Privacy Policy

Introduction

Welcome to Paaslo ("we", "our", or "us"). Paaslo is a zone-based real world social networking app that allows users to connect with people in their physical vicinity.

This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the Paaslo mobile application.

Information We Collect

Information You Provide

• Phone number (used for OTP verification via Twilio)
• Username and display name
• Profile information you choose to add
• Messages sent within the app (private chats)
• Zone-related activity (zones you join or create)

Information Collected Automatically

• Location data (GPS coordinates — only when app is in use)
• Device information (device type, OS version, app version)
• Usage data (screens visited, features used, session duration)
• Push notification tokens (via Expo Push Notifications)

Information We Do NOT Collect

• We do not require your real name or photo
• We do not collect email addresses
• We do not collect financial information
• We do not track your location in the background

How We Use Your Information

• To verify your identity via OTP authentication
• To show you zones available in your current location
• To enable real-time chat with other users in the same zone
• To calculate your Spark Score and manage your badge system
• To send push notifications for strikes, messages, and zone activity
• To improve app performance and fix technical issues
• To comply with legal obligations

Location Data

Paaslo uses your location exclusively to determine which zones you are near and to connect you with people in the same zone.

• Location is accessed only when the app is actively in use (foreground only)
• We do not track your location in the background
• Precise GPS coordinates are used to calculate zone proximity (within 200 meters)
• Location data is processed in real-time and is not stored permanently
• You can revoke location permissions at any time in your device settings

Data Storage & Security

Paaslo uses Supabase as our backend database provider. We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS / TLS)
• Row-level security policies on all database tables
• OTP-based authentication (no passwords stored)
• Regular security reviews of our systems

While we strive to protect your data, no method of transmission over the internet is 100% secure.

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data only with:

• Twilio — OTP verification service
• Supabase — secure database provider
• Expo — push notification service
• Google — Maps and Places API (location-based features)
• Legal authorities — only if required by law or court order

Your Rights

You have the following rights over your personal data:

• Access — Request a copy of your personal data
• Correction — Update your profile information within the app
• Deletion — Delete your account and all associated data
• Restriction — Request we stop processing your data
• Portability — Request your data in a portable format

Children's Privacy

Paaslo is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has used Paaslo, please contact us immediately at kurumell@paaslo.com and we will delete the data.

Data Retention

We retain your data for as long as your account is active. If you delete your account:

• Your profile and messages are deleted within 30 days
• Zone activity logs may be retained in anonymized form for analytics
• Legal records may be retained as required by applicable law

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via push notification or in-app message. Continued use of Paaslo after changes constitutes acceptance of the updated policy.