Piri — Privacy Policy

Last updated: September 20, 2026

Piri ("the app", "we", "us") is a travel and points-of-interest discovery app. This policy explains what information Piri collects, how it is used, and who it may be shared with. It applies to everyone who uses the Piri iOS app.

Information you provide to us

• Account information: email address and password (stored as a one-way hash, never in plain text), or your Apple ID identifier if you sign in with Apple. An optional display name and username.
• Profile preferences: things you choose to tell us to personalize recommendations — interests, profession, budget level, group type, travel pace, dietary needs (e.g. halal, kosher, vegetarian), and your faith or belief (including "secular" or "prefer not to say"). All optional. Faith and dietary details are sensitive; we use them only to tailor recommendations (for example, surfacing places of worship or suitable food) and they are included in the requests we send to our AI providers when you ask for a personalized answer. We never use them for advertising.
• Purchases: when you buy a Piri subscription or Trip Pass, Apple sends us a signed transaction record (product and transaction ID) so we can unlock your benefits. We never receive your payment card or Apple ID payment details.
• Content you submit: photos and captions you upload for a place, reports you file about other users' content, and users you choose to block.
• Social preferences: if you choose to add friends or appear on the public leaderboard, your username, XP, and trip statistics may become visible to other users — this is off by default and controlled entirely by you in Settings.

Information collected automatically

• Location: used, with your permission, to search nearby places, show weather, and calculate directions. Sent with each relevant request; Piri does not keep a running history of your location outside of trips you choose to record.
• Trips you record: when you start a trip, Piri records the route you travel and the places you visit, and saves them to your account so they sync across your devices and power your Trip Recap. If you grant "Always" location access, this recording continues in the background, but only while a trip recording is active. You can delete any trip, or your whole account, at any time.
• Photos you scan or ask about: when you use the camera-based "identify this place" feature or ask a question about a place, the photo or question is sent to our AI providers to generate a response. It is not stored after the request completes unless you separately choose to submit it as a place photo.
• Device push token: if you enable notifications, an Apple Push Notification token tied to your device.
• Crash and error diagnostics: technical error reports (via Sentry) to help us fix bugs. These do not include your account password or photo content.

How we use your information

• To operate core features: search, AI-generated place descriptions, directions, weather, saved places and trips, and account sync across your devices.
• To personalize recommendations based on the profile preferences you provide.
• To moderate user-submitted content and enforce our reporting/blocking system.
• To diagnose and fix technical problems.
• To enforce usage limits on premium features.

We do not sell your personal information, and we do not use your data for third-party advertising.

Third-party services we use

Certain features send limited, request-specific data to these providers so they can generate a result. Each is used only for the purpose described:

• OpenAI — AI-generated place descriptions, chat answers, photo identification, and pre-publication moderation of submitted photos.
• Google (Generative AI, Places) — AI responses and, for paying users, richer place details.
• OpenRouter — routes some AI requests to the model currently configured for that feature.
• Tripadvisor, Unsplash, OpenWeather, OpenRouteService — ratings/reviews, photos, weather, and turn-by-turn directions respectively.
• Open data services (Wikipedia, Wikimedia Commons, Wikidata, Wikivoyage, OpenStreetMap Nominatim and Overpass, and public-holiday data) — receive a place or city name or approximate coordinates to look up descriptions, photos, nearby places, and local holidays. No account information is sent.
• Sentry — crash and error diagnostics.
• Apple — Sign in with Apple and push notification delivery.

Where your data is stored

Account and app data is stored in a Postgres database hosted in Frankfurt, Germany. Photos you submit are stored in Cloudflare R2 object storage.

Your rights

You can request access to, correction of, or deletion of your account and associated data at any time by contacting us at the address below. Deleting your account removes your profile, saved places, trips, and submitted content from our systems, except where we are required to retain records (e.g. content already reported for moderation review) and the anonymous transaction IDs of one-time purchases, which we keep so a purchase receipt cannot be redeemed twice.

Children's privacy

Piri is not directed at children under 13, and we do not knowingly collect information from children under 13.

Content moderation, reporting, and blocking

User-submitted photos are automatically screened before becoming visible to other users. You can report content you believe is inappropriate, and block users whose content you no longer want to see — reported content that receives multiple reports is automatically hidden pending review.

Changes to this policy

If we make material changes to this policy, we will update the "Last updated" date above.

Contact

Questions about this policy or your data can be sent to privacy@getpiri.com.