Privacy Policy

Pylur helps you see your saved places and, if you choose, your friends' locations as beams of light. Location is sensitive, so we collect as little as possible and you stay in control.

What we collect

• Account: your email address (to sign you in with a one-time code) or your Apple ID sign-in, your handle, display name, optional bio and photo, beam colour and birth year (only the year, to apply age protections).
• Pylurs: the places you save — name, description, optional address, coordinates, icon and colour. You choose who can see each one: only you (plus friends you explicitly share it with) or all your friends. Pylurs are never public. Photos you add are stored privately, with hidden data such as GPS removed, and are shown only to people who can see that Pylur.
• Friends: who you are friends with, pending requests and people you have blocked.
• Drops (iPhone app): short notes or photos you choose to leave at a place, with their location. They are public but can only be read by people physically nearby, and expire after about a day. Photo metadata (including GPS) is removed.
• One-time pins: a single position you choose to send to specific friends. It expires and is never updated.
• Presence check (iPhone app): while Lens or Discover is open, your latest position is privately checked to confirm you are really near a Drop before it unlocks. Nobody can see it and it is deleted after an hour of inactivity.
• Live location — only while you share: when you share with a friend, we store your latest position (and its accuracy). Each update replaces the previous one. We keep no location history. It is visible only to the friends and squads you chose, only until your share or squad ends, and is deleted automatically within 24 hours of your last update.

What we don't do

• We do not sell or rent your data, and we do not use it for advertising.
• We do not keep a history of where you have been.
• There is no public directory: people can only find you by typing your exact handle.
• Your camera image in Pylur Lens is processed on your device and is never uploaded (unless you save a Snap or post a Drop photo yourself).

Who can see what

Your Pylurs are visible only to you and the friends you choose. Your profile (handle, display name, photo, colour) is visible to people you are friends with, have a pending request with, or share a squad with. Your live location is visible only to friends you are actively sharing with and squads you joined. Blocked people can't find you, send requests or see you.

Service providers

Our servers and database run on Railway; profile photos and Moments are stored on Cloudflare R2; sign-in emails are sent by Resend. If address search is enabled, the search text (not your location) is sent to Mapbox to find matching addresses. Sign in with Apple is handled by Apple.

Security

Data is encrypted in transit (HTTPS). Database access rules ensure each person can only read data they are allowed to see. Sign-in uses one-time codes or Sign in with Apple, so there are no passwords to leak. On the website your session is kept in secure, http-only cookies that page scripts cannot read.

Your choices and rights

• Stop sharing your location at any time; shares also expire automatically.
• Edit or delete any place, unfriend or block anyone.
• Delete your account from Profile settings. This permanently deletes your profile, photo, Pylurs, Drops, friendships, squads, shares, pins and last location.
• Contact us to access or export your data, or with any privacy question: [email protected] (placeholder).

Children

Pylur is not intended for children under 13 (or the minimum age in your country).

Changes

We will post updates here and, for significant changes, tell you in the app.