דילוג לתוכן
חזרה לפאצ׳ו

Pachu - Privacy Policy

עודכן לאחרונה: July 23, 2026

המסמך המשפטי הזה כתוב באנגלית. אפשר לפנות אלינו בכל שאלה.

Pachu (“Pachu,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you access or use the Pachu application, website, platform, and related services (collectively, the “Services”). This Privacy Policy applies to users of Pachu, including users who create accounts, browse places, post reviews, upload content, create lists, use social features, receive recommendations, or otherwise interact with the Services. By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, you should not use the Services. This Privacy Policy does not replace our Terms of Service. The Terms of Service govern your use of the Services. This Privacy Policy governs how we handle personal information. 1. Minimum Age The Services are intended only for users who are at least 16 years old. You may not create an account or use the Services if you are under the age of 16. During registration, we may require users to confirm that they are at least 16 years old. We do not knowingly collect personal information from anyone under the age of 16. If we become aware that a person under 16 has provided personal information to us, we may delete the account and take any additional action we consider appropriate. If you believe that a person under 16 has created an account or provided personal information to Pachu, please contact us at: amitchimya@pachu.app 2. Information We Collect We collect information in several ways: information you provide directly, information generated through your use of the Services, information from your device, information from third-party services, and information created through our recommendation and personalization systems. 2.1 Account Information When you create or manage a Pachu account, we may collect information such as: name; username; email address; phone number; profile photo; login method; account settings; age confirmation status; Terms of Service and Privacy Policy acknowledgement records; account creation date; account status; and other information you choose to add to your profile. 2.2 Authentication Information You may be able to sign in using third-party authentication services, including Google Sign-In and Apple Sign-In. When you use these services, we may receive information from the authentication provider, such as your name, email address, unique account identifier, profile image, and authentication-related information, depending on your settings with that provider. Your use of Google, Apple, or any other third-party authentication service is also subject to that provider’s own terms and privacy policy. 2.3 User Content The Services allow users to create, upload, post, save, or share content. This may include: reviews; ratings; posts; photos; comments; lists; wishlists; tags; mentions; profile information; recommendations; feedback; reports; interactions with other users; and other content you choose to submit through the Services. User Content may contain personal information about you or others, depending on what you choose to include. You should not upload content that is highly sensitive, confidential, or that you are not authorized to share. 2.4 Public and Private Content Some features of the Services may allow you to choose whether certain content is public or private. Public content may be visible to other users and may appear in places such as your profile, feeds, place pages, recommendation surfaces, search results, social features, or other areas of the Services. Private content is intended to be visible only according to the privacy settings available in the Services. We aim to respect and enforce the privacy settings you select. However, no digital service can guarantee perfect security or error-free operation at all times. You should avoid uploading highly sensitive or confidential information to the Services. We may process both public and private content as necessary to operate, secure, maintain, personalize, improve, and support the Services, subject to this Privacy Policy. 2.5 Tags and Mentions The Services may allow users to tag or mention other users in posts, reviews, photos, or other content. If another user tags or mentions you, we may process that information to display the tag, notify you, support reporting and blocking features, and operate social functionality. You may report content that you believe violates your rights or our policies. We may also provide features that allow users to remove themselves from tagged content. Users are responsible for ensuring that they have the necessary rights and permissions before uploading content that includes or identifies another person. 2.6 Contacts Information Pachu may offer an optional “Find Friends” feature that allows you to find people you may know on the Services. If you choose to grant access to your contacts, we use contacts information to help you find friends on Pachu and to notify you when a contact with a verified phone number joins Pachu. Granting contacts access is optional. You can use the Services even if you do not grant contacts permission. Raw phone numbers from your address book are normalized and cryptographically hashed on your device before contact-sync data is sent to Pachu. We may store those hashes together with the display name you assigned to the contact so that a join notification can use a name you recognize. We do not receive the raw address-book phone number through this matching flow. Hashing is intended to reduce direct identifiability, but hashed contact data and local contact names may still be treated as personal information where applicable. Join notifications are sent only to users whose contact-sync permission was granted and whose active synced contact data contains the new user’s verified phone-number hash. You can revoke Contacts permission in your device settings; when the app next detects that revocation, it disables contact matching and requests deletion of the contact-sync data associated with your account. We do not use contacts information to send invitations to non-users unless you take a separate, explicit action to do so. At this stage, Pachu does not send invitations to contacts through the Find Friends feature. Contacts-related information associated with your account may be deleted when you delete your account, subject to applicable law and technical limitations. 2.7 Location Information Pachu may use your device’s location in real time to help you find nearby places and receive location-relevant recommendations. We do not use background location tracking as part of the current Services. We do not store a history of your precise locations. When you choose to use location-based features, your device location may be used temporarily to identify relevant nearby places, calculate proximity, improve search results, or provide location-based recommendations. You can control location permissions through your device settings. If you disable location access, some location-based features may not work properly. 2.8 Search and Recommendation Inputs You may enter search queries, filters, preferences, or other inputs into the Services. These inputs may be used to provide search results, personalize recommendations, improve ranking, understand your preferences, and operate the Services. Pachu does not currently store your search history as a user-facing history. However, search queries and related interaction data may be processed temporarily or through service providers as necessary to provide, secure, analyze, improve, or debug the Services. 2.9 Usage, Device, and Technical Information When you use the Services, we may collect technical and usage information, including: device type; operating system; app version; browser type; device identifiers; IP address; approximate location derived from IP address; language settings; time zone; pages, screens, and features viewed; taps, clicks, scrolls, navigation paths, and interactions; crash reports; performance data; error logs; session information; referral source; timestamps; and other diagnostic or analytics information. 2.10 Session Recordings and Analytics We use analytics tools, including PostHog, to understand how users interact with the Services, improve product quality, detect bugs, analyze feature usage, and improve user experience. These analytics tools may include session recording or session replay technologies that record how users interact with the app or website, including screens viewed, taps, clicks, scrolling, navigation paths, and other usage behavior. Session recordings are used for product analytics, debugging, usability improvement, and service improvement. Session recordings are part of the Services and are not currently controlled by an in-app opt-out toggle. We aim to limit the collection of unnecessary personal information through analytics and session recording tools. However, depending on how you use the Services, session recordings or analytics data may include personal information or content visible on your screen. PostHog is currently operated for Pachu using infrastructure in the United States. 2.11 Communications With Us If you contact us by email, through support channels, through the app, or through another method, we may collect the information you provide, including your name, email address, account information, message content, attachments, and any other information you choose to include. We use this information to respond to your request, provide support, investigate issues, process privacy or legal requests, improve the Services, and maintain records. 2.12 Information From Third-Party Sources We may receive or collect information from third-party services, public sources, APIs, service providers, maps, place databases, reservation platforms, analytics tools, authentication providers, or other sources. This may include information about places, restaurants, venues, menus, opening hours, addresses, availability, photos, ratings, reservation options, and other place-related information. 2.13 Referral Links and Deferred Deep Linking When you open a Pachu smart link, we may use Branch to route you to the relevant public content, the App Store, or the same content after installation. Branch may process the public content identifier contained in the link, referral channel and campaign information, click, install, and app-open events, timestamps, device and network information, and related technical signals used for routing, attribution, fraud prevention, and measurement. On iPhone, an optional Branch feature called NativeLink may offer a button that copies the smart-link information to your device clipboard before opening the App Store. If you choose that button, Pachu may request permission on first launch to read that copied link so the app can restore the content you selected after installation. Pachu uses the clipboard value for this deep-link handoff and does not use this feature to read unrelated clipboard content. Pachu does not send your name, email address, or user-entered review text to Branch through this smart-link flow. Public review identifiers and public preview metadata may be included so the link can display and open the selected post. 3. How We Use Information We use personal information for the purposes described below. 3.1 To Provide and Operate the Services We use information to: create and manage user accounts; authenticate users; display profiles; enable posting, reviews, ratings, lists, wishlists, tags, and social features; provide search results; display places and place-related information; enable location-based features; send notifications; provide customer support; process account deletion and privacy requests; maintain service functionality; and operate the Services. 3.2 To Personalize Recommendations and Experience We use information to personalize your experience, including to: recommend places that may fit your preferences; rank and filter search results; build and update taste, preference, and recommendation signals; understand your interactions with places, reviews, lists, ratings, and other users; show social recommendations; improve recommendation quality; and tailor content, feeds, suggestions, and product features. Recommendations and personalization may be based on information such as your ratings, reviews, lists, wishlists, profile information, interactions, social connections, location-based searches, and activity within the Services. 3.3 To Provide Social Features We use information to support social functionality, including: following or connecting with other users; finding friends; displaying public profiles and content; tagging and mentions; comments; likes or other reactions; notifications about social activity; blocking; reporting; and safety and moderation features. 3.4 To Use AI and Automated Technologies We may use artificial intelligence, machine learning, language models, automated systems, and third-party AI service providers, including OpenAI, to operate and improve the Services. For example, we may use AI or automated technologies for: smart search; understanding reviews; generating or improving tags and categories; personalized recommendations; content summaries; moderation and detection of potentially harmful or policy-violating content; ranking and matching; improving place discovery; and improving product functionality. Search inputs, reviews, ratings, place-related information, and other relevant content may be processed by AI systems or sent to AI service providers for these purposes. We aim to avoid sending unnecessary personal information to AI providers, but information you submit may be included where it is needed to provide or improve AI-powered features. 3.5 To Analyze, Improve, and Develop the Services We use information to: understand how users use the Services; analyze product performance; detect and fix bugs; improve design and usability; test new features; conduct analytics; measure engagement; improve recommendations; improve safety and moderation; and develop new features, products, and services. 3.6 To Communicate With You We may use your information to send: account-related messages; security notices; service updates; support responses; legal notices; privacy-related responses; push notifications; activity notifications; product updates; and other communications related to the Services. You can manage push notifications through your device settings and, where available, through settings in the Services. 3.7 To Protect Users, Pachu, and Others We use information to: enforce our Terms of Service and policies; detect abuse, fraud, spam, manipulation, fake reviews, security threats, or harmful activity; investigate reports; moderate content; block or restrict users; protect the integrity of recommendations, ratings, and reviews; prevent unauthorized access; debug technical issues; protect legal rights; and comply with applicable laws or legal processes. 3.8 To Comply With Legal Obligations We may use or retain information when necessary to: comply with applicable laws, regulations, legal obligations, or court orders; respond to lawful requests from authorities; establish, exercise, or defend legal claims; maintain required records; enforce agreements; and protect our legal, business, and security interests. 4. Legal Bases for Processing Where Applicable Where privacy laws require us to identify a legal basis for processing personal information, we may rely on one or more of the following legal bases: Performance of a contract: to provide and operate the Services you request, including account management, authentication, content features, search, recommendations, and social functionality. Consent: where we ask for your permission, such as for optional device permissions, contacts access, location permission, or certain communications. Legitimate interests: to improve the Services, personalize recommendations, secure the platform, prevent abuse, analyze usage, debug issues, develop features, and protect our rights, provided those interests are not overridden by your rights under applicable law. Legal obligations: to comply with laws, legal processes, regulatory obligations, and lawful requests. Protection of vital interests or public interests: where applicable and legally recognized. The legal basis may depend on the specific context, the type of information, the feature used, and the laws that apply to you. 5. How Information Is Shared We do not sell your personal information. We may share information in the ways described below. 5.1 With Other Users and the Public Depending on your activity and settings, information may be visible to other users or the public, including: profile information; username; profile photo; public posts; public reviews; public ratings; public lists; public wishlists; comments; tags and mentions; social interactions; content associated with places; and other content you choose to make public. You should assume that public content may be viewed, copied, screenshotted, shared, saved, indexed, or otherwise used by others outside Pachu’s control. 5.2 With Service Providers We share information with service providers that help us operate, host, secure, analyze, improve, and support the Services. These service providers may include providers of: cloud hosting and infrastructure; database and storage services; authentication services; analytics and session recording tools; AI and machine learning services; maps and place information; push notifications; email and communications; website hosting; app distribution; debugging and technical support; security tools; and customer support tools. Service providers may process information on our behalf and may have access to personal information as needed to provide their services. 5.3 Third-Party Services We Use The third-party services we use or may use include, without limitation: Google services, including Google authentication and Google Places API; Apple services, including Apple authentication and App Store-related services; Android / Google Play-related services; Supabase; Mapbox; OpenAI and other AI service providers; PostHog; Branch; Vercel; Gmail / Google Workspace-related services; Ontopo and other reservation or place-information sources; and other hosting, infrastructure, analytics, communication, development, or operational tools. This list may change over time as we develop the Services. 5.4 AI Service Providers We may share search inputs, reviews, place-related content, and other relevant information with AI service providers, including OpenAI, to support features such as smart search, review understanding, tagging, categorization, summarization, recommendations, moderation, and product improvement. 5.5 Analytics and Session Recording Providers We use PostHog for analytics and session recordings. Information processed by PostHog may include account identifiers, usage information, device information, interaction data, and screen/session activity. Pachu currently uses PostHog infrastructure in the United States. 5.6 Authentication Providers If you sign in using Google, Apple, or another authentication provider, we may share and receive authentication-related information as necessary to create, authenticate, and secure your account. 5.7 Location, Maps, and Place Providers We may use third-party map, location, and place-information providers to help identify and display places, show maps, provide place details, calculate proximity, and provide recommendations. When you use location-based features, information may be processed through these providers as necessary to provide the feature. 5.8 Ontopo and Reservation-Related Services The Services may display or use information obtained from Ontopo or other reservation or place-related providers. Pachu does not currently send your personal information directly to Ontopo. However, if you choose to click a link or move from Pachu to Ontopo or another third-party service, your interaction with that third-party service will be governed by that third party’s own terms and privacy policy. 5.9 Legal, Safety, and Compliance Sharing We may disclose information if we believe in good faith that disclosure is necessary or appropriate to: comply with applicable law, regulation, legal process, or governmental request; enforce our Terms of Service or other agreements; investigate potential violations; detect, prevent, or address fraud, abuse, security, or technical issues; protect the rights, property, safety, or security of Pachu, users, businesses, or others; respond to claims that content violates third-party rights; establish, exercise, or defend legal claims; or prevent harm. 5.10 Business Transfers If Pachu is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, change of control, or similar transaction, information may be transferred or disclosed as part of that transaction, subject to applicable law. 5.11 Aggregated, De-Identified, or Anonymous Information We may use and share aggregated, de-identified, or anonymized information that does not reasonably identify you for analytics, research, business, product improvement, reporting, and other lawful purposes. 6. Cookies, Device Identifiers, Analytics Technologies, and Website Tracking Because Pachu may operate both an application and a website, we may use cookies, local storage, device identifiers, SDKs, pixels, tags, analytics tools, and similar technologies. These technologies may be used to: keep you logged in; remember preferences; secure the Services; understand usage; measure performance; analyze website or app traffic; debug issues; improve features; conduct analytics; and support session recording or replay functionality. Some technologies are necessary for the operation of the Services. Others may be used for analytics or product improvement. You may be able to control cookies through your browser settings and device identifiers through your device settings. If you block or delete certain technologies, parts of the Services may not function properly. Where required by applicable law, we may provide additional notice, consent controls, or choices regarding cookies, analytics, or similar technologies. 7. International Data Transfers Pachu may process and store information in Israel, the United States, and other countries where we or our service providers operate. Because some of our service providers are located or operate outside your country, your information may be transferred to, stored in, or processed in countries that may have data protection laws different from those in your country. For example, Pachu currently uses PostHog infrastructure in the United States, and other service providers may process information in the United States or other jurisdictions. Where required by applicable law, we take steps designed to provide appropriate safeguards for international transfers of personal information. 8. Data Retention We retain personal information for as long as reasonably necessary to provide the Services, operate our business, comply with legal obligations, resolve disputes, enforce agreements, protect safety and security, prevent abuse, and maintain the integrity of the Services. Retention periods may vary depending on the type of information and the purpose for which it is processed. Examples: account information may be retained while your account is active; public content may remain available until deleted or removed, subject to account deletion rules and applicable law; private content may be retained as needed to provide the relevant feature; contacts-related information associated with your account may be retained while contact syncing is enabled and deleted when the app detects that you revoked Contacts permission or when your account is deleted; photos you uploaded may be deleted when your account is deleted, subject to technical limitations, backups, legal requirements, and processing time; posts and ratings may remain after account deletion without being connected to your personal profile; logs, analytics, and session recording data may be retained for product, security, debugging, and analytics purposes for a period determined by Pachu or the relevant service provider; legal, security, and support records may be retained as needed for legitimate business, legal, or compliance purposes. We may retain aggregated, de-identified, or anonymized information for longer periods where it does not reasonably identify you. 9. Account Deletion and Content After Account Deletion You may delete your account through the account deletion feature available in the Services. When you delete your account, we may delete, anonymize, de-identify, or dissociate personal information associated with your account, subject to applicable law, technical limitations, legal obligations, backup systems, safety needs, dispute resolution, and the integrity of the Services. After account deletion: your profile information, such as your name, username, email, phone number, and profile photo, may be deleted or dissociated from your account; photos you uploaded may be deleted; posts you created may remain available without your name or personal profile attribution; ratings may remain in the Services without being connected to your personal profile; certain content, records, logs, or technical information may be retained where necessary for legal, security, operational, backup, or dispute-resolution purposes; copies of content saved, shared, screenshotted, cached, or copied by other users or third parties may remain outside our control. Account deletion may not immediately remove information from backups, logs, analytics systems, third-party systems, or archives, but such information will be handled in accordance with this Privacy Policy and applicable law. 10. Your Privacy Rights and Choices Depending on where you live and the laws that apply to you, you may have certain rights regarding your personal information. These rights may include the right to: access certain personal information we hold about you; request a copy or export of certain personal information; correct or update inaccurate personal information; delete certain personal information; object to or restrict certain processing; withdraw consent where processing is based on consent; opt out of certain communications; manage device permissions; delete your account; and submit a complaint to a competent data protection authority. 10.1 Updating Account Information You can update account information, such as your name, username, email, phone number, and profile information, through the settings available in the Services. 10.2 Deleting Your Account You can delete your account through the account deletion feature in the Services. 10.3 Requesting a Copy of Your Data You may request a copy of certain personal information associated with your account through the data export feature available in the Services or by contacting us at: amitchimya@pachu.app We may need to verify your identity before processing certain requests. 10.4 Managing Device Permissions You can manage permissions such as location, contacts, camera, photos, and notifications through your device settings. If you disable certain permissions, some features may not work properly. 10.5 Push Notifications You may manage push notifications through your device settings and, where available, through notification settings in the Services. 10.6 Contacts Permission Contacts access is optional. You can manage contacts permission through your device settings. When the app next detects that you revoked Contacts permission, it disables contact matching and requests deletion of the active contact-sync data associated with your account. Contacts-related information may also be deleted when your account is deleted. 10.7 Public Content You may be able to delete certain posts or content you created through the Services. However, deleting content may not remove copies that others have saved, shared, screenshotted, cached, copied, or otherwise stored outside the Services. 10.8 How to Exercise Rights To exercise privacy rights or submit a privacy request, contact us at: amitchimya@pachu.app We may ask you to provide information needed to verify your identity and process your request. We may decline or limit requests where permitted by applicable law, including where a request is unlawful, excessive, repetitive, technically infeasible, compromises the rights of others, or conflicts with legal obligations. 11. Security We use reasonable technical, organizational, and administrative measures designed to protect personal information against unauthorized access, loss, misuse, disclosure, alteration, or destruction. However, no online service, database, network, storage system, or transmission method is completely secure. We cannot guarantee absolute security of your information. You are responsible for maintaining the confidentiality of your account credentials and for using the Services in a safe and responsible manner. If you believe your account or information has been compromised, please contact us immediately at: amitchimya@pachu.app 12. Third-Party Links and Services The Services may contain links to third-party websites, apps, services, reservation platforms, maps, content, or integrations. This Privacy Policy does not apply to third-party services that Pachu does not control. If you click a third-party link, use a third-party service, authenticate through a third-party provider, make a reservation through a third-party platform, or otherwise interact with a third party, that third party’s own terms and privacy policy will apply. We are not responsible for the privacy practices, security, content, accuracy, or policies of third-party services. 13. Business Users and Future Features Pachu currently focuses on private individual users. In the future, we may introduce features for businesses, restaurants, venue owners, advertisers, creators, or other partners. If we introduce business accounts or materially different data practices, we may update this Privacy Policy or provide additional notices as appropriate. 14. Do Not Sell Personal Information Pachu does not sell your personal information. If we share analytics, insights, trends, or performance information with businesses, partners, or third parties, we aim to do so in aggregated, de-identified, or anonymized form that does not reasonably identify individual users, unless otherwise disclosed or permitted by applicable law. 15. Changes to This Privacy Policy We may update this Privacy Policy from time to time. If we make material changes, we may notify you through the Services, by email, or by other reasonable means. The updated Privacy Policy will be effective as of the “Last Updated” date shown at the top, unless otherwise stated. Your continued use of the Services after the updated Privacy Policy becomes effective means that you acknowledge the updated Privacy Policy. 16. Contact Us If you have questions, requests, complaints, or concerns about this Privacy Policy or our handling of personal information, please contact us at: Pachu Email: amitchimya@pachu.app