., a new review) may be visible within your network.

B. With service providers

We use third-party providers to operate the Service, such as hosting, database, authentication, analytics, and email. These providers process data on our behalf under contractual restrictions.

Examples may include: Supabase (database/auth), hosting providers, analytics tools.

C. With Google Maps/Places

Map-related requests may be sent to Google to provide Places and map functionality, subject to Google’s policies.

D. For legal and safety reasons

We may disclose information if required by law, or to protect the rights, safety, and security of Piral, our users, or the public.

E. Business transfers

If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

4. Visibility, control, and your choices

  • Visibility settings: Some content may be public, friends-only, or private depending on features and settings.
  • Account information: You can update certain profile details in the app.
  • Delete content: You may be able to delete recommendations/lists; some residual copies may persist in backups for limited periods.
  • Communications: You can opt out of non-essential emails if provided.

5. Data retention

We retain information for as long as necessary to provide the Service and for legitimate business purposes, such as complying with legal obligations, resolving disputes, and enforcing agreements.

6. Security

We implement reasonable administrative, technical, and organizational safeguards to protect your information. However, no system is 100% secure, and we cannot guarantee absolute security.

7. International users

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

8. Children’s privacy

The Service is not intended for children under 13 (or the age required by your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us to request deletion.

9. Third-party links

The Service may contain links to third-party sites. We are not responsible for their privacy practices.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date and, if changes are material, provide additional notice as required.

11. Contact us

If you have questions about this Privacy Policy, contact: