Privacy Policy

Last updated: 28 June 2026

This Privacy Policy explains what information Pandu ("Pandu", "we", "us") collects when you use the Pandu mobile app and website (pandu.me), how we use it, and the choices you have. Pandu is a map-first travel-discovery service. You can browse much of Pandu without an account.

Information we collect

Account information. When you create an account we process your email address (via our authentication provider, Amazon Cognito) and the profile details you choose to add — display name, handle, bio, and an optional profile photo.

Content you create. Places you save, collections and guides you build, posts, comments, and direct messages you send. Photos you upload are stored in our private cloud storage.

Usage & device data. Basic analytics about how the app is used (for example, which places or guides are opened and searches performed), together with a per-install device identifier used to manage your signed-in sessions and to power the "where you're logged in" feature.

Approximate location. When you use the map, we use the map region you are viewing to fetch nearby places. We do not track your location in the background.

How we use your information

• To provide and operate the service — showing the map, guides, your saved places, your feed, comments, and messages.
• To personalise what you see. Interest signals (such as the categories you browse) are kept on your device to rank the places and guides shown to you.
• To keep Pandu safe — handling reports and blocks, and preventing spam and abuse (including our message-request controls).
• To communicate with you about the service, and — if you join our waitlist — to let you know when Pandu is available.

How information is shared

We do not sell your personal information. We share information only with:

• Other users, for the content you choose to make public (your public profile, posts, guides, and comments). Direct messages are visible only to the people in the conversation.
• Service providers that run our infrastructure — including Amazon Web Services (hosting, database, and storage) and Amazon Cognito (authentication) — and map/place data providers used to display the map. These providers process data on our behalf.
• Legal reasons, if required to comply with the law or to protect the rights and safety of our users.

Data storage & security

Data is stored on Amazon Web Services in the United States. Uploaded media is kept in private storage and served through short-lived, signed links. We use industry-standard measures to protect your information, though no method of transmission or storage is completely secure.

Your choices

• Browse without an account — most of Pandu is available signed-out.
• Edit or delete your profile and content from within the app.
• Delete your account at any time from the app; this removes your account and associated personal content.
• Block and report users or content that violate our terms.
• Leave the waitlist by contacting us at the address below.

Children

Pandu is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will delete it.

International users

By using Pandu, you understand your information may be processed in the United States and other countries where our service providers operate, which may have different data-protection laws than your own.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date above and, where appropriate, notifying you in the app.

Contact us

Questions about this policy or your data? Email steven.lee@pandu.me.