Privacy Policy
This Privacy Policy explains how AasPaas (“we”, “us”, “our”) handles information when you use the AasPaas mobile application and related services (the “Service”). By using the Service, you agree to this policy.
1. Who we are
AasPaas is a travel and local-discovery app focused on community-backed city experiences. For privacy questions or requests, contact us at privacy@aaspaas.app.
2. Information we collect
We collect information in these categories:
- Account information — email address, display name, and authentication details. If you sign up with email and password, your password is stored only as a secure hash, not in plain text.
- Profile information — optional details such as home city and travel preferences you choose to provide.
- User content — experiences, questions, saves, journeys, and other content you create or store in the app.
- Approximate location (optional) — if you grant permission, we read your device location while the app is in use to suggest nearby cities and local content. We use foreground location only; we do not track your location in the background.
- Push notification token (optional) — if you enable notifications on a supported build, we store a device push token so we can send alerts you opt into (for example, questions in your home city).
- Technical data — basic request metadata needed to operate the Service (for example, IP address, device platform, and timestamps) when you call our API.
3. How we use information
We use your information to:
- Create and manage your account and session
- Verify your email and process password reset requests
- Display city content, saves, journeys, and community posts
- Show nearby or relevant city experiences when location is enabled
- Send optional notifications you configure in Settings
- Protect the Service against abuse, spam, and unauthorized access
- Improve reliability and fix errors
We do not use your information for third-party advertising, and we do not sell personal data.
4. Location
Location is optional. If you deny permission, you can still browse cities manually. When granted, location is used to personalize nearby content on your device and in requests to our servers. Your precise coordinates are not shown to other users as a live map pin or public profile field.
You can revoke location access anytime in your phone’s system settings. The app also caches recent coordinates locally for a short period to avoid repeated GPS waits.
5. Sign in with Google (and other providers)
If you choose Google or Apple sign-in, we receive basic profile information from that provider (such as your name and email) to create or link your AasPaas account. We do not receive your third-party account password. Provider handling of your data is governed by their own privacy policies.
6. How we share information
We share information only in these situations:
- Public community content — experiences and questions you post may be visible to other users in the relevant city context, along with your display name.
- Service providers — we use trusted vendors to run the Service, including hosting (for example Render), transactional email (for example Resend for verification and password reset), and push delivery (Expo) where enabled. These providers process data on our behalf under contractual safeguards.
- Legal requirements — if required by law, regulation, or valid legal process.
- Safety — to protect users, the public, or the Service from fraud, abuse, or security incidents.
We do not share your email address or location with other users by default.
7. Data retention
We keep your account and content while your account is active. Email verification and password-reset tokens expire automatically after a short period. Cached location on your device expires according to app settings.
If you delete your account in the app, we delete or anonymize associated personal data, subject to limited retention where required for security, fraud prevention, or legal compliance.
8. Your choices and rights
Depending on where you live, you may have rights to:
- Access or update profile information in the app
- Delete your account from the Profile tab
- Opt out of optional notifications in Settings or system settings
- Deny or revoke location permission
- Request a copy or deletion of personal data by emailing us
We will respond to reasonable requests within a practical timeframe. We may need to verify your identity before processing certain requests.
9. Security
We use industry-standard measures including HTTPS in transit, hashed passwords, secure token storage on mobile devices, rate limiting, and access controls on our API. No method of transmission or storage is 100% secure; please use a strong, unique password and keep your device updated.
10. Children
The Service is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.
11. International users
AasPaas may be operated from India and uses service providers in other countries. By using the Service, you understand that your information may be processed in locations where our providers operate, with appropriate safeguards.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version at this URL and update the “Last updated” date. Continued use after changes means you accept the updated policy.
13. Contact
Questions about this Privacy Policy or your data: privacy@aaspaas.app