Piligrimun Privacy Policy

Last updated: 23 October 2026

1. Who is responsible

Iurii (Yura) Bruskov, an individual in Prague, Czech Republic, working as lets.engineering. Write about anything in this policy to [email protected].

2. What we collect and why

Account

On first launch the app creates an anonymous account: a random ID, nothing else. If you sign in with Apple or Google, that service gives us an account ID and, depending on your choice and the service, an email address and a name. They stay in the sign-in system (Firebase Authentication). The app does not show, copy or use them. With Apple you can hide your email.

Nickname and traveler card

The nickname is optional. Next to it, other users can open your traveler card: how many rides with pilgrims you had, how many dreams came true with you and how many pilgrims you made. There is no ranking or comparison.

Pilgrims

For each pilgrim: its name, look, the drawing on its back, its dream (a city or a country), its birthplace (a city), its passport number, who holds it now and until when.

Postcards

When you write a postcard we store the robot's snap, up to three words your phone recognised in the picture, your caption (up to 200 characters), the city, the place rounded to about 1 km, the weather and the time. The snap is a tiny picture made on your phone from the camera image: 144 × 192 points in 16 shades of grey, shown as the effect you picked (dots, letters, newspaper, cross-stitch and others). A face close to the camera can be recognised at that size. The camera image itself is not saved and not sent anywhere.

Location

The app asks for your location only while you use it: to name your city, to measure how far a pilgrim has travelled and to show pilgrims waiting for a ride near you. Our server rounds every location to about 1 km (0.01°) before it stores it or asks Apple for the city and the weather. We never track location in the background.

Notifications

A notification token for each of your devices, your time zone and your language, so that notifications arrive in your language and the daily digest comes at 8 pm your time.

Reports and blocking

If you report something, we store the report and the reason you typed. If you hide a person, their account ID goes into your private list.

What we don't collect

Contacts, photos from your library, the camera image, your exact location, the advertising ID, analytics or crash reports.

3. Who sees what

• People who carry or follow the same pilgrim see your nickname, your traveler card, the pilgrims you made and your postcards: snap, caption, city, place rounded to about 1 km and time. Postcards appear two hours after you send them, so nobody can tell where you are right now. Pilgrim data includes the account ID of its maker and holder.
• Anyone with a pilgrim's link or QR code sees a web page with its name, passport number, birth city, kilometres travelled and number of companions.
• Nobody sees your email, your name from Apple or Google, your reports or your hidden list.

4. Services we use

• Google Firebase (Authentication, Firestore, Cloud Functions, Cloud Messaging, Hosting) stores and processes the data. Our database and server code run in the European Union. Google may process some data outside the EU under the EU Standard Contractual Clauses.
• Google Cloud Vision checks every snap for inappropriate content before others see it. The snap is sent without your account ID; we keep only the result of the check. Captions are checked against our own word list, without any outside service.
• Apple Maps Server API and Apple WeatherKit receive the rounded place and return the city name and the weather. They get no account ID.
• Sign in with Apple and Google Sign-In, if you choose to sign in.
• On Android, Google ML Kit recognises words in the picture on your phone. Google says the kit may send it diagnostic data about the kit itself.
• Server logs. Google Cloud keeps technical request logs (IP address, browser) for up to 30 days.

We don't sell data and don't share it for advertising.

5. Legal bases

Under the GDPR we process data to provide the game you asked for (contract), to keep it safe from abuse and inappropriate content (legitimate interest), and with your permission for location, camera and notifications, which you can withdraw in your phone's settings at any time.

6. How long we keep it

• Your data stays while your account exists.
• When you delete your account we remove the account, your nickname, your traveler card, notification tokens, email and name, and the caption and snap of each of your postcards. The postcards themselves stay as "anonymous companion" with the city, the rounded place and the time, because they are part of other people's pilgrims' journeys. Pilgrims you made keep travelling without your name.
• Reports: one year. Pilgrim links: deleted a day after they expire. Server logs: up to 30 days. City and weather cache: 7 days, with no account ID.

7. Deleting your account

In the app: Profile, Delete account. It takes effect at once.

Without the app: write to [email protected] from the email address of the Apple or Google account you signed in with, and we will delete the account within 30 days. If you never signed in, the account isn't linked to anything we could check, so delete it from the app.

8. Your rights

You can ask for a copy of your data, a correction, deletion or a transfer, and you can object to processing. Write to [email protected]. You can also complain to the Czech Office for Personal Data Protection (ÚOOÚ) or to the data protection authority where you live.

9. Age

Piligrimun is for people aged 16 and over. If you think someone younger uses it, write to us and we will delete the account.

10. Changes

When this policy changes, we update this page and the date above. If a change is significant, we also tell you in the app.