Privacy Policy

Last updated: August 19, 2026

Pakaya is a mobile and web app for creating and organizing packing lists and trip planning — checklists, notes, optional sync across devices. This privacy policy describes what data the App ("the App", "we") collects and processes, on what legal basis, and what rights you have as a user.

1. Data controller

The data controller can be contacted at: contact@pakaya.app.

2. Legal basis for processing

We process your data based on:

• Art. 6(1)(b) GDPR (performance of a contract) — to the extent necessary to provide the account and cross-device sync feature you opt into by creating an account;
• Art. 6(1)(f) GDPR (legitimate interest) — for technical data collected via Sentry, necessary to detect errors and maintain the App's stability.

Data you enter locally (without an account, in offline mode) is never processed by us at all — it stays exclusively on your device.

3. What data we collect

a) Account (optional) — The App works fully without creating an account (local/offline mode). If you choose to create an account to sync data across devices, we collect only your email address and your password (stored hashed, never in plain text). We do not offer Google/Apple sign-in or any other third-party login — email and password only.

b) Your trip content — if sync is enabled, the following data you enter is stored on our server: trip names, checklists and their contents, free-text notes (e.g. booking references, directions), and participant details you enter manually — name, color, and optionally a broad age range (e.g. "school-age child"). Participants are not separate accounts — they are information about your travel companions (including children) that you, the account holder, enter for your own trip planning. Children never create accounts or log in to the App themselves.

c) Technical data (app stability) — we use Sentry to detect application errors and crashes so we can fix them. Only technical information is collected (error type, application context) — never the content of your personal data or checklists.

4. Where data is stored

Locally on your device — always, regardless of whether you have an account (SQLite database on mobile / browser storage on web). This lets you use the App offline. On our server — only if you have an account and sync enabled. We use Supabase, with servers located in the European Union.

5. Do we share data with third parties

We do not sell or share your data with third parties for marketing or advertising purposes. We only use two technical services necessary for the App to function: Supabase (account data storage and sync) and Vercel (web version hosting). The App contains no ads or advertising trackers, and does not use cookies.

6. Your rights (GDPR)

As we process data of EU individuals, you have the right to:

• access your data,
• rectify inaccurate data,
• delete your account and all associated data — you can do this yourself in App Settings ("Delete account" button), which permanently removes data from our servers,
• data portability — the App lets you export your trip data to a file,
• object to processing,
• lodge a complaint with your national data protection authority (in Poland: UODO) if you believe your rights have been violated.

7. Children

The App is not directed at children and does not collect data directly from children — children never create accounts or log in. Data about children (name, approximate age) may only appear as information entered by an adult user (parent/guardian) as part of planning a shared trip.

8. Changes to this policy

We may update this policy periodically. We will notify you of material changes within the App.

9. Contact

Privacy questions: contact@pakaya.app.