Privacy Policy

1. Who we are

MeetNomads Bali is operated as an early-stage pilot product focused on Bali. For privacy questions or requests, contact us at hello@straymeet.app.

2. Who this applies to

This policy applies if you:

• create an account or use MeetNomads as a traveler;
• manage a stay listing as an assigned owner during our pilot;
• scan a stay QR code or visit a stay hub page.

3. Data we collect

Account & authentication

• Email address and password (stored securely via our auth provider).
• If you use Google Sign-In: basic profile info from Google (such as email and name).
• Session cookies needed to keep you signed in.

Traveler profile

• Display name, country flag, languages, interests (optional).
• Where you indicate you are staying (optional).

Plans & participation

• Plans you create (title, description, date, time, location, category, language, capacity, price if set).
• Plans you join and your display name shown to other participants.

Chat

• Messages you send in plan chats, stay chats, and community language rooms.
• Pinned messages in plan or stay chats (set by hosts or owners).

Stay QR & check-in

• When you scan a stay QR code, we record the scan to grant short-term stay chat access and show aggregated scan stats to the stay owner.
• If you complete check-in, we may set your profile’s “staying here” place.

Stay owners (pilot)

• Owner email assigned by MeetNomads admin, listing details you edit, recurring weekly plans, and QR usage statistics.

Technical data

• IP address, browser/device type, and server logs for security and debugging.
• Map viewport or filter preferences if reflected in shareable URLs.

Local storage

• Saved stay favorites may be stored in your browser only (not synced to your account in the current MVP).

4. How we use your data

We use personal data to:

• provide accounts, profiles, plans, maps, and chat;
• connect travelers with stay hubs and weekly activities during the pilot;
• enforce access rules (e.g. plan chat for participants, stay chat for guests/owners);
• expire past plans and maintain service security;
• respond to support requests and improve the product.

We do not sell your personal data.

5. Legal bases (EEA/UK users)

Where applicable, we rely on:

• Contract — to provide the service you sign up for.
• Consent — where you agree to Terms and this Policy at registration.
• Legitimate interests — security, fraud prevention, and improving the pilot, balanced against your rights.

6. Who we share data with

We use trusted processors to run MeetNomads:

• Supabase — database, authentication, and realtime chat infrastructure.
• Vercel — application hosting.
• Google — if you choose Google Sign-In.
• OpenStreetMap / map tile providers — map display (no account data sent beyond normal web requests).

Other users see information you choose to make visible in the app (e.g. your display name on plans and in chats, public stay listings). We do not share your email with other travelers.

We may disclose data if required by law or to protect users and the service.

7. Retention

• Account and profile data: while your account is active.
• Plans: upcoming plans are shown until their date passes; past plans are expired/archived per our system rules.
• Chat: plan-related chat data may be removed when plans expire; community and stay chat history may be kept for the pilot period unless deleted as part of account removal.
• QR scans: used for access windows (e.g. recent scans) and owner statistics.

You may request account deletion (see Section 9).

8. International transfers

Our infrastructure providers may process data outside your country (including the EU and Indonesia). Where required, we rely on appropriate safeguards offered by those providers.

9. Your rights

Depending on your location, you may have the right to:

• access, correct, or delete your personal data;
• object to or restrict certain processing;
• withdraw consent where processing is consent-based;
• lodge a complaint with your local data protection authority.

To exercise these rights, email hello@straymeet.app. We may need to verify your identity. You can update much of your profile directly in the app.

10. Children

MeetNomads is not intended for users under 16. If you believe a child has provided us data, contact us and we will delete it.

11. Security

We use industry-standard measures (HTTPS, authenticated APIs, access rules in our database). No online service is 100% secure; please use a strong password and report suspicious activity.

12. Cookies

We use essential cookies and similar technologies for login sessions. We do not use third-party advertising cookies in the current MVP. If we add analytics later, we will update this policy.

13. Changes

We may update this Privacy Policy as the product evolves. We will post the new version on this page and update the “Last updated” date. Continued use after changes means you accept the updated policy.

14. Contact

Email: hello@straymeet.app
See also our Terms of Use.