GLOBERRY PRIVACY POLICY

This Privacy Policy explains how Globerry collects, uses, stores, shares, and protects personal data when you use the Globerry mobile application, website, blog, legal pages, and related services.

Globerry is operated by Jan Tudruj, Poland.
Contact: contact@globerry.app

This Privacy Policy applies to the Globerry mobile application for iOS and Android, the Globerry website, the Globerry blog, legal pages, newsletter forms, support communications, and related services.

1. DATA CONTROLLER

The controller of personal data is:

Globerry, operated by Jan Tudruj
Poland
Email: contact@globerry.app

For privacy-related requests, contact contact@globerry.app.

2. WHAT GLOBERRY DOES

Globerry is a social travel app that allows users to discover and share real places around the world.

Users can create accounts, add pins with photos and GPS locations, browse pins, use maps, follow other users, like, save, comment, mark places as visited, build a Travel Map, collect badges, submit Unique Stay pins, receive notifications, and contact support.

Because Globerry is built around public travel content, uploaded pins and photos are public by default.

3. PERSONAL DATA WE COLLECT

Depending on how you use Globerry, we may collect the following categories of personal data.

A. Account data
– email address;
– username;
– password authentication data handled by Supabase Auth;
– Google account identifier, if you use Google Sign-In;
– Apple account identifier, if you use Apple Sign-In;
– authentication session information.

Globerry does not have access to your plaintext password. Passwords are handled by Supabase Auth and stored in hashed form.

B. Profile data
– username;
– avatar or profile photo;
– bio;
– profile visibility setting;
– follower and following relationships.

C. User content
– pin photos;
– profile avatar photos;
– location names;
– GPS coordinates;
– country;
– city or area;
– categories;
– vibes;
– seasonality data;
– tips;
– comments;
– likes;
– saves;
– follows;
– “Been Here” visits;
– collections;
– badges;
– reports;
– internal notifications;
– admin review information.

D. Location data
– GPS location while using the App, where you grant permission;
– manually selected locations;
– coordinates selected on the map;
– EXIF location data extracted from uploaded photos, where available;
– approximate location derived from map or discovery features;
– background location data, where you separately grant permission for nearby place notifications.

E. Device and technical data
– IP address;
– device type;
– operating system;
– app version;
– browser type where applicable;
– language preference;
– crash logs;
– technical logs;
– session information;
– error and performance information.

F. Support data
– email address;
– message subject;
– message content;
– user ID or account information included in the support email;
– any additional information you choose to provide.

G. Newsletter and marketing data
– email address;
– newsletter consent status;
– newsletter preferences;
– email engagement information where provided by Brevo, such as opens or clicks;
– unsubscribe status.

H. Website data
– website usage data collected through Google Analytics;
– cookie preferences;
– newsletter form submissions;
– basic technical data such as IP address, device, browser, and language.

4. HOW WE COLLECT DATA

We collect data when you create an account, sign in using email, Google, or Apple, edit your profile, upload photos, add pins, add photos to existing pins, select a location on the map, allow access to GPS location, upload photos containing EXIF data, like, save, follow, comment, report, mark a place as visited, submit a Unique Stay, use maps and discovery features, receive or interact with notifications, contact support, subscribe to a newsletter, visit the Website, or interact with cookies or analytics tools.

5. PURPOSES AND LEGAL BASES

We process personal data for the following purposes:

A. To provide the Service
This includes account creation, authentication, profile display, pins, maps, likes, saves, comments, follows, visits, badges, collections, notifications, and core App functionality.
Legal basis: performance of a contract.

B. To display public travel content
Pins, photos, locations, tips, vibes, seasonality, and other pin information are displayed to users of the App.
Legal basis: performance of a contract and legitimate interests in operating a social travel platform.

C. To process location-based features
We use location data to show nearby places, allow you to add pins, place pins on the map, read photo EXIF coordinates where available, enable map search, and provide nearby place notifications where separately enabled.
Legal basis: performance of a contract and, where required, consent.

D. To provide notifications
We process internal notification data and, where enabled, push notification data.
Legal basis: performance of a contract and consent where required.

E. To moderate content and protect the community
We process reports, account status, content, and user activity to detect abuse, review Unique Stays, handle copyright notices, block users, remove content, and protect the Service.
Legal basis: legitimate interests and legal obligations where applicable.

F. To provide support
When you contact support, we process your email and message content to respond.
Legal basis: performance of a contract and legitimate interests.

G. To send newsletters and marketing communications
We process your email address for newsletters only if you opt in.
Legal basis: consent.

H. To analyze and improve the App and Website
We may use analytics and crash reporting to understand app usage, fix crashes, improve performance, and improve product decisions.
Legal basis: legitimate interests and, where required, consent.

I. To comply with legal obligations
We may process data to comply with legal requests, enforce rights, prevent fraud, respond to claims, or meet regulatory requirements.
Legal basis: legal obligation and legitimate interests.

6. ACCOUNT REGISTRATION AND AUTHENTICATION

Users may create accounts using email and password, Google Sign-In, or Apple Sign-In on supported devices.

Authentication is provided through Supabase Auth.

If you use Google or Apple to sign in, Globerry may receive basic account information such as your email address, display name, and provider identifier, depending on what Google or Apple makes available.

Passwords are handled by Supabase Auth. Globerry does not receive or store plaintext passwords.

7. PHOTOS AND PUBLIC CONTENT

User-uploaded photos are stored in Supabase Storage.

Supabase Storage runs on AWS S3 infrastructure. The storage region depends on the Supabase project region configured by Globerry.

Photos uploaded to pins and avatar photos may receive permanent public URLs.

Because pins are publicly viewable in the App, pin photos are public. Anyone with the direct public file URL may be able to view the photo in a browser. The URL itself does not necessarily show the context of the pin, such as the place name, user profile, or comments.

Public pins and photos may remain available in the App unless deleted, removed, anonymized, or moderated.

8. LOCATION DATA

Globerry uses location data in several ways.

A. GPS while using the App
If you grant permission, Globerry may access your location while using the App to help you search for nearby pins, discover places around you, choose a pin location, and use map-based features.

B. Pin location
When adding a pin, you can choose a location manually, search for a place, or place a pin on the map.

C. EXIF data
If uploaded photos contain EXIF metadata with GPS coordinates, Globerry may read those coordinates to suggest the pin location. You can confirm, adjust, or choose a location manually where the App allows.

D. Background location
Globerry may request separate permission for background location access, also known as “always” location permission, for nearby place notifications, such as notifications about popular places near you.

Background location is optional. You can deny it, disable it in the App where available, or revoke it in your device system settings. Disabling background location does not prevent you from using other App features.

E. No continuous tracking by default
Globerry is not intended to continuously track your full travel route by default. Location access is used for specific App features and according to permissions you grant.

9. NOTIFICATIONS

Globerry uses two types of notifications.

A. Internal notifications
Internal notifications are visible inside the App, for example in the bell or activity section. They may include new followers, likes on your pins, and comments on your pins.

Internal notifications are stored in Supabase and do not require system push notification permission.

B. Push notifications
Globerry may send system push notifications if you grant permission. Push notifications may include new followers, likes on your pins, comments on your pins, and popular places nearby.

You can withdraw push notification permission at any time through your device system settings or App settings where available.

C. Nearby place notifications
Notifications such as “You are near a popular place” require separate background location permission. You can disable this feature independently from other notification types.

10. NEWSLETTER AND MARKETING COMMUNICATIONS

Globerry may offer an optional newsletter through the Website, App, or registration flow.

Newsletter consent is optional. Any checkbox for newsletter consent should be unchecked by default.

We use Brevo, formerly Sendinblue, for email marketing services.

Brevo is provided by:
Sinch Email SAS
55 Rue d’Amsterdam
75008 Paris
France

Brevo processes data on servers in the European Union in accordance with GDPR.

If you subscribe to the newsletter, we may process your email address, consent status, newsletter preferences, email engagement information where available, such as opens or clicks, and unsubscribe status.

You can unsubscribe at any time through the unsubscribe link in emails, App settings where available, or by contacting contact@globerry.app.

Marketing communications are processed separately from data necessary to provide the App.

11. CUSTOMER SUPPORT

Globerry support is handled by email.

When you use the support feature in the App, it opens your device’s email client and creates an email addressed to contact@globerry.app with a prefilled subject and message body.

No support ticket is automatically stored in the Globerry database unless otherwise introduced later.

Support messages are processed through email and may include your email address, subject, message content, user ID if included, device or issue information you choose to provide, and any attachments or screenshots you send.

12. WEBSITE, GOOGLE ANALYTICS, AND BLOG

The Globerry Website is primarily informational and may include information about the App, download links to App Store and Google Play, legal pages, contact information, newsletter forms, and blog content.

Globerry uses or may use Google Analytics to understand Website usage, such as page views, traffic sources, device types, approximate location, and general behavior on the Website.

Google Analytics is provided by Google LLC, USA.

The Website may use cookies and similar technologies. More information is available in the Cookie Policy.

13. CRASH REPORTING AND ANALYTICS IN THE APP

Globerry may use the following tools after launch.

A. Sentry
Sentry is used for crash reporting and technical error monitoring.

Provider:
Functional Software, Inc.
USA

Sentry may collect technical information such as crash reports, stack traces, device type, operating system, app version, time of crash, and technical context needed to diagnose bugs.

Sentry is used to identify and fix technical issues. It is not intended to track what users do in the App for behavioral analytics.

B. Firebase Analytics
Firebase Analytics is used for app usage analytics.

Provider:
Google LLC
USA

Firebase Analytics may collect usage information such as app opens, screen views, feature usage, engagement events, user flow information, device information, and app information.

Firebase Analytics helps Globerry understand which screens and features are used and where users may stop using the App.

Globerry should update this Privacy Policy before introducing additional analytics, tracking, attribution, or advertising tools not described here.

14. THIRD-PARTY PROVIDERS

Globerry uses or may use the following third-party providers:

Supabase, for authentication, database, storage, backend functions, and infrastructure.

AWS S3 infrastructure, underlying Supabase Storage for photo storage.

Mapbox, for maps, map display, map styles, location-related features, and map performance.

Google, for Google Sign-In, Google Analytics, Firebase Analytics, Google Play services, and Android-related services.

Apple, for Apple Sign-In and iOS-related services.

Brevo, for newsletters and email marketing.

Sentry, for crash reporting and technical monitoring.

Booking.com, as an external affiliate booking partner.

GetYourGuide, as an external affiliate activity partner.

App Store and Google Play, for app distribution, downloads, reviews, and app store interactions.

Third-party providers may process personal data according to their own privacy policies and terms where they act as independent controllers or processors.

15. AFFILIATE LINKS

Globerry may include affiliate links to external travel services such as Booking.com and GetYourGuide.

If you click an affiliate link, the third-party service may receive information such as that you came from Globerry, technical referral data, information you provide directly to that third-party service, and booking or purchase information depending on that provider’s policies.

Globerry may receive compensation from affiliate partners.

Globerry does not control third-party booking, cancellation, refund, payment, privacy, or customer support practices.

16. PRIVATE PROFILES

Users may make their profile private. When a profile is private, other users cannot view the profile, public pins may remain visible, pins may appear as added by an anonymous or private user, and interactions such as likes, follows, saves, and visits may still occur depending on App functionality.

Private profile settings do not make pins private.

17. ACCOUNT DELETION

When you delete your account, your profile is removed, your authentication account is deleted, your comments are deleted, your likes are deleted, your “Been Here” visits are deleted, your collections are deleted, your badges and progress are deleted, and your pins may remain public but are anonymized by removing the user link.

If other users have added their own photos or contributions to the same place, the place may remain available.

Deleted data may persist in backups for a limited period. Globerry currently relies on Supabase backups, which may be retained for approximately 7 days.

Some information may be retained where necessary for legal, security, fraud prevention, dispute resolution, or enforcement purposes.

18. SUSPENDED OR BLOCKED ACCOUNTS

If an account is blocked or suspended, the account may continue to exist in the database, the user may still be able to log in, the user may see an account suspension screen, normal App features may be unavailable, and previously submitted pins may remain public.

Globerry may retain data needed for safety, moderation, enforcement, legal, or fraud-prevention purposes.

19. DATA RETENTION

Globerry retains personal data for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, enforce Terms, protect safety, maintain backups, or support legitimate business purposes.

General retention principles:
– account data is retained while your account exists;
– public pins may remain after account deletion in anonymized form;
– comments, likes, visits, collections, and badges are deleted when your account is deleted, unless retention is legally necessary;
– support emails may be retained for a reasonable period to handle requests and disputes;
– newsletter data is retained until you unsubscribe or request deletion;
– technical logs may be retained for a limited period;
– backups may persist for approximately 7 days.

20. SECURITY

Globerry uses reasonable technical and organizational measures to protect personal data. These may include authentication through Supabase Auth, database access controls, storage access rules, secure infrastructure providers, limited administrative access, account suspension tools, moderation tools, backup systems, and secure third-party providers.

However, no system is completely secure. Globerry cannot guarantee absolute security.

21. INTERNATIONAL DATA TRANSFERS

Globerry is operated from Poland and uses third-party providers that may process data in the European Economic Area, the United States, or other countries.

Where data is transferred outside the European Economic Area, Globerry relies on appropriate safeguards where required, such as adequacy decisions, Standard Contractual Clauses, Data Privacy Framework participation, or other lawful transfer mechanisms.

Examples of providers outside the EEA may include Google LLC, Functional Software, Inc. (Sentry), Apple, or other infrastructure providers.

22. YOUR GDPR RIGHTS

If you are located in the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction with similar rights, you may have the right to access your personal data, correct inaccurate data, delete your data, restrict processing, object to processing, withdraw consent, receive a copy of your data, request data portability, and lodge a complaint with a supervisory authority.

You can exercise your rights by contacting contact@globerry.app.

Some requests may be subject to identity verification. Certain data may be retained where necessary for legal, security, fraud prevention, dispute, or legitimate business reasons.

23. CHILDREN

Globerry is not intended for users under 16 years old.

We do not knowingly collect personal data from users under 16.

If you believe a user under 16 has provided personal data to Globerry, contact contact@globerry.app.

24. SOCIAL MEDIA

If you interact with Globerry on social media, such as Instagram or TikTok, we may see public profile information and content you make available through those platforms.

Social media platforms process your data according to their own privacy policies.

Globerry may use publicly available interactions, comments, messages, or creator permissions to manage social media, respond to inquiries, promote the App, or collaborate with creators.

25. CHANGES TO THIS PRIVACY POLICY

Globerry may update this Privacy Policy from time to time. If changes are material, we may notify users through the App, Website, email, or another appropriate method.

Your continued use of Globerry after an updated Privacy Policy becomes effective means you acknowledge the updated Privacy Policy.

26. CONTACT

For privacy questions, requests, or complaints, contact:

Globerry, operated by Jan Tudruj
Poland
Email: contact@globerry.app

CHANGE LOG

Last updated: 17 May 2026