Privacy Policy

Last updated: October 15, 2026

Pakaya is a mobile and web app for creating and organizing checklists for your plans — jobs at a client's and trips — with notes and optional sync across devices. This privacy policy describes what data the App ("the App", "we") collects and processes, on what legal basis, and what rights you have as a user.

1. Data controller

The data controller can be contacted at: contact@pakaya.app.

2. Legal basis for processing

We process your data based on:

• Art. 6(1)(b) GDPR (performance of a contract) — to the extent necessary to provide the account and cross-device sync feature you opt into by creating an account;
• Art. 6(1)(f) GDPR (legitimate interest) — for technical data collected via Sentry and sync diagnostics, necessary to detect errors and maintain the App's stability, for the Cloudflare Turnstile check that protects sign-in and the feedback form from bots, and for reading and answering the feedback you send us from the App, and for anonymous visit statistics on the public pages of our website;
• Art. 6(1)(a) GDPR (consent) — for the technical details you may attach to feedback (app version, system and language). They are attached only when you tick the box, and you can see exactly what will be sent before you send it.

Data you enter locally (without an account, in offline mode) is never processed by us at all — it stays exclusively on your device.

3. What data we collect

a) Account (optional) — The App works fully without creating an account (local/offline mode). If you choose to create an account to sync data across devices, we collect only your email address and your password (stored hashed, never in plain text). You can also sign in with Google or Apple instead. Then we receive from them your email address, your account identifier with that provider and — if they share it — your name; we never receive your Google or Apple password. If you choose "Hide My Email" when signing in with Apple, Apple gives us a relay address (…@privaterelay.appleid.com) and our emails (e.g. a password reset) reach you through Apple. An account created with a relay address is a separate account — it is not linked to an account created with your real address.

b) The content of your plans — if sync is enabled, the following data you enter is stored on our server: plan names, checklists and their contents, free-text notes (e.g. booking references, directions), and participant details you enter manually — name, color, and optionally a broad age range (e.g. "school-age child"). The areas you joined, the area you are in and the specializations you selected under “What do you do?” are stored as well. So are a plan's location and dates, your saved templates and your travel preferences. In a plan's name, location and notes you may choose to enter details of other people, for example a client's name or address. The App does not require it; if you do, they are stored as part of the content of your plan. Participants are not separate accounts — they are information about the participants of your plans (including children) that you, the account holder, enter for your own planning. Children never create accounts or log in to the App themselves.

c) Technical data (app stability) — we use Sentry to detect application errors and crashes so we can fix them. Only technical information is collected (error type, application context, and the kind of device, operating system and browser in use) — never the content of your personal data or checklists. If you are signed in, a report may carry your account's random identifier (never your email address). Error reports are deleted automatically after 90 days at the latest. If you have an account with sync enabled, the App also stores technical sync diagnostics with your account on our server (technical event records and counters, tagged with a random identifier of the app installation so problems on different devices can be told apart — no names or list content), deleted together with the account.

d) Bot protection — when you sign in, create an account or reset your password, the form is protected by Cloudflare Turnstile. To tell people from bots, Cloudflare processes technical data such as your IP address and browser or device characteristics. We receive only the check result. The same check protects the "Send feedback" form.

e) Feedback sent from the App — "Send feedback" in the App's menu sends us an email. It contains the text you wrote, the category you picked (if any), the reply address you entered (optional — without it we cannot reply) and, only if you ticked "Include technical details", the app version and build, the platform, the browser engine (user agent), the App's language and — when you are signed in — your account's random identifier, so we can match the report with sync diagnostics. The message travels through our email provider (Resend) to feedback@pakaya.app, a mailbox forwarded by OVH to a Google mailbox we read it in. On our server we keep only metadata about the submission, never its text or your address: an identifier, the time, the length, whether an address or technical details were included, the category and — for a submission sent without an account — a salted hash of the network address, kept for 48 hours to limit abuse. The metadata is deleted after 90 days and with your account. The email itself is kept in the mailbox for up to 12 months and in Resend's delivery logs for 30 days; we delete it earlier on request to contact@pakaya.app. You can send feedback without an account.

f) Update check (mobile app) — when the mobile App starts or returns to the screen (at most every few hours), it downloads a small public file from our hosting provider, Vercel, to learn whether a newer version is available in the store. The request carries no account, device identifier, plan content or other data of yours; like any internet request, the hosting provider sees your IP address and standard request details (for example the kind of device or browser). Whether you chose "Later" is stored only on your device. The web version does not make this request.

g) Website visit statistics — on the public pages of our website (the home page, this policy, the terms, the contact and account-deletion pages, in English and Polish) we use Vercel Web Analytics to count visits. For each page view it records the page address without any query parameters, the time, the website you came from (only when you arrive from another site, in the form your browser passes on), your approximate location (country, region, city), and the type of device, operating system and browser. To tell visits apart without cookies, Vercel derives a temporary identifier from the request (including your IP address); according to Vercel it is discarded after 24 hours. Vercel stores this data under its own terms; we only see aggregated statistics. The App itself — everything under /app, sign-in, password reset, and the Android and iOS apps — is not measured.

4. Where data is stored

Locally on your device — always, regardless of whether you have an account (SQLite database on mobile / browser storage on web). This lets you use the App offline. On our server — only if you have an account and sync enabled. We use Supabase, with servers located in the European Union. Feedback you send from the App is an email: it is stored in our feedback mailbox (Google) and, for 30 days, in our email provider's logs (Resend).

5. Do we share data with third parties

We do not sell or share your data with third parties for marketing or advertising purposes. We only use technical services necessary for the App to function: Supabase (account data storage and sync), Vercel (web version hosting, the update-check file and the anonymous visit statistics described in section 3g), Sentry (error reports), Cloudflare (Turnstile bot protection on sign-in and on the feedback form), Resend (sending our emails — sign-in and password-reset messages, feedback sent from the App and our replies to it), OVH (forwarding the feedback mailbox) and Google (the mailbox where feedback is read and kept). In the web version, the sign-in form loads Google's and Apple's sign-in libraries as soon as it opens, so your browser downloads them from those companies' servers — even if you then sign in with email. We receive data from your Google or Apple account only after you choose that provider and confirm the sign-in; Google and Apple act as independent controllers of your sign-in data under their own terms. The App contains no ads or advertising trackers, and does not set cookies itself.

6. Your rights (GDPR)

As we process data of EU individuals, you have the right to:

• access your data,
• rectify inaccurate data,
• delete your account and all associated data — you can do this yourself in App Settings ("Delete account" button), which permanently removes data from our servers, or request it without the App — see Delete your account. If your account uses Sign in with Apple, deleting it also revokes Pakaya's access in Apple; if that fails, we show you how to revoke it yourself. One exception: feedback you already sent from the App is an email stored separately (section 3e) and is not removed by deleting the account — ask at contact@pakaya.app and we delete it,
• data portability — the App lets you export a plan's data to a file,
• object to processing,
• lodge a complaint with your national data protection authority (in Poland: UODO) if you believe your rights have been violated.

7. Children

The App is not directed at children and does not collect data directly from children — children never create accounts or log in. Data about children (name, approximate age) may only appear as information entered by an adult user (parent/guardian) about a participant of a plan.

8. Changes to this policy

We may update this policy periodically. We will notify you of material changes within the App.

9. Contact

Privacy questions: contact@pakaya.app.