Privacy Policy

Last updated: August 2026

Pebi ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and protect your information when you use the Pebi mobile application (the "App").

1. Information We Collect

Location Information

• When: While you use the app to capture photos at landmarks. If you enable background location, we also use it to detect when you arrive in a new country or come near a landmark you haven't collected yet.
• What: Your precise GPS coordinates.
• Why: To verify you are physically at a landmark (the core of the app), to show your distance to landmarks, and — if enabled — to send arrival and nearby-landmark notifications.
• Storage: The location of each postcard is stored together with that photo, linked to your account, so your visit can be verified and shown on your map. Country-visit history is likewise stored to your account. This data is retained until you delete the postcard or close your account.

Camera and Photos

• When: When you choose to take photos within the app
• What: Photos you capture of landmarks and travel experiences
• Why: To build your personal travel collection and share with the community
• Storage: Photos are stored securely in your personal account using encrypted cloud storage

Account Information

• When: When you create an account using Apple Sign In or Google Sign In
• What: Basic profile information (name, email as provided by Apple or Google), and the authentication tokens from your sign-in provider.
• Why: To create and maintain your personal travel profile.
• Storage: Stored securely on our servers with encryption.

Social and Community Content

• What: Content you create in the app — comments, likes, the accounts you follow, and any reports or blocks you submit.
• Why: To power the social features and to keep the community safe (moderation). Reports and blocks are used to review and act on objectionable content and behaviour.

Notifications

• What: A device push token, if you allow notifications.
• Why: To send notifications such as a postcard from someone you follow, achievement unlocks, or arrival nudges.

Usage and Diagnostics

• What: How you use the app (feature interactions, sessions), crash and performance data, and your device model, OS version and app version. A per-installation identifier groups these events.
• Why: To keep the app reliable and to improve it. This data is sent to our own systems, is associated with your account, and is never sold or shared with advertisers.

Technical and Security Information

• What: Your IP address and basic device information when you sign in, and device-integrity checks (Apple App Attest).
• Why: To protect your account and the service from fraud and abuse.

2. How We Use Your Information

• Location Verification: Confirming you're at landmarks to validate your visits
• Personal Collection: Building your private travel photo gallery and collections
• Community Features: Enabling you to share travel experiences with followers (only if you choose)
• Achievements: Tracking landmark visits for your personal achievement progress
• Notifications: Sending the notifications you have enabled (arrivals, postcards from people you follow, achievements)
• Safety & Security: Moderating content, acting on reports and blocks, and protecting accounts from fraud and abuse
• App Improvement: Usage and diagnostics data (linked to your account, not sold or shared with advertisers) to keep the app reliable and improve it

3. Information Sharing

We do NOT sell, trade, or rent your personal information to third parties.

We may share information only in these limited cases:

• With your consent: When you choose to share photos or experiences publicly
• Legal requirements: If required by law or to protect our rights
• Service providers: With trusted partners who help operate our app (cloud hosting, image storage) under strict confidentiality agreements

4. Data Security

• All data is encrypted in transit (TLS) and at rest
• We use Apple Sign In and Google Sign In for secure authentication
• Photos and personal data are stored on secure, encrypted cloud servers
• Authentication tokens are stored securely on your device using iOS Keychain
• We regularly review and update our security practices

5. Your Rights and Choices

Location Access

You can disable location access anytime in iOS Settings > Pebi > Location. The app will still work but cannot verify landmark visits.

Photo Access

You control which photos you take and share. You can delete your photos anytime from your profile. Photos remain private unless you choose to share them.

Account Deletion

You can request deletion of your account and all associated data by contacting us at support@pebi.app. You can also delete your account directly within the app. Deletion is permanent and cannot be undone.

6. Data Retention

• Photos and their location: A postcard and the capture location stored with it are kept until you delete that postcard or close your account.
• Country-visit history: Retained while your account is active; deleted when you close your account.
• Account info: Retained while your account is active; deleted upon account closure.
• Usage, diagnostics and security logs: Retained for a limited period to operate and secure the service.

7. Children's Privacy

Pebi is intended for users 13 years and older. We do not knowingly collect personal information from children under 13. If we discover we have collected information from a child under 13, we will delete it immediately.

8. International Users

Pebi is designed for global travel experiences. Your data is processed and stored in the European Union (EU). If you're outside the EU, please note that your information will be transferred to and processed in EU data centers, which operate under GDPR protections.

9. Your European Privacy Rights (GDPR)

If you're in the European Economic Area, you have the right to:

• Access your personal data
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability
• Lodge a complaint with a supervisory authority

10. Your California Privacy Rights (CCPA)

If you're a California resident, you have additional rights:

• Right to know what personal information we collect
• Right to delete your personal information
• Right to opt-out of sale of personal information (we don't sell data)
• Right to non-discrimination for exercising your rights

11. Changes to This Policy

We may update this Privacy Policy occasionally. When we do, we will update the "Last updated" date at the top and notify you of significant changes through the app.

12. Contact Us

If you have questions about this Privacy Policy or your data:

Email: support@pebi.app

13. Company Information

Pebi OÜ
Registration Number: 17273096
Email: info@pebi.app

This privacy policy complies with Apple App Store Requirements, GDPR (General Data Protection Regulation), CCPA (California Consumer Privacy Act), and COPPA (Children's Online Privacy Protection Act).