Legal
Privacy Policy
Effective date: October 8, 2026
Pavilo helps you turn places, activities, and ideas into collections and plans. This Privacy Policy explains what information we collect, why we use it, when it may be shared, and the choices available to you.
1. Introduction
Pavilo ("Pavilo," "we," "us," or "our") provides the Pavilo mobile application, website, and related services (together, the "Service"). By using the Service, you acknowledge the practices described in this Privacy Policy.
2. Information we collect
A. Information you provide
- Account information: your email address, display name, account identifier, and limited profile information supplied by your chosen sign-in method.
- Saved content: places, coordinates, notes, collections, plans, events, reminders, and images you choose to add.
- Imported content: links you share with Pavilo and the publicly available text, images, audio, video, or metadata accessible through those links. We do not ask for your social-media password.
- Communications: information you include when you contact us for support or send feedback.
B. Information collected when you use Pavilo
- Location: your current device location, only when you grant permission, to center maps, show relevant places, or attach a location. Pavilo does not continuously track your location in the background.
- Usage and device information: app and operating-system version, device or app identifiers, screens viewed, features used, and general interaction events.
- Crash and performance information: diagnostics, error logs, and crash reports used to identify problems and improve reliability.
3. Subscriptions and payments
Purchases are processed by the app store connected to your device. We do not receive or store your full payment-card details. We may receive a transaction identifier, product purchased, subscription status, purchase and expiration dates, and storefront country so we can activate and restore paid features.
4. AI-assisted features
When you ask Pavilo to analyze an imported link or create a suggestion, the content needed to complete that request may be processed by artificial-intelligence services. This can include a shared link, accessible content, place information, and your instructions. We use the result to organize content, identify places, and generate suggestions. AI output can be inaccurate or incomplete, so important details should be verified independently.
5. How we use information
We use information to:
- create and secure your account;
- sync your library and provide the features you request;
- process imports and generate AI-assisted suggestions;
- manage subscriptions and restore purchases;
- respond to support requests;
- detect abuse, protect the Service, and comply with law; and
- understand usage, fix errors, and improve performance; and
- measure the effectiveness of Pavilo advertising, subject to your applicable tracking choices.
Analytics, diagnostics, and advertising measurement
We use Firebase Analytics and PostHog to understand how features are used, Firebase Crashlytics and Sentry to diagnose errors and app performance, and RevenueCat to manage and analyze subscriptions. These services may receive app or device identifiers and relevant usage, diagnostic, or purchase information. Where an account identifier is provided, this information can be linked to your Pavilo account. PostHog may record how you interact with app screens to help us find usability problems; text and images on screen are masked in these recordings. Sentry and PostHog data is hosted in the European Union. Before data is sent to Sentry or PostHog, we remove the addresses of links you save and keep only the website name.
We also use advertising measurement partners, including Meta App Events, to understand the effectiveness of Pavilo ads. Measurement data may include device identifiers and app activity such as viewing an offer, starting checkout, and completing a purchase, including the product, amount, and currency. Advertising partners may combine this information with data from other apps or websites for advertising measurement.
On iOS, tracking for advertising measurement is subject to your App Tracking Transparency permission. You can decline and continue using Pavilo, or change your choice in Settings > Privacy & Security > Tracking. Declining tracking does not turn off the separate product analytics, crash diagnostics, or account and subscription processing described above.
6. How information is shared
We do not sell your personal information. We disclose information only as reasonably necessary in the following circumstances:
- Service providers: companies that support authentication, cloud storage and processing, AI features, maps, analytics, crash diagnostics, customer support, and subscription management. They process information to provide services to us and are subject to their own contractual and legal obligations.
- Advertising measurement partners: we share the identifiers and activity described above to measure Pavilo ads, subject to applicable permissions and your tracking choice.
- Other users: people you intentionally share a collection, plan, or other content with can view the information included in what you share.
- Legal and safety reasons: when disclosure is required by law or reasonably necessary to protect Pavilo, our users, or others from harm, fraud, or misuse.
- Business changes: in connection with a merger, acquisition, financing, or sale of all or part of the Service, subject to appropriate safeguards.
7. Data retention and security
We retain account information and saved content while your account is active and for as long as needed to provide the Service. After account deletion, personal information is removed from active systems within a reasonable period, although limited copies may remain temporarily in protected backups or where retention is required for security, dispute resolution, or legal compliance.
Media used during an import may be processed temporarily and is not intended to be retained longer than necessary to complete the request. We use reasonable technical and organizational safeguards, including access controls and encryption in transit. No online service can guarantee absolute security.
8. Your choices and rights
- Device permissions: you can change location and photo permissions in your device settings.
- Your content: you can manage or delete saved content within the App.
- Account deletion: you can delete your account in Pavilo from Profile > My account > your account/email row > Delete my account and confirm the request. You can also request deletion by following the instructions at pavilo.org/delete-account or email support@pavilo.org. We may need to verify that you own the account before processing the request, including reauthentication for an Apple-connected account. You do not need to email support to complete the in-app deletion flow. Deleting your account does not cancel an app-store subscription; subscriptions must be managed separately through the relevant store.
- Privacy rights: depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. You may also have the right to lodge a complaint with a data-protection authority.
To exercise a privacy right, contact us at support@pavilo.org. We may need to verify your identity before completing a request.
9. Children's privacy
Pavilo is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, contact us so we can take appropriate action.
10. International data transfers
Your information may be processed in countries other than the country where you live. Where required, we use appropriate legal mechanisms and safeguards for international transfers.
11. Changes to this policy
We may update this Privacy Policy as Pavilo evolves or legal requirements change. If a change is material, we will provide appropriate notice through the Service or on this page. The effective date above shows when this policy was last revised.
12. Contact us
Questions, requests, or concerns about this Privacy Policy can be sent to support@pavilo.org.