Privacy Policy

• Account: email, and the display name / username / avatar you provide.
• Onboarding quiz: vibe, travel group, interests, trip duration, matched area — used to personalize content.
• Usage: saved spots, itineraries, chat messages, community posts, daily vibe selection.
• Device: push-notification token, OS/platform, app version, coarse locale.
• Location: only if you opt-in, used to surface nearby spots and maps. Never shared with third parties.

• Build and deliver personalized recommendations and itineraries.
• Operate core features (chat, community, saved items, notifications).
• Improve reliability and performance (crash reports, aggregated analytics).
• Communicate with you — in-app messages, push notifications, support replies.

We use the following processors, each bound by their own privacy terms:

• Supabase — database, authentication, storage.
• Google Firebase — push notifications (FCM) and Apple / Google sign-in.
• Google Places — spot search, geocoding, place photos.
• AI provider — generating itineraries and tips. We only send your quiz answers and high-level preferences; never your email or chat content.
• Affiliate partners (Airalo, GetYourGuide) — only when you tap a partner link, and only the data that link itself carries.

We do not sell your personal data.

Account and profile data are kept while your account is active. If you delete your account, we remove profile, itineraries, chat membership, and push tokens within 7 days, except where retention is required by law (for example, limited fraud or accounting records).

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, write to contact@thebalisecret.app from your account email.

Data in transit is encrypted with TLS. At rest, on your device, sensitive data is stored in encrypted MMKV. Server-side, we rely on Supabase's managed security controls. No system is 100% secure — if you suspect a problem, let us know immediately.

The App isn't directed at children under 16. If you believe a child has provided us with personal data, contact us and we'll delete it.

We'll post any update to this policy here and update the "Last updated" date. Material changes will be announced in-app.

Privacy questions: contact@thebalisecret.app.