Privacy Policy

PITOM is a personal discovery platform. We build personalised experience plans — a mix of free places and bookable activities — from real, factual sources.

The legal entity operating PITOM is [PITOM legal entity name], with a registered address at [registered address]. Our privacy contact address is [privacy contact email].

• Waitlist — your email address, and the date you joined. Nothing else.
• Account — if you create an account, your email address and a display name, handled by our authentication provider.
• Discovery preferences — the answers you give during onboarding (destination, mood, time available, budget, who you're with, adventure level) and the items you keep or dismiss.
• Technical information — standard request data such as IP address, browser type and timestamps, processed by our hosting and backend providers to run and secure the service.

We do not ask for your name, phone number, age, address, precise device location or payment details in order to join the waitlist.

• To generate the discovery plans you ask for.
• To remember what you kept or dismissed so plans improve over time.
• To email you about the launch and related PITOM updates, if you joined the waitlist.
• To keep the service secure, debug problems and prevent abuse.
• To understand, in aggregate, which parts of the product are useful.

We do not use your information to make automated decisions that produce legal or similarly significant effects about you.

Where a legal basis is required by the law that applies to you, we rely on your consent, the performance of our agreement with you, our legitimate interests in running and securing the product, and compliance with legal obligations. The region-specific section below sets out how this works in your region.

• Waitlist emails — until launch communications are complete or you ask to be removed, whichever comes first.
• Account and preference data — while your account is active, and deleted within a reasonable period after you delete your account.
• Technical logs — retained for a short operational period by our infrastructure providers.

We do not sell your personal information. We share it only with the service providers we need to run PITOM, and where the law requires disclosure.

• Backend, database, authentication and hosting — Supabase and our application hosting provider, which store your account, preferences and waitlist entry.
• Mapping and place data — OpenStreetMap services (Nominatim and Overpass) receive the destination and area you ask about, so we can return real places. They do not receive your identity.
• Experience providers — GetYourGuide widgets are embedded to show bookable activities. When a widget loads or you click through, your browser contacts GetYourGuide directly and their own privacy policy applies to what they collect.

Our service providers act as processors on our instructions, except where they act as independent controllers for their own services (such as GetYourGuide for bookings you make with them).

PITOM is operated with cloud infrastructure that may be located outside your country. When information moves across borders, we rely on the transfer mechanism recognised by your local law, as described in the region-specific section below.

These are the technologies actually used by PITOM today:

• Strictly necessary — browser storage used to keep you signed in and to remember the discovery answers you gave, so the plan survives a page refresh. The site does not work without these.
• Analytics — aggregate usage measurement provided by our hosting platform. We do not build advertising profiles from it.
• Affiliate / referral tracking — embedded GetYourGuide widgets carry a PITOM partner identifier and campaign tag so that bookings made after a click-through are attributed to us. GetYourGuide sets its own cookies and tracking in that embedded context, under its own privacy policy. We may earn a commission on those bookings; commission never influences what we recommend or the order in which we show it.

We do not run advertising networks, retargeting pixels, session recording or cross-site tracking of our own. A cookie consent banner is not currently deployed. Whether one is required will be confirmed as part of our launch review — until then we make no claim that our current setup satisfies consent requirements in every region: [cookie consent review status].

Waitlist entries can be submitted by the public but cannot be read back by website visitors — access is restricted at the database level. Account and preference data are protected by row-level security rules so that a signed-in user can only reach their own records. Data is transmitted over encrypted connections. No system is perfectly secure, and we cannot guarantee absolute security.

PITOM is not directed at children. We do not knowingly collect personal information from anyone under 16 (or the higher minimum age set by your local law). If you believe a child has given us information, contact us and we will delete it.

Depending on where you live, you may have rights to access, correct, delete, port, restrict or object to our use of your information, and to withdraw consent. The region-specific section below sets out what applies to you.

To make a request, or to be removed from the waitlist, write to [privacy contact email]. We will respond within the period required by the law that applies to you. We may need to verify your identity first.

We will update this page when our practices change, and we will change the effective date at the top. If a change materially affects how we use your information, we will tell you by email where we have one.