Privacy Policy

Last updated: 20 August 2026

This describes what PolishBuddy's product actually collects and stores, based directly on its real database schema — not a generic template. It uses placeholder company/DPO details until real ones are supplied, and should be reviewed by a qualified lawyer before public launch, particularly for GDPR compliance given the EU user base.

1. What we collect

Data	Why
A random device identifier (not your name)	To recognize your device across visits without requiring an account
Chat messages with Buddy	To hold a conversation and generate replies
Travel DNA (destination, style, interests, budget lean, etc.)	To personalize recommendations
Saved places, visited places, feedback (Loved it / Too crowded / etc.)	To power My Poland and improve future recommendations
Trips and trip items you create	To power the trip-planning feature
Email address (only if you pay, tip, or use account recovery)	Payment receipt and device-recovery link
Basic usage events (page views, mode selections, clicks)	Product analytics

2. What we don't collect

We don't require your real name, a password, or a traditional account to use PolishBuddy. We don't sell your data to third parties.

3. Where it's stored

Data is stored in a Supabase (PostgreSQL) database. Chat replies are generated by OpenAI's API — your messages are sent there to generate a response, subject to OpenAI's own data-handling terms. Payments are processed by Stripe; PolishBuddy does not see or store your card details.

4. PolishLocal businesses

If PolishBuddy shows a business as a "PolishLocal Partner," basic business information (name, category, contact channels) may come from that business or from PolishLocal directly, not from you.

5. Your choices

Clearing your browser storage disconnects your device from your existing data (use the email recovery flow first if you want to keep an active pass).
Contact us to request deletion of your data.

6. Contact

Privacy questions or deletion requests: hello@polishbuddy.com.