Contacts and location require your choice. Photos are selected individually through Apple’s picker; current notifications appear inside the app.
We do not use activity from the app to serve ads in other companies’ apps or websites.
Contact names are not read. Contact phone numbers are normalized and hashed on your device before matching.
When-in-use location supports nearby results. GalliGo does not intentionally run continuous background location tracking.
Scope and operator
This Privacy Policy describes how GalliGo LLC ("GalliGo," "we," "us," or "our") handles personal information through the GalliGo iPhone application, galligo.app, and related support and communications (together, the "Service").
GalliGo LLC is the operator of the Service and, where applicable, the controller of personal information described here. Questions and privacy requests can be sent to support@galligo.app.
Information we collect
Your phone number and one-time authentication codes, account identifier, display name, optional bio and avatar, and—where an alternate sign-in flow is available—email address. Authentication tokens are stored on your device using protected system storage.
Saved places; visits, endorsements, recommendations, replies, notes, visit dates, and visibility choices; lists and trips; trip dates, collaborators, notes and photos; home locations and residence dates; shared experiences; friend connections; invites; and related activity.
Images you select through Apple’s system photo picker, plus associated filenames, file type and size, upload time, caption, and the trip, home, list, or collection to which you attach them. The picker lets you choose a specific image without giving GalliGo blanket access to your library. Selected files may contain embedded metadata; GalliGo does not currently promise that every such field is removed before upload.
When you allow location while using the app and invoke a nearby feature, your current device location and accuracy value may be used to request nearby places. Search terms, selected Google Place identifiers, place names, addresses, and public place coordinates may also be processed and stored. If a device fix fails, an IP-based provider may return an approximate location.
If you choose Find Friends from Contacts, the app reads phone numbers only—not contact names—normalizes and SHA-256 hashes them on your device, and sends only those hashes for matching. The server maintains a matching hash of a member’s own sign-in phone number. The submitted contact-hash list is used to return matching profiles and is not saved as an address book.
In-app notification records and read state, invite and route information, service requests, security and server logs, IP address and device/network metadata generated when the Service is used, and information you include when contacting support.
Information from other people and public sources
Other members may provide information involving you—for example, a friend request, recommendation, trip invitation, companion proposal, shared experience, or photo. We also receive public place and map information and imagery from third-party providers. We do not treat a third party’s place listing, map, image, or hours as information supplied by you.
App analytics
The current app records limited product-interaction events in a size-capped file on the device for development and diagnostics. That app event file is not currently transmitted to a third-party analytics service. Certain shared-experience state changes and ordinary service operations are recorded in the GalliGo backend because they are necessary to provide and synchronize those features.
How we use information
We use personal information to:
- create, authenticate, maintain, and secure accounts;
- provide place discovery, recommendations, travel logs, maps, lists, trips, photos, homes, shared experiences, invitations, and in-app notifications;
- match contacts when you explicitly request that feature;
- show nearby places after you grant location permission;
- apply your sharing choices and determine which people may see social or collaborative information;
- respond to support, privacy, safety, and legal requests;
- prevent spam, fraud, abuse, unauthorized access, and technical failures;
- understand performance and improve the reliability and design of the Service; and
- comply with law and enforce our Terms of Service.
Legal bases where applicable
Where data-protection law requires a legal basis, we rely on: performance of our contract to provide the Service you request; consent for optional device permissions and choices; legitimate interests in operating, securing, supporting, and improving the Service in ways that do not override your rights; and legal obligations when processing is required by law. You may withdraw consent through device settings or by contacting us, without affecting processing already completed lawfully.
Visibility and social features
GalliGo is social, but not every feature has the same visibility boundary:
- Basic profiles and review records: current service permissions allow these records to be read broadly through the Service, not only by your circle. Treat profile information and review records as public within, and potentially through interfaces to, the Service.
- Place activity and notes: reviews, endorsements, recommendations, or attribution may be visible broadly. A note’s text may have a circle-sharing control in the app, and new log notes may default to circle sharing, but that interface control does not currently guarantee that the underlying review record is inaccessible through every service interface.
- Trips and shared experiences: information is generally shown to the people connected to that collaboration, proposal, or history, subject to feature rules.
- Saved places: saving for later and logging a past visit are different actions and may have different visibility in the Service.
- Homes: accepted friends may be able to read stored home-location details, including exact coordinates. Avoid adding a home location if you do not want accepted friends to have that information.
- Uploaded media: trip photos, home photos, collection covers, and avatars are stored at publicly retrievable file URLs. GalliGo restricts who may list or modify files, but a person who obtains a direct file URL may be able to view it. Do not upload sensitive images that should never be publicly retrievable.
Share thoughtfully. Before posting a note, recommendation, residence-related detail, or photo, check the feature context and avoid sharing another person’s sensitive information without permission.
Website data and cookies
When you visit galligo.app, our hosting and analytics providers may automatically receive your IP address, browser and device type, referring page, pages viewed, timestamps, and interactions. HubSpot and Google Analytics may use cookies, pixels, or similar technologies for security, site operation, traffic measurement, and performance analysis. The site uses HubSpot’s consent tools and Google Consent Mode; Google advertising and analytics storage are set to denied by default until a relevant consent choice permits them.
These providers may be able to collect information about visits over time and across websites, depending on your browser, account, consent, and provider settings. GalliGo does not use activity from the app to build a third-party advertising profile. You can limit cookies through your browser and the controls made available on the website, although blocking necessary technologies can affect site operation. Because browsers do not provide a single, universally accepted Do Not Track standard, galligo.app does not currently respond differently to browser Do Not Track signals.
Retention and deletion
We keep account and service information for as long as needed to provide the Service, maintain the feature or collaboration in which it appears, protect the Service, resolve disputes, enforce agreements, and meet legal obligations. Retention depends on the information and why it is used rather than one universal period.
- Account and profile information is generally retained while the account remains active.
- User content is retained until you remove it, the relevant feature removes it, or the account is deleted, subject to shared-content, backup, safety, and legal considerations.
- Authentication, security, and operational records may be kept for a reasonable period needed to prevent abuse, maintain integrity, or comply with law.
- Service-provider backups may retain residual copies until their normal backup cycles complete.
To request deletion of your account and associated personal information, email support@galligo.app and include the phone number associated with your account. We will reply with identity-verification steps; never send us a password or one-time code. We process verified requests in accordance with applicable law and delete or de-identify account information and your User Content, including uploaded files, except where retention is legally required for security, fraud prevention, disputes, or another specific legal obligation.
Content another person independently created about their own experience, and information that has been aggregated or de-identified so it no longer identifies you, may not be treated as your account data. We do not retain your contributions merely to preserve another member’s copy when applicable law or platform rules require their deletion.
Your choices and rights
You can:
- edit available profile information in the app;
- change Contacts and Location access in iOS Settings;
- choose individual photos through Apple’s photo picker;
- manage available note-sharing, collaboration, friend, and notification controls;
- log out to end the current session on the device; and
- contact us to request access, correction, export, deletion, restriction, or objection where applicable.
Depending on where you live, you may have rights to know or access personal information; correct inaccurate information; delete information; obtain a portable copy; restrict or object to processing; withdraw consent; and appeal or complain to a data-protection authority. You will not be discriminated against for exercising a privacy right. We may request information needed to verify identity and authority, and lawful exceptions may apply.
GalliGo does not use information from the app for cross-context behavioral advertising. Website analytics described above may be subject to opt-out rights where applicable. To exercise an applicable opt-out or ask whether one applies to you, contact us. Authorized agents may submit a request where local law permits, subject to verification.
Security and international transfers
We use administrative, technical, and organizational measures intended to protect information, including authenticated access, row-level database policies, protected iOS credential storage, owner-scoped upload controls, and encrypted network connections where supported. No system is perfectly secure, and we cannot guarantee that information will never be accessed, disclosed, altered, or lost.
GalliGo and its providers may process information in the United States and other countries. Those countries may have different data-protection laws. Where required, we take steps intended to support lawful transfers, such as using appropriate contractual protections. Contact us for information about protections applicable to a particular transfer.
Children
GalliGo is not directed to children under 13, and children under 13 may not create or use an account. We do not knowingly collect personal information from a child under 13. If we learn that we have done so, we will take appropriate steps to delete it. If you believe a child has provided personal information in violation of this section, contact support@galligo.app. Age and consent requirements may be higher in some locations.
Changes and contact
We may update this policy as the Service, providers, or law changes. We will post the revised version here and change the effective date. If a change materially affects how we use information already collected, we will provide additional notice or seek consent when required.
For privacy questions, rights requests, or concerns, contact:
GalliGo LLC
support@galligo.app
https://galligo.app
A direct line
Your privacy question should reach a person.
Use the subject line “GalliGo Privacy Request” and include the phone number or email associated with your account when appropriate. Do not send passwords or one-time codes.
Contact GalliGo LLC