Privacy policy

Last updated 6 November 2026

Paikan (ไปกัน) is a group trip app: the people in a trip can see where each other are and chat. Your location is personal, so this policy explains what we collect, why, who sees it, how long we keep it, and the rights you have under Thailand’s Personal Data Protection Act (PDPA).

What we collect

• Account: your display name, email address, profile picture (if you add one), language, and the ID that Google, Apple, LINE or Facebook gives us when you sign in with them.
• Location: your phone’s precise location, with its accuracy, speed, heading and battery level, while you share your location in a trip. If you allow it, this continues while Paikan is in the background or closed, so your trip can still see you.
• Trip content: the trips you create or join, your settings in each trip, chat messages, photos, locations and links you send.
• Trip money, if your trip uses it: the bills, trip fund entries and receipt photos that members add, and who has paid. Paikan never handles the money itself: members pay each other outside the app. If you add a PromptPay ID (a phone number or e-wallet ID, never a national ID number), we store it so people who owe you can pay you.
• Trip plan and announcements: itinerary items members add (such as flights, hotels and other bookings, with their times, places, booking references and notes), the documents attached to them (PDFs and photos, such as tickets and booking confirmations), announcements, and who has confirmed them. Please don’t upload passports or ID cards: nobody in a trip needs a copy, and we don’t want them.
• Device: a push-notification token and your phone’s platform, so we can send you trip notifications.
• Purchases: if you buy Premium or a trip pass, the App Store or Google Play processes the payment. We receive the product, the transaction ID and the dates through RevenueCat. We never see your card details.
• Logs: our servers record technical information such as IP addresses and request times, kept for a short time for security and fixing problems.

How we use it

• To show your location to the members of a trip, only while you choose to share in that trip, and in the way you choose (Live, Approximate or Paused).
• To run chat, notifications, trips and invites.
• To provide Premium features you pay for, such as faster updates and breadcrumb trails.
• To keep the service secure, prevent abuse, and fix problems.

We process your location on the basis of your consent, which you give when you start sharing and can withdraw at any time by pausing, leaving the trip, or turning off location access. The rest is processed to provide the service you signed up for (contract) and for our legitimate interest in keeping it safe.

Who can see your location

• Only the members of a trip, and only while you share in that trip. In Approximate mode they see an area of a few kilometres, never your exact position. When you pause, they see that you paused, not where you are.
• Members can only see others while they are sharing too (“share to see”). This rule is enforced on our servers.
• You choose separately for each trip, and “Stop sharing everywhere” in Settings pauses every trip at once.
• Trip money is seen by the members of that trip. Your PromptPay ID is shown only to people who owe you money in one of your trips.
• Trip plan items and their documents are seen by the members of the trip, or, when an item is kept to the people it’s for, only by them and the person who added it. Who has confirmed an announcement is seen by the members of the trip.

Who we share data with

We do not sell your personal data. We share it only with:

• The members of your trips, as described above.
• Service providers that run parts of Paikan for us, under contracts that limit their use of the data: Vercel (hosting, in Singapore), Neon (database), Upstash (cache), Resend (sign-in emails), Google Firebase (push notifications), RevenueCat (purchases), and our map tile provider (which receives your IP address and the map area you view, not your shared location).
• Google AdMob, which shows ads in the free version. Like any online service it sees your IP address, and it may use your device’s advertising ID if you agree in the consent form. We never give your location to AdMob.
• Authorities, when the law requires it.

Some of these providers store data outside Thailand, mainly in Singapore. We use providers with appropriate safeguards for these transfers, as the PDPA requires.

How long we keep it

• Location history is deleted after 30 days. The free plan shows only the last 24 hours.
• Your last known position in a trip is kept until you leave the trip or it ends.
• Chat messages, photos, announcements and the trip plan stay in the trip for its members. Deleted plan items can be restored for 7 days; then they and their documents are deleted.
• When you delete your account, we delete your location data, sign-in methods, devices, PromptPay ID, profile, the trip plan documents you uploaded and plan items only you could see at once. Messages and announcements you sent, plan items you added for others, and trip money records stay in the trip for the other members, but are no longer linked to you. Purchase records are kept, linked to an anonymous account, where the law or the app stores need them (for example for accounting and refunds).

Your rights

Under the PDPA you can ask to access or get a copy of your data, correct it, delete it, restrict or object to how we use it, move it to another service, and withdraw your consent at any time. You can change your name, sharing and visibility in the app, and delete your account in Settings. For anything else, email us at privacy@paikan.app and we will reply within 30 days. You can also complain to Thailand’s Personal Data Protection Committee (PDPC).

Children

Paikan is not meant for children under 13, and we do not knowingly collect their data.

Security

Data is encrypted in transit. Photos and documents are stored privately and shown only through short-lived links to the members of the trip. Sign-in codes and tokens are stored only as hashes. No system is perfectly secure, so tell us at privacy@paikan.app if you find a problem.

Changes and contact

If we change this policy in a way that matters, we will tell you in the app before the change takes effect. Questions: privacy@paikan.app.