Privacy Policy
1. Controller and contact
MyNow Apps (individual developer based in Portugal) operates Trailyo. For privacy requests contact support@mynw.app. This policy applies to the Trailyo app and Trailyo pages on mynw.app, not to other MyNow Apps products.
2. Data processed
- Account: email address, account identifier, sign-in provider and authentication records handled by Supabase Auth; passwords are not stored by Trailyo in readable form.
- Profile and preferences: nickname, avatar, home city, language, interests and visibility setting.
- User activity: saved events, attendance, memberships, posts, group conversations, messages, comments, reactions, reports and blocks.
- Media: photos and files voluntarily uploaded to events, groups, profiles and albums, including technical storage metadata.
- Technical/security: timestamps, IP/device and request logs processed by hosting, authentication and anti-abuse services. We do not require precise GPS location for city selection.
- Support: messages sent to support and account-deletion requests, including processing status.
3. Purposes and legal bases
Account operation, community features and requests are processed to perform the service (GDPR Art. 6(1)(b)); abuse prevention, safety, integrity and defence of legal claims under legitimate interests (Art. 6(1)(f)); obligations under applicable law (Art. 6(1)(c)). Optional profile fields are user-controlled. We do not sell personal data to advertisers.
4. Processors and external services
Supabase provides authentication, database and file storage. OpenAI may process event descriptions and community content for translation and moderation; do not enter secrets in public posts. External providers (including Viator, Musement and original event publishers) process information under their own policies if you open their links. Partner cards may be affiliate referrals; Trailyo does not process the external booking payment. External poster images may be requested directly from the publisher's servers.
5. Visibility and moderation
Events and public group posts may be viewed by others; discussion messages are visible to permitted room members. Reporting and blocking are available in applicable screens. Do not publish other people's personal data without permission. Content may be reviewed, hidden or removed to protect users and comply with law.
6. Retention and deletion
Account data remains while an account is active and until deletion is processed, subject to legal retention requirements. Account deletion requests are available in the app and on the deletion page. Deletion includes associated user-generated content to the extent required by law; limited records may be retained for legal obligations or abuse investigations. Backups and third-party copies may not disappear instantly. The service does not promise immediate deletion on submitting a request.
7. Your GDPR rights
You may request access, rectification, erasure, portability, restriction and object to processing. Contact support with the email used for the account; we may verify identity before disclosing or deleting data. You may complain to Portugal's CNPD or another competent authority. See data rights.
8. International transfers and security
Some service providers may process data outside the EEA with applicable safeguards. We use access controls, RLS policies and service-side credentials. No internet service can guarantee absolute security. Contact support for security concerns.
9. Children and updates
Trailyo accounts and social features are intended for people aged 16 and older. The app is not designed for children. Material changes to this policy will be reflected here with an updated date.
Политика конфиденциальности
1. Оператор и контакты
Trailyo поддерживается MyNow Apps (индивидуальный разработчик в Португалии). Обращения: support@mynw.app. Документ относится только к Trailyo.
2. Собираемые данные
Email, идентификатор пользователя, способ входа (Supabase Auth), имя профиля, аватар, город, язык и интересы; сохранённые события, участие, группы, сообщения, комментарии, жалобы и блокировки; добровольно загруженные фотографии. Провайдеры могут обрабатывать IP-адрес, время запроса и технические журналы для безопасности. Точная геолокация не требуется для выбора города.
3. Цели и основания
Предоставление функций приложения и аккаунта — исполнение договора (ст. 6(1)(b) GDPR); защита от злоупотреблений — законный интерес (ст. 6(1)(f)); правовые обязанности (ст. 6(1)(c)). Персональные данные рекламодателям не продаются.
4. Сторонние сервисы
Supabase — авторизация, база и хранение. OpenAI может обрабатывать описания и публикации для перевода и модерации. Viator, Musement и сайты организаторов получают данные по собственным политикам при переходе по внешним ссылкам. Бронирование и оплата выполняются у партнёра. Некоторые афиши загружаются с серверов правообладателей.
5. Публичность
Публичные публикации и афиши могут видеть другие люди; сообщения обсуждений доступны разрешённым участникам. Возможны жалобы, блокировки и удаление запрещённого контента. Не публикуйте чужую личную информацию.
6. Хранение и удаление
Данные аккаунта хранятся до обработки запроса на удаление, кроме необходимых по закону записей. Запрос доступен здесь и в профиле. Отправка запроса не равна мгновенному удалению; резервные копии и копии у третьих лиц могут сохраняться некоторое время.
7. Права GDPR
Доступ, исправление, удаление, перенос, ограничение обработки и возражение. Напишите с email аккаунта; при необходимости подтвердите личность. Возможна жалоба в CNPD.
8. Защита, международные передачи и возраст
Применяются разграничение прав, авторизация и серверные ключи. Некоторые поставщики могут обрабатывать данные за пределами ЕЭЗ при соответствующих гарантиях. Социальные функции предназначены для пользователей от 16 лет. Обновления публикуются с датой.
Política de Privacidade
1. Responsável
O Trailyo é operado pela MyNow Apps (programador individual sediado em Portugal). Contacto: support@mynw.app. Esta política aplica-se exclusivamente ao Trailyo.
2. Dados tratados
Email, identificador, fornecedor de autenticação (Supabase Auth), perfil, fotografia, cidade, idioma e interesses; eventos guardados, presenças, grupos, mensagens, comentários, denúncias e bloqueios; ficheiros carregados voluntariamente. Serviços técnicos podem tratar IP, timestamps e registos de segurança. Não exigimos localização GPS precisa para selecionar a cidade.
3. Finalidades e fundamentos
Funcionamento do serviço e da conta: execução do contrato (art. 6.º/1/b RGPD); prevenção de abusos: interesse legítimo (art. 6.º/1/f); obrigações legais (art. 6.º/1/c). Não vendemos dados pessoais a anunciantes.
4. Prestadores e parceiros
Supabase presta autenticação, base de dados e armazenamento. A OpenAI poderá tratar conteúdos para tradução e moderação. Viator, Musement e os organizadores têm políticas próprias quando abre os seus links; as reservas e pagamentos decorrem fora do Trailyo. Alguns cartazes são carregados dos servidores dos titulares.
5. Visibilidade e segurança
Eventos e publicações públicas podem ser visíveis a terceiros; mensagens de discussão são visíveis aos membros autorizados. É possível denunciar e bloquear utilizadores. Não publique dados de outras pessoas sem autorização.
6. Conservação e eliminação
Os dados permanecem enquanto a conta está ativa, até à execução de um pedido de eliminação, salvo retenções exigidas por lei. Pode pedir a eliminação aqui ou na aplicação. O pedido não elimina imediatamente todos os dados; cópias de segurança e terceiros poderão ter prazos próprios.
7. Direitos RGPD
Pode solicitar acesso, retificação, apagamento, portabilidade, limitação e oposição. Contacte-nos pelo email da conta; poderemos confirmar a identidade. Pode reclamar junto da CNPD.
8. Transferências e menores
Alguns fornecedores poderão tratar dados fora do EEE com salvaguardas adequadas. Aplicam-se controlos de acesso e credenciais de servidor. As funcionalidades sociais são destinadas a pessoas com idade igual ou superior a 16 anos.